Search criteria

3 vulnerabilities found for ideapad_slim_7-14iil05_firmware by lenovo

FKIE_CVE-2022-3430

Vulnerability from fkie_nvd - Published: 2023-01-23 17:15 - Updated: 2024-11-21 07:19
Summary
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
Impacted products
Vendor Product Version
lenovo d330-10igl_firmware *
lenovo d330-10igl -
lenovo ideapad_5_pro_16iah7_firmware *
lenovo ideapad_5_pro_16iah7 -
lenovo ideapad_5_pro_16arh7_firmware *
lenovo ideapad_5_pro_16arh7 -
lenovo ideapad_duet_3_10igl5_firmware *
lenovo ideapad_duet_3_10igl5 -
lenovo slim_7_16arh7_firmware *
lenovo slim_7_16arh7 -
lenovo thinkbook_15p_imp_firmware *
lenovo thinkbook_15p_imp -
lenovo slim_7-14are05_firmware *
lenovo slim_7-14are05 -
lenovo ideapad_slim_7-14iil05_firmware *
lenovo ideapad_slim_7-14iil05 -
lenovo ideapad_slim_7-14itl05_firmware *
lenovo ideapad_slim_7-14itl05 -
lenovo ideapad_slim_7-15iil05_firmware *
lenovo ideapad_slim_7-15iil05 -
lenovo slim_7-15imh05_firmware *
lenovo slim_7-15imh05 -
lenovo slim_7-15itl05_firmware *
lenovo slim_7-15itl05 -
lenovo thinkbook_13x_itg_firmware *
lenovo thinkbook_13x_itg -
lenovo thinkbook_14_g2_are_firmware *
lenovo thinkbook_14_g2_are -
lenovo thinkbook_14_g2_itl_firmware *
lenovo thinkbook_14_g2_itl -
lenovo thinkbook_14_g3_acl_firmware *
lenovo thinkbook_14_g3_acl -
lenovo thinkbook_14_g3_itl_firmware *
lenovo thinkbook_14_g3_itl -
lenovo thinkbook_14_g4\+_ara_firmware *
lenovo thinkbook_14_g4\+_ara -
lenovo thinkbook_14_g4\+_iap_firmware *
lenovo thinkbook_14_g4\+_iap -
lenovo thinkbook_14p_g3_arh_firmware *
lenovo thinkbook_14p_g3_arh -
lenovo thinkbook_14s_yoga_itl_firmware *
lenovo thinkbook_14s_yoga_itl -
lenovo thinkbook_15_g2_are_firmware *
lenovo thinkbook_15_g2_are -
lenovo thinkbook_15_g2_itl_firmware *
lenovo thinkbook_15_g2_itl -
lenovo thinkbook_15_g3_acl_firmware *
lenovo thinkbook_15_g3_acl -
lenovo thinkbook_15_g3_itl_firmware *
lenovo thinkbook_15_g3_itl -
lenovo thinkbook_15_gd_aba_firmware *
lenovo thinkbook_15_g4_aba -
lenovo thinkbook_15p_g2_ith_firmware *
lenovo thinkbook_15p_g2_ith -
lenovo thinkbook_16_g4\+_ara_firmware *
lenovo thinkbook_16_g4\+_ara -
lenovo thinkbook_16_g4\+_iap_firmware *
lenovo thinkbook_16_g4\+_iap -
lenovo thinkbook_16p_g3_arh_firmware *
lenovo thinkbook_16p_g3_arh -
lenovo thinkbook_16p_nx_arh_firmware *
lenovo thinkbook_16p_nx_arh -
lenovo thinkbook_plus_g2_itg_firmware *
lenovo thinkbook_plus_g2_itg -
lenovo thinkbook_plus_g3_iap_firmware *
lenovo thinkbook_plus_g3_iap -
lenovo yoga_creator_7-15imh05_firmware *
lenovo yoga_creator_7-15imh05 -
lenovo yoga_duet_7-13iml05_firmware *
lenovo yoga_duet_7-13iml05 -
lenovo yoga_duet_7-13itl6_firmware *
lenovo yoga_duet_7-13itl6 -
lenovo yoga_duet_7-13itl6-lte_firmware *
lenovo yoga_duet_7-13itl6-lte -
lenovo yoga_slim_7_pro_16arh7_firmware *
lenovo yoga_slim_7_pro_16arh7 -
lenovo yoga_slim_7-14are05_firmware *
lenovo yoga_slim_7-14are05 -
lenovo yoga_slim_7-14iil05_firmware *
lenovo yoga_slim_7-14iil05 -
lenovo yoga_slim_7-14itl05_firmware *
lenovo yoga_slim_7-14itl05 -
lenovo yoga_slim_7-15iil05_firmware *
lenovo yoga_slim_7-15iil05 -
lenovo yoga_slim_7-15imh05_firmware *
lenovo yoga_slim_7-15imh05 -
lenovo yoga_slim_7-15itl05_firmware *
lenovo yoga_slim_7-15itl05 -

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:d330-10igl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "93B3E734-67AE-498C-9808-70D5F07161EE",
              "versionEndExcluding": "g0cn11ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:d330-10igl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FBE774E-04D0-46DE-8F9C-D4B9380BD1BC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:ideapad_5_pro_16iah7_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "16507729-B6A8-4A40-B65D-ABED920989D7",
              "versionEndExcluding": "j4cn33ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:ideapad_5_pro_16iah7:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "95DD006F-E148-47B5-96CC-C7A76EE53679",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:ideapad_5_pro_16arh7_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4F7E6D5-D333-4FA1-B30C-D958B8E8B060",
              "versionEndExcluding": "j5cn27ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:ideapad_5_pro_16arh7:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "33034E99-8CA2-4736-91F6-8E42181E9AF0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:ideapad_duet_3_10igl5_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "12037F5F-401A-4E68-92A8-922A5CA9BD63",
              "versionEndExcluding": "eqcn37ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6ED2CCF-A6BB-45C8-B729-31241AA7254A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:slim_7_16arh7_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC68F2A8-9976-4157-9926-1F398584C0EB",
              "versionEndExcluding": "klcn15ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:slim_7_16arh7:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CEF0DB00-37E3-48C9-8229-59422C95C937",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_15p_imp_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "404B75C7-203E-4417-8C43-85EF05DA849B",
              "versionEndExcluding": "f6cn25ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_15p_imp:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "558E1314-B3B0-4DA3-BF9D-474190246281",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:slim_7-14are05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE4AC030-FF25-4B79-815F-82060AAEB4EF",
