All the vulnerabilites related to lenovo - slim_7_16arh7
Vulnerability from fkie_nvd
Published
2023-01-23 17:15
Modified
2024-11-21 07:19
Severity ?
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:d330-10igl_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "93B3E734-67AE-498C-9808-70D5F07161EE",
"versionEndExcluding": "g0cn11ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:d330-10igl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3FBE774E-04D0-46DE-8F9C-D4B9380BD1BC",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_5_pro_16iah7_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "16507729-B6A8-4A40-B65D-ABED920989D7",
"versionEndExcluding": "j4cn33ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_5_pro_16iah7:-:*:*:*:*:*:*:*",
"matchCriteriaId": "95DD006F-E148-47B5-96CC-C7A76EE53679",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_5_pro_16arh7_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A4F7E6D5-D333-4FA1-B30C-D958B8E8B060",
"versionEndExcluding": "j5cn27ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_5_pro_16arh7:-:*:*:*:*:*:*:*",
"matchCriteriaId": "33034E99-8CA2-4736-91F6-8E42181E9AF0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_duet_3_10igl5_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "12037F5F-401A-4E68-92A8-922A5CA9BD63",
"versionEndExcluding": "eqcn37ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C6ED2CCF-A6BB-45C8-B729-31241AA7254A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:slim_7_16arh7_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CC68F2A8-9976-4157-9926-1F398584C0EB",
"versionEndExcluding": "klcn15ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:slim_7_16arh7:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CEF0DB00-37E3-48C9-8229-59422C95C937",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_15p_imp_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "404B75C7-203E-4417-8C43-85EF05DA849B",
"versionEndExcluding": "f6cn25ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_15p_imp:-:*:*:*:*:*:*:*",
"matchCriteriaId": "558E1314-B3B0-4DA3-BF9D-474190246281",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:slim_7-14are05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BE4AC030-FF25-4B79-815F-82060AAEB4EF",
"versionEndExcluding": "dmcn43ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:slim_7-14are05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "29F4DB03-5565-4643-8C54-CC0990F09108",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_slim_7-14iil05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "59800B2A-8FB5-4C56-BD6F-EC5AC81B3D47",
"versionEndExcluding": "dhcn35ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_slim_7-14iil05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "77144603-8FE5-47C1-8D12-9808DEDB61F0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_slim_7-14itl05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2595C5D0-FF96-4EDB-B1D9-E8294789163E",
"versionEndExcluding": "fbcn29ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_slim_7-14itl05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0FE66BDA-F162-4937-909E-52CBA55E6D32",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_slim_7-15iil05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3B6929A3-B10D-4A43-9FB4-ADF6F5F70F98",
"versionEndExcluding": "dhcn35ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_slim_7-15iil05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F6FC3A77-0475-44E7-BBA8-54ADB18ECB5E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:slim_7-15imh05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "58A024E7-4C03-42C0-A4B8-B84469665BFC",
"versionEndExcluding": "dncn32ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:slim_7-15imh05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9240B1F9-5F4E-4736-ADE0-95D8922F5B70",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:slim_7-15itl05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9EF5FFA1-E531-404E-AD83-F25E80914B54",
"versionEndExcluding": "fbcn29ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:slim_7-15itl05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D7F7A40C-E944-49C7-A7BC-2440FC95DC63",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_13x_itg_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2CA24E6D-72F4-44A0-B7E2-378CC6260549",
"versionEndExcluding": "hlcn30ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_13x_itg:-:*:*:*:*:*:*:*",
"matchCriteriaId": "09B30D44-B6FB-4824-BC6A-24307D8F7439",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_14_g2_are_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "46A688AE-8350-40F9-80AC-12B06BFDCE1F",
"versionEndExcluding": "facn33ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_14_g2_are:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7D975861-7900-409B-B021-9C220967E6CF",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_14_g2_itl_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "11FBD0FB-394C-4EDD-B9F1-0BFB280B10D2",
"versionEndExcluding": "f8cn52ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_14_g2_itl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D74655E8-B72D-424E-9AAC-953291B72FC0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_14_g3_acl_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "229A1F66-8842-4A01-952D-77498339EC16",
