Vulnerabilities allowing permanent infections affect 70 Lenovo laptop models

[paulcarroty]

https://arstechnica.com/information-technology/2022/07/vulnerabilities-allowing-permanent-infections-affect-70-lenovo-laptop-models/

[aaaaaaaaata]

What's the attack vector?

Remote code exec, or local attacker only?

[drdude → aaaaaaaaata]

the quote from the article: " The vulnerabilities can be exploited to achieve arbitrary code execution in the early phases of the platform boot, possibly allowing the attackers to hijack the OS execution flow and disable some important security features. 2/6 — ESET research (@ESETresearch) July 13, 2022"

[aaaaaaaaata → drdude]

Yes, I read the article. It's incomplete.

> The vulnerabilities can be exploited

How? Local touch only? It makes a huge difference...