Access locked BIOS of Lenovo laptops by bypassing the EEPROM with a screwdriver

has been discovered a new vulnerabilitywhich enables access to a BIOS of Lenovo laptops, including when they are locked or password protected. He trick ha been discovered by New Zealand security firm CyberCX, where they have secured access to BIOS blocked by bridging some pins of the EEPROM chip with a screwdriverwhich has given access to all BIOS options completely unlocked, and even to modify the necessary ones, such as the password.

The test has been carried out on Lenovo laptops, luckily It has worked on already quite old models from 2012 and 2013but other laptops with a similar layout have a separate EEPROM chip to store the passwords they could also be vulnerable. To access an unlocked BIOS there is you disassemble and locate this EEPROM chipand specifically the SCL and SDA pins for later short circuit them in the right moment. In the example that they have shown on video, this task is done with a simple screwdriver.

This technique is not complicated, but it can be require some practice to be able to bridge these two pins with the screwdriver at the specific moment. From the security agency CyberCX they will continue this investigation For try directly read unencrypted password from the EEPROM or check if this technique of bridging two pins of the EEPROM is available on other laptops from other brands.

End of Article. Tell us something in the Comments!