CVEvulnerability

CVE-2022-3430

6.7 MEDIUM Published 2023-01-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-01-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-276

Description

A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Affected configurations

• lenovo d330-10igl firmware (< g0cn11ww) • lenovo ideapad 5 pro 16iah7 firmware (< j4cn33ww) • lenovo ideapad 5 pro 16arh7 firmware (< j5cn27ww) • lenovo ideapad duet 3 10igl5 firmware (< eqcn37ww) • lenovo slim 7 16arh7 firmware (< klcn15ww) • lenovo thinkbook 15p imp firmware (< f6cn25ww) • lenovo slim 7-14are05 firmware (< dmcn43ww) • lenovo ideapad slim 7-14iil05 firmware (< dhcn35ww) • lenovo ideapad slim 7-14itl05 firmware (< fbcn29ww) • lenovo ideapad slim 7-15iil05 firmware (< dhcn35ww) • lenovo slim 7-15imh05 firmware (< dncn32ww) • lenovo slim 7-15itl05 firmware (< fbcn29ww) • lenovo thinkbook 13x itg firmware (< hlcn30ww) • lenovo thinkbook 14 g2 are firmware (< facn33ww) • lenovo thinkbook 14 g2 itl firmware (< f8cn52ww) • lenovo thinkbook 14 g3 acl firmware (< gqcn35ww hfcn30ww) • lenovo thinkbook 14 g3 itl firmware (< hrcn13ww) • lenovo thinkbook 14 g4\+ ara firmware (< j6cn40ww) • lenovo thinkbook 14 g4\+ iap firmware (< hycn40ww) • lenovo thinkbook 14p g3 arh firmware (< k4cn31ww) • lenovo thinkbook 14s yoga itl firmware (< fncn40ww) • lenovo thinkbook 15 g2 are firmware (< facn33ww) • lenovo thinkbook 15 g2 itl firmware (< f8cn52ww) • lenovo thinkbook 15 g3 acl firmware (< gqcn35ww hfcn30ww) • lenovo thinkbook 15 g3 itl firmware (< hrcn13ww) • lenovo thinkbook 15 gd aba firmware (< jpcn20ww) • lenovo thinkbook 15p g2 ith firmware (< hjcn31ww) • lenovo thinkbook 16 g4\+ ara firmware (< j6cn40ww) • lenovo thinkbook 16 g4\+ iap firmware (< hycn40ww) • lenovo thinkbook 16p g3 arh firmware (< kccn31ww) • lenovo thinkbook 16p nx arh firmware (< kjcn27ww) • lenovo thinkbook plus g2 itg firmware (< gycn31ww) • lenovo thinkbook plus g3 iap firmware (< k6cn29ww) • lenovo yoga creator 7-15imh05 firmware (< dncn32ww) • lenovo yoga duet 7-13iml05 firmware (< ercn30ww) • lenovo yoga duet 7-13itl6 firmware (< gpcn24ww) • lenovo yoga duet 7-13itl6-lte firmware (< gpcn24ww) • lenovo yoga slim 7 pro 16arh7 firmware (< klcn15ww) • lenovo yoga slim 7-14are05 firmware (< dmcn43ww) • lenovo yoga slim 7-14iil05 firmware (< dmcn35ww) • lenovo yoga slim 7-14itl05 firmware (< fbcn29ww) • lenovo yoga slim 7-15iil05 firmware (< dhcn35ww) • lenovo yoga slim 7-15imh05 firmware (< dncn32ww) • lenovo yoga slim 7-15itl05 firmware (< fbcn29ww)

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References