"versionEndExcluding": "gqcn35ww_hfcn30ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_14_g3_acl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "05C707FA-9583-4FEC-AB41-496BFA7B14D9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_14_g3_itl_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DE97983B-7A23-4FCB-A267-AB242E32E37C",
"versionEndExcluding": "hrcn13ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_14_g3_itl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AEAF6B3E-3F3F-4397-AADF-24DA36BC96EB",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_14_g4\\+_ara_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8AA85A21-27F0-4867-91D4-377EFD9A91CE",
"versionEndExcluding": "j6cn40ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_14_g4\\+_ara:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B69C2C6D-E963-48F9-A91D-FC850A5C05DE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_14_g4\\+_iap_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D008FDCD-FD4E-4DE7-8AF7-8982E2360E68",
"versionEndExcluding": "hycn40ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_14_g4\\+_iap:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2EE24BE8-EFD8-417E-9059-3844E1526F32",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_14p_g3_arh_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E58BE4FF-2BF0-461E-BBE4-E8104AF78965",
"versionEndExcluding": "k4cn31ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_14p_g3_arh:-:*:*:*:*:*:*:*",
"matchCriteriaId": "69E96823-4D7E-46E0-8EEB-1B77DE22963A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_14s_yoga_itl_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5AB3175E-D60B-47DB-A979-510B1579783C",
"versionEndExcluding": "fncn40ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_14s_yoga_itl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "40CC9AB2-81D6-4522-8829-AA7B6F374971",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_15_g2_are_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "318A3EA8-BE64-4DF8-ADDD-3B77796E7F14",
"versionEndExcluding": "facn33ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_15_g2_are:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4548DC4B-F7CE-4C50-91B2-BF292B7E4E7C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_15_g2_itl_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1A1D2E0F-6C3F-4D23-B3AA-9AFFBE36F4B2",
"versionEndExcluding": "f8cn52ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_15_g2_itl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4BCCFD43-1654-454A-BEBD-9429937FB79C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_15_g3_acl_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D90B5258-EA04-48A0-8BCA-2CBB1FFE81E8",
"versionEndExcluding": "gqcn35ww_hfcn30ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_15_g3_acl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "965A9C4D-CE46-4169-8ACE-4C47582D01A0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_15_g3_itl_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D6AC172E-38D0-4E7E-AFB4-45242B214EB4",
"versionEndExcluding": "hrcn13ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_15_g3_itl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C4F9CC65-E475-4CCB-B6B0-A73541012B1C",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_15_gd_aba_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "77BC60E2-C311-492F-9ACF-E9963F9D3DF1",
"versionEndExcluding": "jpcn20ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_15_g4_aba:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B468C7D0-D5C5-49F7-AA1C-51C12A38DA83",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_15p_g2_ith_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4AC83AC7-3032-4A7B-80A0-9E7301123B12",
"versionEndExcluding": "hjcn31ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_15p_g2_ith:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C46BFBA6-3285-4330-9190-8CC267DB4270",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_16_g4\\+_ara_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "30656321-CDEC-4078-BD88-AF6074D42F48",
"versionEndExcluding": "j6cn40ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_16_g4\\+_ara:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4062B850-7517-41A1-BA85-CEA38520B324",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_16_g4\\+_iap_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F4405421-414E-4BAC-8E9F-E99B398BF0CD",
"versionEndExcluding": "hycn40ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_16_g4\\+_iap:-:*:*:*:*:*:*:*",
"matchCriteriaId": "56EA6832-49E6-4FFB-B49B-5ED528C8DC26",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_16p_g3_arh_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "43A6CDA7-3526-4CE5-AF8A-F478D988078D",
"versionEndExcluding": "kccn31ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_16p_g3_arh:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DE380D01-6675-4701-A747-B27067866EB1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_16p_nx_arh_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6219BA17-B4B5-476A-A583-0A1A7C724E69",
"versionEndExcluding": "kjcn27ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_16p_nx_arh:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F21184FF-7B12-4422-A819-C0836777283B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_plus_g2_itg_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CD9DA7E8-963A-4845-A1A5-33FCD953F7AB",
