« Volver al listado

CVE-2024-7756

Estado: AplazadaMedia (6.8)—

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Lenovo — 10W NotebookAILenovo — Thinkpad L390 YogaAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-7756",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-7756",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-13T21:04:45.731099Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@lenovo.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.8,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@lenovo.com",
      "affectedData": [
        {
          "vendor": "Lenovo",
          "product": "10w (Type 82ST, 82SU) Laptop (Lenovo) BIOS",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "JSCN28WW",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Lenovo",
          "product": "L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "1.47",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Lenovo",
          "product": "L390 Yoga (type 20NT, 20NU) Laptops (ThinkPad) BIOS",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "1.47",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:lenovo:thinkpad_l390_firmware:-:*:*:*:*:*:*:*",
            "cpe:2.3:o:lenovo:thinkpad_l390_yoga_firmware:-:*:*:*:*:*:*:*"
          ],
          "vendor": "lenovo",
          "product": "thinkpad_l390_yoga_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "1.47",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "cpes": [
            "cpe:2.3:o:lenovo:10w_firmware:*:*:*:*:*:*:*:*"
          ],
          "vendor": "lenovo",
          "product": "10w_firmware",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "jscn28ww",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-09-13T18:15:06.103",
  "references": [
    {
      "url": "https://support.lenovo.com/us/en/product_security/LEN-165524",
      "source": "psirt@lenovo.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@lenovo.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-489"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell."
    },
    {
      "lang": "es",
      "value": "Se informó de una posible vulnerabilidad en el ThinkPad L390 Yoga y el portátil 10w que podría permitir a un atacante local escalar privilegios accediendo a un shell UEFI integrado."
    }
  ],
  "lastModified": "2026-06-17T08:20:51.730",
  "sourceIdentifier": "psirt@lenovo.com"
}