CVE-2022-3746 (ideapad_1-14ijl7_firmware, ideapad_1-15ijl7_firmware, ideapad_1_14iau7_firmware, ideapad_1_14igl7_firmware, ideapad_1_15iau7_firmware, ideapad_1_15igl7_firmware, ideapad_3-14igl05_firmware, ideapad_3-14iil05_firmware, ideapad_3-14iml05

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to cause some peripherals to work abnormally due to an exposed Embedded Controller (EC) interface.

bios consumer controller cve embedded exposed interface lenovo local notebook peripherals privileges vulnerability work