"versionEndExcluding": "gycn31ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4D725D6F-60A7-4BEE-A19F-AF6CEEE46FE1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_plus_g3_iap_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1EA39607-1264-4595-8BF2-A03FEE46A677",
"versionEndExcluding": "k6cn29ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8480B3A8-6F19-4C01-A5E8-B141DA845E4D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_creator_7-15imh05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "93E4E299-B715-4B1E-9AF9-3EF3C8D8FFCA",
"versionEndExcluding": "dncn32ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_creator_7-15imh05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1DDF70B8-FA66-43B8-9D67-E11DAE426A19",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_duet_7-13iml05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E799EC61-46FC-46B1-B27C-67D472AEC947",
"versionEndExcluding": "ercn30ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_duet_7-13iml05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8FCE2EC8-8384-4DE1-9B45-AECB510D0B1E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_duet_7-13itl6_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "853F9F82-3DF5-4D6B-A3BD-410AFD9BD7F1",
"versionEndExcluding": "gpcn24ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_duet_7-13itl6:-:*:*:*:*:*:*:*",
"matchCriteriaId": "02CB1D39-F031-4AF9-88FE-E0E8E0A38768",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_duet_7-13itl6-lte_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "72679907-6E23-4BE7-809B-824B2E16D0EA",
"versionEndExcluding": "gpcn24ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_duet_7-13itl6-lte:-:*:*:*:*:*:*:*",
"matchCriteriaId": "72782D1B-DFFB-4F78-AA4F-C10AEF277D2F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_slim_7_pro_16arh7_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "650BA4E3-7255-4AE1-B192-58C45166039F",
"versionEndExcluding": "klcn15ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_slim_7_pro_16arh7:-:*:*:*:*:*:*:*",
"matchCriteriaId": "620ACBF6-93BA-47B8-8AA6-974D81473171",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-14are05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "997DA455-7C20-45CC-A89A-0FB9EBA9B50E",
"versionEndExcluding": "dmcn43ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-14are05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "424B24D7-C69D-4C20-B6A6-7E0A00564CE3",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-14iil05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "73BEEB7F-3AF9-4E55-A152-40EC09B58DE8",
"versionEndExcluding": "dmcn35ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-14iil05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "64D6AD27-0194-4CEC-AD80-3FC01593BB10",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-14itl05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EAD393ED-734A-4D10-9CAF-477E2E3DF561",
"versionEndExcluding": "fbcn29ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-14itl05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8A146385-49E3-431E-AD2D-7CA1A40572EE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-15iil05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "024934A5-06B5-4164-92B0-6FD13BFD4AE1",
"versionEndExcluding": "dhcn35ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-15iil05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2DEE2E90-D589-4E56-978A-8D1041F1A5B8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-15imh05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0C851F79-8C69-4CEC-964F-A49E7A315A4C",
"versionEndExcluding": "dncn32ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-15imh05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1CA09D98-AEDA-4A32-B072-0A048BE7A5C6",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-15itl05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "32F42B6A-EC39-4F5E-8C9E-9499A2F95668",
"versionEndExcluding": "fbcn29ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-15itl05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "20085906-9DDF-416B-A88D-7E94557ABA46",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
},
{
"lang": "es",
"value": "Una vulnerabilidad potencial en el controlador de configuraci\u00f3n WMI en algunos dispositivos port\u00e1tiles Lenovo Notebook puede permitir que un atacante con privilegios elevados modifique la configuraci\u00f3n de arranque seguro modificando una variable NVRAM."
}
],
"id": "CVE-2022-3430",
"lastModified": "2024-11-21T07:19:29.873",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 0.8,
"impactScore": 5.9,
"source": "psirt@lenovo.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 0.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2023-01-23T17:15:10.647",
"references": [
{
"source": "psirt@lenovo.com",
"tags": [
"Vendor Advisory"
],
"url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
}
],
"sourceIdentifier": "psirt@lenovo.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-276"
}
],
"source": "psirt@lenovo.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-276"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2023-10-09 19:15
Modified
2024-11-21 07:19
Severity ?
