CVE-2024-7756

MEDIUM EPSS 18.6%

Published Sep 13, 20241y ago · Modified Jun 17, 20262w ago

6.8 CVSS 3.1

Medium

Published Sep 13, 2024 1y ago

Last Modified Jun 17, 2026 2w ago

Description

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell.

CVSS Details

Base Score

6.8

Exploitability

0.9

Impact

5.9

Vector string

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector Physical

Attack Complexity Low

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

18.6% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-489

References 1

support.lenovo.com https://support.lenovo.com/us/en/product_security/LEN-165524

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.