FKIE_CVE-2022-3431

Vulnerability from fkie_nvd - Published: 2023-10-09 19:15 - Updated: 2024-11-21 07:19
Severity
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
References
psirt@lenovo.comhttps://support.lenovo.com/us/en/product_security/LEN-94952Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://support.lenovo.com/us/en/product_security/LEN-94952Vendor Advisory
Impacted products
Vendor Product Version
lenovo ideapad_creator_5-16ach6_firmware *
lenovo ideapad_creator_5-16ach6 -
lenovo ideapad_5_pro-16ihu6_firmware *
lenovo ideapad_5_pro-16ihu6 -
lenovo ideapad_5_pro-16ach6_firmware *
lenovo ideapad_5_pro-16ach6 -
lenovo yoga_slim_7-13itl05_firmware *
lenovo yoga_slim_7-13itl05 -
lenovo yoga_slim_7-13acn05_firmware *
lenovo yoga_slim_7-13acn05 -
lenovo yoga_slim_7_pro_16arh7_firmware *
lenovo yoga_slim_7_pro_16arh7 -
lenovo yoga_slim_7_pro_16ach6_firmware *
lenovo yoga_slim_7_pro_16ach6 -
lenovo yoga_slim_7_carbon_13itl5_firmware *
lenovo yoga_slim_7_carbon_13itl5 -
lenovo yoga_duet_7-13itl6-lte_firmware *
lenovo yoga_duet_7-13itl6-lte -
lenovo yoga_duet_7-13itl6_firmware *
lenovo yoga_duet_7-13itl6 -
lenovo yoga_duet_7-13iml05_firmware *
lenovo yoga_duet_7-13iml05 -
lenovo thinkbook_plus_g3_iap_firmware *
lenovo thinkbook_plus_g3_iap -
lenovo thinkbook_plus_g2_itg_firmware *
lenovo thinkbook_plus_g2_itg -
lenovo thinkbook_16p_nx_arh_firmware *
lenovo thinkbook_16p_nx_arh -
lenovo thinkbook_16_g4\+_iap_firmware *
lenovo thinkbook_16_g4\+_iap -
lenovo thinkbook_16_g4\+_ara_firmware *
lenovo thinkbook_16_g4\+_ara -
lenovo thinkbook_14_g4\+_iap_firmware *
lenovo thinkbook_14_g4\+_iap -
lenovo thinkbook_14_g4\+_ara_firmware *
lenovo thinkbook_14_g4\+_ara -
lenovo thinkbook_13x_itg_firmware *
lenovo thinkbook_13x_itg -
lenovo ideapad_slim_7_pro_16ach6_firmware *
lenovo ideapad_slim_7_pro_16ach6 -
lenovo s540-15iml_firmware *
lenovo s540-15iml -
lenovo slim_7_16arh7_firmware *
lenovo slim_7_16arh7 -
lenovo ideapad_duet_3_10igl5_firmware *
lenovo ideapad_duet_3_10igl5 -
lenovo ideapad_5_pro_16arh7_firmware *
lenovo ideapad_5_pro_16arh7 -
lenovo d330-10igl_firmware *
lenovo d330-10igl -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:ideapad_creator_5-16ach6_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7428DDA8-7629-4AF8-8DAA-7A49FF9D6DA1",
              "versionEndExcluding": "gscn34ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:ideapad_creator_5-16ach6:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "90031C15-00A0-40F8-A98B-DDFA3F79D247",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:ideapad_5_pro-16ihu6_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FFB4225-D28D-4C3B-BB03-349B966CCFCF",
              "versionEndExcluding": "grcn22ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:ideapad_5_pro-16ihu6:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC34C489-CC06-41DF-91C8-2919B9770E78",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:ideapad_5_pro-16ach6_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD22DD91-73C6-4982-9424-6C3AA1D52EA6",
              "versionEndExcluding": "gscn34ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:ideapad_5_pro-16ach6:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F160EE76-3FF4-42EB-94DE-4FEFCCEE54C2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_slim_7-13itl05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "09F8B96E-197D-4E6C-B766-EFB312705CA0",
              "versionEndExcluding": "f7cn39ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_slim_7-13itl05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B6E471A-EB31-46FE-944E-F48397F57E13",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_slim_7-13acn05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1EBDE114-7FCF-4C49-A8F6-E20B25736454",
              "versionEndExcluding": "ghcn28ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_slim_7-13acn05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FAF0D1D-070A-401E-B5B3-F3BCDD1860F7",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_slim_7_pro_16arh7_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "650BA4E3-7255-4AE1-B192-58C45166039F",
              "versionEndExcluding": "klcn15ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_slim_7_pro_16arh7:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "620ACBF6-93BA-47B8-8AA6-974D81473171",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_slim_7_pro_16ach6_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "851B51FB-DEFB-4E55-8114-BA49BEF8DFDC",
              "versionEndExcluding": "hucn16ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_slim_7_pro_16ach6:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0BEB08B-768F-4BFC-819B-B8A1DD01431F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_slim_7_carbon_13itl5_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "63C58648-9441-450E-BFFF-874781D29BC5",
              "versionEndExcluding": "f7cn39ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_slim_7_carbon_13itl5:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "978E1E13-8918-41D0-985C-53904CE0EC16",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_duet_7-13itl6-lte_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "72679907-6E23-4BE7-809B-824B2E16D0EA",
              "versionEndExcluding": "gpcn24ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_duet_7-13itl6-lte:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "72782D1B-DFFB-4F78-AA4F-C10AEF277D2F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_duet_7-13itl6_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "853F9F82-3DF5-4D6B-A3BD-410AFD9BD7F1",
              "versionEndExcluding": "gpcn24ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_duet_7-13itl6:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "02CB1D39-F031-4AF9-88FE-E0E8E0A38768",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:yoga_duet_7-13iml05_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E799EC61-46FC-46B1-B27C-67D472AEC947",