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
References
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_creator_5-16ach6_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7428DDA8-7629-4AF8-8DAA-7A49FF9D6DA1",
"versionEndExcluding": "gscn34ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_creator_5-16ach6:-:*:*:*:*:*:*:*",
"matchCriteriaId": "90031C15-00A0-40F8-A98B-DDFA3F79D247",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_5_pro-16ihu6_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3FFB4225-D28D-4C3B-BB03-349B966CCFCF",
"versionEndExcluding": "grcn22ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_5_pro-16ihu6:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EC34C489-CC06-41DF-91C8-2919B9770E78",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_5_pro-16ach6_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BD22DD91-73C6-4982-9424-6C3AA1D52EA6",
"versionEndExcluding": "gscn34ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_5_pro-16ach6:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F160EE76-3FF4-42EB-94DE-4FEFCCEE54C2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-13itl05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "09F8B96E-197D-4E6C-B766-EFB312705CA0",
"versionEndExcluding": "f7cn39ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-13itl05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7B6E471A-EB31-46FE-944E-F48397F57E13",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-13acn05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1EBDE114-7FCF-4C49-A8F6-E20B25736454",
"versionEndExcluding": "ghcn28ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-13acn05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9FAF0D1D-070A-401E-B5B3-F3BCDD1860F7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_slim_7_pro_16arh7_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "650BA4E3-7255-4AE1-B192-58C45166039F",
"versionEndExcluding": "klcn15ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_slim_7_pro_16arh7:-:*:*:*:*:*:*:*",
"matchCriteriaId": "620ACBF6-93BA-47B8-8AA6-974D81473171",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_slim_7_pro_16ach6_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "851B51FB-DEFB-4E55-8114-BA49BEF8DFDC",
"versionEndExcluding": "hucn16ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_slim_7_pro_16ach6:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E0BEB08B-768F-4BFC-819B-B8A1DD01431F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_slim_7_carbon_13itl5_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "63C58648-9441-450E-BFFF-874781D29BC5",
"versionEndExcluding": "f7cn39ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_slim_7_carbon_13itl5:-:*:*:*:*:*:*:*",
"matchCriteriaId": "978E1E13-8918-41D0-985C-53904CE0EC16",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_duet_7-13itl6-lte_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "72679907-6E23-4BE7-809B-824B2E16D0EA",
"versionEndExcluding": "gpcn24ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_duet_7-13itl6-lte:-:*:*:*:*:*:*:*",
"matchCriteriaId": "72782D1B-DFFB-4F78-AA4F-C10AEF277D2F",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_duet_7-13itl6_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "853F9F82-3DF5-4D6B-A3BD-410AFD9BD7F1",
"versionEndExcluding": "gpcn24ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_duet_7-13itl6:-:*:*:*:*:*:*:*",
"matchCriteriaId": "02CB1D39-F031-4AF9-88FE-E0E8E0A38768",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_duet_7-13iml05_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E799EC61-46FC-46B1-B27C-67D472AEC947",
"versionEndExcluding": "ercn30ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_duet_7-13iml05:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8FCE2EC8-8384-4DE1-9B45-AECB510D0B1E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_plus_g3_iap_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "1EA39607-1264-4595-8BF2-A03FEE46A677",
"versionEndExcluding": "k6cn29ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8480B3A8-6F19-4C01-A5E8-B141DA845E4D",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_plus_g2_itg_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CD9DA7E8-963A-4845-A1A5-33FCD953F7AB",
"versionEndExcluding": "gycn31ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4D725D6F-60A7-4BEE-A19F-AF6CEEE46FE1",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_16p_nx_arh_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6219BA17-B4B5-476A-A583-0A1A7C724E69",
"versionEndExcluding": "kjcn27ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_16p_nx_arh:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F21184FF-7B12-4422-A819-C0836777283B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_16_g4\\+_iap_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F4405421-414E-4BAC-8E9F-E99B398BF0CD",
"versionEndExcluding": "hycn40ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_16_g4\\+_iap:-:*:*:*:*:*:*:*",
"matchCriteriaId": "56EA6832-49E6-4FFB-B49B-5ED528C8DC26",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_16_g4\\+_ara_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "30656321-CDEC-4078-BD88-AF6074D42F48",
"versionEndExcluding": "j6cn40ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_16_g4\\+_ara:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4062B850-7517-41A1-BA85-CEA38520B324",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_14_g4\\+_iap_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D008FDCD-FD4E-4DE7-8AF7-8982E2360E68",
"versionEndExcluding": "hycn40ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_14_g4\\+_iap:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2EE24BE8-EFD8-417E-9059-3844E1526F32",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_14_g4\\+_ara_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8AA85A21-27F0-4867-91D4-377EFD9A91CE",
