VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 12, 2025· Updated Apr 15, 2026

CVE-2024-12673

CVE-2024-12673

Description

An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo Vantage on SMB notebook devices which could allow a local attacker to elevate privileges on the system.

This vulnerability only affects Vantage installed on these devices:

  • Lenovo V Series (Gen 5)
  • ThinkBook 14 (Gen 6, 7)
  • ThinkBook 16 (Gen 6, 7)
  • ThinkPad E Series (Gen 1)

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.