              "versionEndExcluding": "dmcn43ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:slim_7-14are05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "29F4DB03-5565-4643-8C54-CC0990F09108",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:ideapad_slim_7-14iil05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "59800B2A-8FB5-4C56-BD6F-EC5AC81B3D47",
              "versionEndExcluding": "dhcn35ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:ideapad_slim_7-14iil05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "77144603-8FE5-47C1-8D12-9808DEDB61F0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:ideapad_slim_7-14itl05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2595C5D0-FF96-4EDB-B1D9-E8294789163E",
              "versionEndExcluding": "fbcn29ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:ideapad_slim_7-14itl05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0FE66BDA-F162-4937-909E-52CBA55E6D32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:ideapad_slim_7-15iil05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B6929A3-B10D-4A43-9FB4-ADF6F5F70F98",
              "versionEndExcluding": "dhcn35ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:ideapad_slim_7-15iil05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6FC3A77-0475-44E7-BBA8-54ADB18ECB5E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:slim_7-15imh05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "58A024E7-4C03-42C0-A4B8-B84469665BFC",
              "versionEndExcluding": "dncn32ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:slim_7-15imh05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9240B1F9-5F4E-4736-ADE0-95D8922F5B70",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:slim_7-15itl05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9EF5FFA1-E531-404E-AD83-F25E80914B54",
              "versionEndExcluding": "fbcn29ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:slim_7-15itl05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D7F7A40C-E944-49C7-A7BC-2440FC95DC63",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_13x_itg_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CA24E6D-72F4-44A0-B7E2-378CC6260549",
              "versionEndExcluding": "hlcn30ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_13x_itg:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "09B30D44-B6FB-4824-BC6A-24307D8F7439",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_14_g2_are_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "46A688AE-8350-40F9-80AC-12B06BFDCE1F",
              "versionEndExcluding": "facn33ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_14_g2_are:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D975861-7900-409B-B021-9C220967E6CF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_14_g2_itl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "11FBD0FB-394C-4EDD-B9F1-0BFB280B10D2",
              "versionEndExcluding": "f8cn52ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_14_g2_itl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D74655E8-B72D-424E-9AAC-953291B72FC0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_14_g3_acl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "229A1F66-8842-4A01-952D-77498339EC16",
              "versionEndExcluding": "gqcn35ww_hfcn30ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_14_g3_acl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "05C707FA-9583-4FEC-AB41-496BFA7B14D9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_14_g3_itl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE97983B-7A23-4FCB-A267-AB242E32E37C",
              "versionEndExcluding": "hrcn13ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_14_g3_itl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AEAF6B3E-3F3F-4397-AADF-24DA36BC96EB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_14_g4\\+_ara_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AA85A21-27F0-4867-91D4-377EFD9A91CE",
              "versionEndExcluding": "j6cn40ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_14_g4\\+_ara:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B69C2C6D-E963-48F9-A91D-FC850A5C05DE",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_14_g4\\+_iap_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D008FDCD-FD4E-4DE7-8AF7-8982E2360E68",
              "versionEndExcluding": "hycn40ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_14_g4\\+_iap:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2EE24BE8-EFD8-417E-9059-3844E1526F32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_14p_g3_arh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E58BE4FF-2BF0-461E-BBE4-E8104AF78965",
              "versionEndExcluding": "k4cn31ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_14p_g3_arh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "69E96823-4D7E-46E0-8EEB-1B77DE22963A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_14s_yoga_itl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5AB3175E-D60B-47DB-A979-510B1579783C",
              "versionEndExcluding": "fncn40ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_14s_yoga_itl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "40CC9AB2-81D6-4522-8829-AA7B6F374971",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_15_g2_are_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "318A3EA8-BE64-4DF8-ADDD-3B77796E7F14",
              "versionEndExcluding": "facn33ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_15_g2_are:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4548DC4B-F7CE-4C50-91B2-BF292B7E4E7C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_15_g2_itl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A1D2E0F-6C3F-4D23-B3AA-9AFFBE36F4B2",