"versionEndExcluding": "j6cn40ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_14_g4\\+_ara:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B69C2C6D-E963-48F9-A91D-FC850A5C05DE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkbook_13x_itg_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2CA24E6D-72F4-44A0-B7E2-378CC6260549",
"versionEndExcluding": "hlcn30ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkbook_13x_itg:-:*:*:*:*:*:*:*",
"matchCriteriaId": "09B30D44-B6FB-4824-BC6A-24307D8F7439",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_slim_7_pro_16ach6_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "57C398C8-388E-4622-B211-CB51120D8933",
"versionEndExcluding": "hucn16ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_slim_7_pro_16ach6:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9378A311-DA4E-4452-8C0A-337F2375F948",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:s540-15iml_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7654476D-65DA-495F-91F2-A59A6C840F51",
"versionEndExcluding": "cncn22ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:s540-15iml:-:*:*:*:*:*:*:*",
"matchCriteriaId": "78A9FC30-244F-441E-950E-2FDBFC520133",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:slim_7_16arh7_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CC68F2A8-9976-4157-9926-1F398584C0EB",
"versionEndExcluding": "klcn15ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:slim_7_16arh7:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CEF0DB00-37E3-48C9-8229-59422C95C937",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_duet_3_10igl5_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "12037F5F-401A-4E68-92A8-922A5CA9BD63",
"versionEndExcluding": "eqcn37ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C6ED2CCF-A6BB-45C8-B729-31241AA7254A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_5_pro_16arh7_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7F9E07F2-CCDE-4B45-9B04-7691D1869C1C",
"versionEndExcluding": "j4cn33ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_5_pro_16arh7:-:*:*:*:*:*:*:*",
"matchCriteriaId": "33034E99-8CA2-4736-91F6-8E42181E9AF0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:d330-10igl_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "93B3E734-67AE-498C-9808-70D5F07161EE",
"versionEndExcluding": "g0cn11ww",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:d330-10igl:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3FBE774E-04D0-46DE-8F9C-D4B9380BD1BC",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
},
{
"lang": "es",
"value": "Una vulnerabilidad potencial en un driver utilizado durante el proceso de fabricaci\u00f3n de algunos dispositivos de consumo Lenovo Notebook que no se desactiv\u00f3 por error, puede permitir que un atacante con privilegios elevados modifique la configuraci\u00f3n de arranque seguro modificando una variable de la NVRAM."
}
],
"id": "CVE-2022-3431",
"lastModified": "2024-11-21T07:19:30.057",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 0.8,
"impactScore": 5.9,
"source": "psirt@lenovo.com",
"type": "Secondary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2023-10-09T19:15:09.987",
"references": [
{
"source": "psirt@lenovo.com",
"tags": [
"Vendor Advisory"
],
"url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
}
],
"sourceIdentifier": "psirt@lenovo.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-276"
}
],
"source": "psirt@lenovo.com",
"type": "Secondary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-276"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
cve-2022-3431
Vulnerability from cvelistv5
Published
2023-10-09 18:18
Modified
2024-09-19 14:36
Severity ?
EPSS score ?
Summary
A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T01:07:06.619Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:h:lenovo:notebook:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "notebook",
"vendor": "lenovo",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2022-3431",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-19T14:34:46.057328Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-09-19T14:36:08.273Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "BIOS",
"vendor": "Lenovo",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting these issues."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
}
],
"value": "A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-276",
"description": "CWE-276 Incorrect Default Permissions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-10-09T18:18:54.016Z",
"orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"shortName": "lenovo"
},
"references": [
{
"url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-94952\u003cbr\u003e"
}
],
"value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-94952\n"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"assignerShortName": "lenovo",
"cveId": "CVE-2022-3431",
"datePublished": "2023-10-09T18:18:54.016Z",
"dateReserved": "2022-10-07T19:59:25.920Z",
"dateUpdated": "2024-09-19T14:36:08.273Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2022-3430
Vulnerability from cvelistv5
Published
2023-01-23 16:11
Modified
2024-08-03 01:07
Severity ?
EPSS score ?
Summary
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T01:07:06.525Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "BIOS",
"vendor": "Lenovo",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting these issues."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
}
],
"value": "A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-276",
"description": "CWE-276 Incorrect Default Permissions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-01-23T16:11:41.102Z",
"orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"shortName": "lenovo"
},
"references": [
{
"url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-94952\u003cbr\u003e"
}
],
"value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-94952\n"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
"assignerShortName": "lenovo",
"cveId": "CVE-2022-3430",
"datePublished": "2023-01-23T16:11:41.102Z",
"dateReserved": "2022-10-07T19:58:27.731Z",
"dateUpdated": "2024-08-03T01:07:06.525Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}