LENOVO DRIVER UPDATE UTILITY NAME DRIVERS

The third vulnerability, SMM memory corruption allows arbitrary read/write from/into SMRAM, which can lead to the execution of malicious code. These built-in backdoors can be activated to disable SPI flash protections (BIOS Control Register bits and Protection Range registers) or the UEFI Secure Boot feature from a privileged user-mode process during operating system runtime,вЂќ a release from ESET said.ДЄLSO READ: Oil India Systems Hacked Attackers Demand More Than Rs 57 Crore In Ransom: All Details

LENOVO DRIVER UPDATE UTILITY NAME DRIVERS

вЂњThe first two of these vulnerabilities вЂ“ CVE-2021-3970, CVE-2021-3971 вЂ“ are perhaps more accurately called вЂњsecureвЂќ backdoors built into the UEFI firmware as that is literally the name given to the Lenovo UEFI drivers implementing one of them (CVE-2021-3971): SecureBackDoor and SecureBackDoorPeim. вЂњAll of the real-world UEFI threats discovered in the last years needed to bypass or disable the security mechanisms in some way in order to be deployed and executed,вЂќ said Martin SmolГЎr, the security researcher who discovered the vulnerability.ДЄLSO READ: China-Backed Hacking Group Cicada Is Using VLC Media Player for Cyberattacks. It says that this kind of malware can bypass almost all security measures and could prevent Lenovo users from executing operating system payloads. UEFI malware can be extremely stealthy and dangerous, ESET said in its report.

The report from ESET said that more than 100 different Lenovo laptop models with millions of users worldwide have been found to have these vulnerabilities that can allow attackers to launch UEFI malware. According to a report from CRN, Lenovo has patched these vulnerabilities that made Lenovo laptops potential targets for malware attacks. A Slovakian internet security company named ESET has discovered three vulnerabilities in various Lenovo laptop models that could allow attackers to launch UEFI malware on affected computers.

Lenovo driver update utility name