Exploitation Summary
EIP tracks 1 public exploit for CVE-2021-3972. PoCs published by killvxk.
AI-analyzed exploit summary The repository contains a functional proof-of-concept exploit for CVE-2021-3972, which manipulates UEFI firmware variables to disable Secure Boot and enable legacy boot modes. The code uses `SetFirmwareEnvironmentVariableEx` to modify specific UEFI variables, demonstrating the vulnerability.
Description
A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
Exploits (1)
The repository contains a functional proof-of-concept exploit for CVE-2021-3972, which manipulates UEFI firmware variables to disable Secure Boot and enable legacy boot modes. The code uses `SetFirmwareEnvironmentVariableEx` to modify specific UEFI variables, demonstrating the vulnerability.
References (1)
Scores
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H