A critical Lenovo security flaw has been\u00a0discovered which could let attackers bypass Windows’ basic security protocols.<\/p>\n
Lenovo\u2019s said<\/strong><\/a> it is aware of the BIOS vulnerability located in the System Management Mode (SMM) code that impacts certain Lenovo PCs.<\/p>\n The disclosure follows security researcher Dymtro “Cr4sh” Oleksiuk revealing the BIOS vulnerability.<\/p>\n Lenovo said it made several unsuccessful attempts to collaborate with the researcher\u00a0before\u00a0his announcement.<\/p>\n Lenovo said the vulnerable SMM code was provided to it\u00a0by at least one of its\u00a0Independent BIOS Vendors (IBVs).<\/p>\n \u201cThe package of code with the SMM vulnerability was developed on top of a common code base provided to the IBV by Intel,\u201d said Lenovo.<\/p>\n \u201cBecause Lenovo did not develop the code and is determining the identity of the author, it does not know its intended purpose.\u201d<\/p>\n Lenovo said it is working on identifying additional instances of the vulnerability’s presence in the BIOS provided to Lenovo by other IBVs.<\/p>\n New Motorola and Lenovo smartphones coming to South Africa<\/strong><\/a><\/p>\nMore on Lenovo<\/h3>\n