CVE-2022-3744: Lenovo Ideapad 1-14ijl7 Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential.

Affected products

  • Lenovo Ideapad 1-14ijl7 Firmware: before htcn31ww (fixed in htcn31ww)
  • Lenovo Ideapad 1-15ijl7 Firmware: before htcn31ww (fixed in htcn31ww)
  • Lenovo Ideapad 1 14iau7 Firmware: before jkcn34ww (fixed in jkcn34ww)
  • Lenovo Ideapad 1 14igl7 Firmware: before kkcn15ww (fixed in kkcn15ww)
  • Lenovo Ideapad 1 15iau7 Firmware: before jkcn34ww (fixed in jkcn34ww)
  • Lenovo Ideapad 1 15igl7 Firmware: before kkcn15ww (fixed in kkcn15ww)
  • Lenovo Ideapad 3-14igl05 Firmware: before dvcn28ww (fixed in dvcn28ww)
  • Lenovo Ideapad 3-14iil05 Firmware: before emcn56ww (fixed in emcn56ww)
  • Lenovo Ideapad 3-14iml05 Firmware: before dxcn44ww (fixed in dxcn44ww)
  • Lenovo Ideapad 3-14itl05 Firmware: before gccn32ww (fixed in gccn32ww)
  • Lenovo Ideapad 3-14itl6 Firmware: before ggcn51ww (fixed in ggcn51ww)
  • Lenovo Ideapad 3-15igl05 Firmware: before dvcn28ww (fixed in dvcn28ww)
  • Lenovo Ideapad 3-15iil05 Firmware: before emcn56ww (fixed in emcn56ww)
  • Lenovo Ideapad 3-15iml05 Firmware: before dxcn44ww (fixed in dxcn44ww)
  • Lenovo Ideapad 3-15itl05 Firmware: before gccn32ww (fixed in gccn32ww)
  • Lenovo Ideapad 3-15itl6 Firmware: before ggcn51ww (fixed in ggcn51ww)
  • Lenovo Ideapad 3-17iil05 Firmware: before emcn56ww (fixed in emcn56ww)
  • Lenovo Ideapad 3-17iml05 Firmware: before dxcn44ww (fixed in dxcn44ww)
  • Lenovo Ideapad 3-17itl6 Firmware: before ggcn51ww (fixed in ggcn51ww)
  • Lenovo Ideapad 3 14iau7 Firmware: before jkcn34ww (fixed in jkcn34ww)
  • Lenovo Ideapad 3 15iau7 Firmware: before jkcn34ww (fixed in jkcn34ww)
  • Lenovo Ideapad 3 17iau7 Firmware: before jkcn34ww (fixed in jkcn34ww)
  • Lenovo Ideapad 5-15iil05 Firmware: before dpcn58ww (fixed in dpcn58ww)
  • Lenovo Ideapad 5-15itl05 Firmware: before fhcn70ww (fixed in fhcn70ww)
  • Lenovo Ideapad 5 15ial7 Firmware: before jbcn27ww (fixed in jbcn27ww)
  • and 62 more

Published 2023-08-23. Last modified 2026-06-17.