Lenovo Vantage Improper Privilege Vulnerability in BIOS Customization Feature on SMB Notebooks

A vulnerability allowing privilege escalation has been identified in the BIOS customization feature of Lenovo Vantage. This issue affects SMB notebook devices, specifically the Lenovo V Series (Gen 5), ThinkBook 14 (Gen 6, 7), ThinkBook 16 (Gen 6, 7), and ThinkPad E Series (Gen 1). The vulnerability arises from improper privilege management, which could enable a local attacker to gain elevated rights on the system.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a local attacker to gain elevated rights on the affected system.