              "versionEndExcluding": "f8cn52ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_15_g2_itl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4BCCFD43-1654-454A-BEBD-9429937FB79C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_15_g3_acl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D90B5258-EA04-48A0-8BCA-2CBB1FFE81E8",
              "versionEndExcluding": "gqcn35ww_hfcn30ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_15_g3_acl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "965A9C4D-CE46-4169-8ACE-4C47582D01A0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_15_g3_itl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6AC172E-38D0-4E7E-AFB4-45242B214EB4",
              "versionEndExcluding": "hrcn13ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_15_g3_itl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C4F9CC65-E475-4CCB-B6B0-A73541012B1C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_15_gd_aba_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "77BC60E2-C311-492F-9ACF-E9963F9D3DF1",
              "versionEndExcluding": "jpcn20ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_15_g4_aba:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B468C7D0-D5C5-49F7-AA1C-51C12A38DA83",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_15p_g2_ith_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4AC83AC7-3032-4A7B-80A0-9E7301123B12",
              "versionEndExcluding": "hjcn31ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_15p_g2_ith:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C46BFBA6-3285-4330-9190-8CC267DB4270",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_16_g4\\+_ara_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "30656321-CDEC-4078-BD88-AF6074D42F48",
              "versionEndExcluding": "j6cn40ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_16_g4\\+_ara:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4062B850-7517-41A1-BA85-CEA38520B324",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_16_g4\\+_iap_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4405421-414E-4BAC-8E9F-E99B398BF0CD",
              "versionEndExcluding": "hycn40ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_16_g4\\+_iap:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "56EA6832-49E6-4FFB-B49B-5ED528C8DC26",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_16p_g3_arh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "43A6CDA7-3526-4CE5-AF8A-F478D988078D",
              "versionEndExcluding": "kccn31ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_16p_g3_arh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE380D01-6675-4701-A747-B27067866EB1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_16p_nx_arh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6219BA17-B4B5-476A-A583-0A1A7C724E69",
              "versionEndExcluding": "kjcn27ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_16p_nx_arh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F21184FF-7B12-4422-A819-C0836777283B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_plus_g2_itg_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD9DA7E8-963A-4845-A1A5-33FCD953F7AB",
              "versionEndExcluding": "gycn31ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D725D6F-60A7-4BEE-A19F-AF6CEEE46FE1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_plus_g3_iap_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1EA39607-1264-4595-8BF2-A03FEE46A677",
              "versionEndExcluding": "k6cn29ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8480B3A8-6F19-4C01-A5E8-B141DA845E4D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_creator_7-15imh05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "93E4E299-B715-4B1E-9AF9-3EF3C8D8FFCA",
              "versionEndExcluding": "dncn32ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_creator_7-15imh05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1DDF70B8-FA66-43B8-9D67-E11DAE426A19",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_duet_7-13iml05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E799EC61-46FC-46B1-B27C-67D472AEC947",
              "versionEndExcluding": "ercn30ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_duet_7-13iml05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FCE2EC8-8384-4DE1-9B45-AECB510D0B1E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_duet_7-13itl6_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "853F9F82-3DF5-4D6B-A3BD-410AFD9BD7F1",
              "versionEndExcluding": "gpcn24ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_duet_7-13itl6:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "02CB1D39-F031-4AF9-88FE-E0E8E0A38768",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_duet_7-13itl6-lte_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "72679907-6E23-4BE7-809B-824B2E16D0EA",
              "versionEndExcluding": "gpcn24ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_duet_7-13itl6-lte:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "72782D1B-DFFB-4F78-AA4F-C10AEF277D2F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_slim_7_pro_16arh7_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "650BA4E3-7255-4AE1-B192-58C45166039F",
              "versionEndExcluding": "klcn15ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_slim_7_pro_16arh7:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "620ACBF6-93BA-47B8-8AA6-974D81473171",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_slim_7-14are05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "997DA455-7C20-45CC-A89A-0FB9EBA9B50E",
