The Bug Report: Leveno Releases a Security Patch Update for 25 laptops with Vulnerable Bios
This is a ThinkPad T495
I've gone on the record and stated Leveno manufactures some of the best laptops on the market. Even their extensive catalog of gadgets, including the Yoga Series and Legion product line, has garnered positive feedback from many consumers and tech enthusiasts alike. But like any device connected to the internet, they are not impervious to software vulnerabilities. This week, Leveno released a significant software update addressing a security flaw in the BIOS in 25 laptops.
A Slovakian software security developer and researcher at ESET discovered the fatal security flaw in several models of Lenovo laptops. The security flaw causes the UEFI firmware to disable UEFI Secure Boot and factory restore the default Secure Boot from the operating system.
Interestingly, anyone user can go into the BIOS and access the feature that disables UEFI Secure Boot. However, these features should not be accessible through the laptop operating system. The ESET stated that compromised bootloaders pose a severe security risk.
The Twitter thread posted above this paragraph states the ESET team has mentioned various devices are affected by the vulnerabilities, including ThinkPad and IdeaPad laptops. However, further reading, the Twitter thread also says there are Windows patch updates for most of the Lenovo laptops.
Users of Lenovo laptops should know that, technically, this is a BIOS issue, so the update will have to occur manually via Lenovo Vantage software that's included in the device or download a new BIOS manually. As a precaution, make sure you back up your data.