              "versionEndExcluding": "ercn30ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_duet_7-13iml05:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FCE2EC8-8384-4DE1-9B45-AECB510D0B1E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_plus_g3_iap_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1EA39607-1264-4595-8BF2-A03FEE46A677",
              "versionEndExcluding": "k6cn29ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8480B3A8-6F19-4C01-A5E8-B141DA845E4D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_plus_g2_itg_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD9DA7E8-963A-4845-A1A5-33FCD953F7AB",
              "versionEndExcluding": "gycn31ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D725D6F-60A7-4BEE-A19F-AF6CEEE46FE1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_16p_nx_arh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6219BA17-B4B5-476A-A583-0A1A7C724E69",
              "versionEndExcluding": "kjcn27ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_16p_nx_arh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F21184FF-7B12-4422-A819-C0836777283B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_16_g4\\+_iap_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4405421-414E-4BAC-8E9F-E99B398BF0CD",
              "versionEndExcluding": "hycn40ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_16_g4\\+_iap:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "56EA6832-49E6-4FFB-B49B-5ED528C8DC26",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_16_g4\\+_ara_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "30656321-CDEC-4078-BD88-AF6074D42F48",
              "versionEndExcluding": "j6cn40ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_16_g4\\+_ara:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4062B850-7517-41A1-BA85-CEA38520B324",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_14_g4\\+_iap_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D008FDCD-FD4E-4DE7-8AF7-8982E2360E68",
              "versionEndExcluding": "hycn40ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_14_g4\\+_iap:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2EE24BE8-EFD8-417E-9059-3844E1526F32",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_14_g4\\+_ara_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AA85A21-27F0-4867-91D4-377EFD9A91CE",
              "versionEndExcluding": "j6cn40ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_14_g4\\+_ara:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B69C2C6D-E963-48F9-A91D-FC850A5C05DE",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:thinkbook_13x_itg_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CA24E6D-72F4-44A0-B7E2-378CC6260549",
              "versionEndExcluding": "hlcn30ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkbook_13x_itg:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "09B30D44-B6FB-4824-BC6A-24307D8F7439",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:ideapad_slim_7_pro_16ach6_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "57C398C8-388E-4622-B211-CB51120D8933",
              "versionEndExcluding": "hucn16ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:ideapad_slim_7_pro_16ach6:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9378A311-DA4E-4452-8C0A-337F2375F948",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:s540-15iml_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7654476D-65DA-495F-91F2-A59A6C840F51",
              "versionEndExcluding": "cncn22ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:s540-15iml:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "78A9FC30-244F-441E-950E-2FDBFC520133",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:slim_7_16arh7_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC68F2A8-9976-4157-9926-1F398584C0EB",
              "versionEndExcluding": "klcn15ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:slim_7_16arh7:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CEF0DB00-37E3-48C9-8229-59422C95C937",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:ideapad_duet_3_10igl5_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "12037F5F-401A-4E68-92A8-922A5CA9BD63",
              "versionEndExcluding": "eqcn37ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C6ED2CCF-A6BB-45C8-B729-31241AA7254A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:ideapad_5_pro_16arh7_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F9E07F2-CCDE-4B45-9B04-7691D1869C1C",
              "versionEndExcluding": "j4cn33ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:ideapad_5_pro_16arh7:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "33034E99-8CA2-4736-91F6-8E42181E9AF0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:d330-10igl_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "93B3E734-67AE-498C-9808-70D5F07161EE",
              "versionEndExcluding": "g0cn11ww",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:d330-10igl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3FBE774E-04D0-46DE-8F9C-D4B9380BD1BC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad potencial en un driver utilizado durante el proceso de fabricaci\u00f3n de algunos dispositivos de consumo Lenovo Notebook que no se desactiv\u00f3 por error, puede permitir que un atacante con privilegios elevados modifique la configuraci\u00f3n de arranque seguro modificando una variable de la NVRAM."
    }
  ],
  "id": "CVE-2022-3431",
  "lastModified": "2024-11-21T07:19:30.057",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.7,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 5.9,
        "source": "psirt@lenovo.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-10-09T19:15:09.987",
  "references": [
    {
      "source": "psirt@lenovo.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://support.lenovo.com/us/en/product_security/LEN-94952"
    }
  ],
  "sourceIdentifier": "psirt@lenovo.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-276"
        }
      ],
      "source": "psirt@lenovo.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-276"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.