Backdoor in all Lenovo ThinkPad's

Discussion in 'Networking and Security' started by marsman, Jul 8, 2016.

  1. marsman

    marsman

    ThinkPwn - Backdoor in all Lenovo ThinkPad's detected:
    https://support.lenovo.com/de/en/solutions/LEN-8324
    https://github.com/Cr4sh/ThinkPwn
    http://blog.cr4.sh/2016/06/exploring-and-exploiting-lenovo.html

    It is said that "products from other OEM's also has this vulnerability"...
    The list of affected systems and vendors is growing every minute...

    The researcher who found the vulnerability/backdoor writes:

    "This code exploits 0day privileges escalation vulnerability (or backdoor?) in SystemSmmRuntimeRt UEFI driver (GUID is 7C79AC8C-5E6C-4E3D-BA6F-C260EE7C172E) of Lenovo firmware. Vulnerability is present in all of the ThinkPad series laptops, the oldest one that I have checked is X220 and the neweset one is T450s (with latest firmware versions available at this moment). Running of arbitrary System Management Mode code allows attacker to disable flash write protection and infect platform firmware, disable Secure Boot, bypass Virtual Secure Mode (Credential Guard, etc.) on Windows 10 Enterprise and do others evil things.
    "
     
    Last edited: Jul 8, 2016
  2. I don't know about other manufacturers but I would not doubt it for Lenovo. Smartpads were an IBM product, then they sold the laptop division to Lenovo (China). It would not surprise me if the Chinese govt. required it.
     
    Occam likes this.
  3. Pekelo

    Pekelo

    So you are saying they will get all the government secrets I have on my little rinkydink 100s?

    On the other hand, the Bios battery is already failing after 8 months of usage, a record....
     
    Peter Dougherty likes this.