content: The ThinkPwn exploit is implemented as an UEFI application that needs to be executed from a USB flash drive by using the UEFI shell. This requires physical access to the targeted computer, which limits the kind of attackers who could use it.  This is still early in development and the problem could be industry-wide and not just Lenovo - although the exploit was published there is no known active malware known to be using it, so we'll have to wait and see if there's any solution.