research:
http://blog.cr4.sh/2016/06/exploring...ng-lenovo.html
code:
https://github.com/Cr4sh/ThinkPwn
lenovo commit:
https://support.lenovo.com/my/en/solutions/LEN-8324
If u read carefully github note updates, u can see that it is not only for lenovo.
It is industry wide (well, it was noted in lenovo LEN-8324 commit)
Seems like Cr4sh opened Pandora's box.