              "versionEndExcluding": "dmcn43ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_slim_7-14are05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "424B24D7-C69D-4C20-B6A6-7E0A00564CE3",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_slim_7-14iil05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "73BEEB7F-3AF9-4E55-A152-40EC09B58DE8",
              "versionEndExcluding": "dmcn35ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_slim_7-14iil05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "64D6AD27-0194-4CEC-AD80-3FC01593BB10",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_slim_7-14itl05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EAD393ED-734A-4D10-9CAF-477E2E3DF561",
              "versionEndExcluding": "fbcn29ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_slim_7-14itl05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A146385-49E3-431E-AD2D-7CA1A40572EE",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_slim_7-15iil05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "024934A5-06B5-4164-92B0-6FD13BFD4AE1",
              "versionEndExcluding": "dhcn35ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_slim_7-15iil05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2DEE2E90-D589-4E56-978A-8D1041F1A5B8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_slim_7-15imh05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C851F79-8C69-4CEC-964F-A49E7A315A4C",
              "versionEndExcluding": "dncn32ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_slim_7-15imh05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1CA09D98-AEDA-4A32-B072-0A048BE7A5C6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_slim_7-15itl05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "32F42B6A-EC39-4F5E-8C9E-9499A2F95668",
              "versionEndExcluding": "fbcn29ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_slim_7-15itl05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "20085906-9DDF-416B-A88D-7E94557ABA46",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad potencial en el controlador de configuraci\u00f3n WMI en algunos dispositivos port\u00e1tiles Lenovo Notebook puede permitir que un atacante con privilegios elevados modifique la configuraci\u00f3n de arranque seguro modificando una variable NVRAM."
    }
  ],
  "id": "CVE-2022-3430",
  "lastModified": "2024-11-21T07:19:29.873",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "psirt@lenovo.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-01-23T17:15:10.647",
  "references": [
    {
      "source": "psirt@lenovo.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
    }
  ],
  "sourceIdentifier": "psirt@lenovo.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-276"
        }
      ],
      "source": "psirt@lenovo.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-276"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2022-3430 (GCVE-0-2022-3430)

Vulnerability from cvelistv5 – Published: 2023-01-23 16:11 – Updated: 2025-04-02 15:01
VLAI?
Summary
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
CWE
  • CWE-276 - Incorrect Default Permissions
Assigner
Impacted products
Vendor Product Version
Lenovo BIOS Affected: various
Create a notification for this product.
Credits
Lenovo thanks Martin Smolár from ESET for reporting these issues.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T01:07:06.525Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-3430",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T15:01:24.152340Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:01:31.058Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting these issues."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
            }
          ],
          "value": "A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-276",
              "description": "CWE-276 Incorrect Default Permissions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-23T16:11:41.102Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-94952\u003cbr\u003e"
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-94952\n"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2022-3430",
    "datePublished": "2023-01-23T16:11:41.102Z",
    "dateReserved": "2022-10-07T19:58:27.731Z",
    "dateUpdated": "2025-04-02T15:01:31.058Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-3430 (GCVE-0-2022-3430)

Vulnerability from nvd – Published: 2023-01-23 16:11 – Updated: 2025-04-02 15:01
VLAI?
Summary
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
CWE
  • CWE-276 - Incorrect Default Permissions
Assigner
Impacted products
Vendor Product Version
Lenovo BIOS Affected: various
Create a notification for this product.
Credits
Lenovo thanks Martin Smolár from ESET for reporting these issues.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T01:07:06.525Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-3430",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T15:01:24.152340Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T15:01:31.058Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting these issues."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
            }
          ],
          "value": "A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-276",
              "description": "CWE-276 Incorrect Default Permissions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-23T16:11:41.102Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-94952\u003cbr\u003e"
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-94952\n"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2022-3430",
    "datePublished": "2023-01-23T16:11:41.102Z",
    "dateReserved": "2022-10-07T19:58:27.731Z",
    "dateUpdated": "2025-04-02T15:01:31.058Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}