// For flags

CVE-2022-3430

 

Severity Score

6.7
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Una vulnerabilidad potencial en el controlador de configuración WMI en algunos dispositivos portátiles Lenovo Notebook puede permitir que un atacante con privilegios elevados modifique la configuración de arranque seguro modificando una variable NVRAM.

*Credits: Lenovo thanks Martin Smolár from ESET for reporting these issues.
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2022-10-07 CVE Reserved
  • 2023-01-23 CVE Published
  • 2024-08-03 CVE Updated
  • 2024-08-15 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-276: Incorrect Default Permissions
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Lenovo
Search vendor "Lenovo"
D330-10igl Firmware
Search vendor "Lenovo" for product "D330-10igl Firmware"
< g0cn11ww
Search vendor "Lenovo" for product "D330-10igl Firmware" and version " < g0cn11ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
D330-10igl
Search vendor "Lenovo" for product "D330-10igl"
--
Safe
Lenovo
Search vendor "Lenovo"
Ideapad 5 Pro 16iah7 Firmware
Search vendor "Lenovo" for product "Ideapad 5 Pro 16iah7 Firmware"
< j4cn33ww
Search vendor "Lenovo" for product "Ideapad 5 Pro 16iah7 Firmware" and version " < j4cn33ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Ideapad 5 Pro 16iah7
Search vendor "Lenovo" for product "Ideapad 5 Pro 16iah7"
--
Safe
Lenovo
Search vendor "Lenovo"
Ideapad 5 Pro 16arh7 Firmware
Search vendor "Lenovo" for product "Ideapad 5 Pro 16arh7 Firmware"
< j5cn27ww
Search vendor "Lenovo" for product "Ideapad 5 Pro 16arh7 Firmware" and version " < j5cn27ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Ideapad 5 Pro 16arh7
Search vendor "Lenovo" for product "Ideapad 5 Pro 16arh7"
--
Safe
Lenovo
Search vendor "Lenovo"
Ideapad Duet 3 10igl5 Firmware
Search vendor "Lenovo" for product "Ideapad Duet 3 10igl5 Firmware"
< eqcn37ww
Search vendor "Lenovo" for product "Ideapad Duet 3 10igl5 Firmware" and version " < eqcn37ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Ideapad Duet 3 10igl5
Search vendor "Lenovo" for product "Ideapad Duet 3 10igl5"
--
Safe
Lenovo
Search vendor "Lenovo"
Slim 7 16arh7 Firmware
Search vendor "Lenovo" for product "Slim 7 16arh7 Firmware"
< klcn15ww
Search vendor "Lenovo" for product "Slim 7 16arh7 Firmware" and version " < klcn15ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Slim 7 16arh7
Search vendor "Lenovo" for product "Slim 7 16arh7"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 15p Imp Firmware
Search vendor "Lenovo" for product "Thinkbook 15p Imp Firmware"
< f6cn25ww
Search vendor "Lenovo" for product "Thinkbook 15p Imp Firmware" and version " < f6cn25ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 15p Imp
Search vendor "Lenovo" for product "Thinkbook 15p Imp"
--
Safe
Lenovo
Search vendor "Lenovo"
Slim 7-14are05 Firmware
Search vendor "Lenovo" for product "Slim 7-14are05 Firmware"
< dmcn43ww
Search vendor "Lenovo" for product "Slim 7-14are05 Firmware" and version " < dmcn43ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Slim 7-14are05
Search vendor "Lenovo" for product "Slim 7-14are05"
--
Safe
Lenovo
Search vendor "Lenovo"
Ideapad Slim 7-14iil05 Firmware
Search vendor "Lenovo" for product "Ideapad Slim 7-14iil05 Firmware"
< dhcn35ww
Search vendor "Lenovo" for product "Ideapad Slim 7-14iil05 Firmware" and version " < dhcn35ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Ideapad Slim 7-14iil05
Search vendor "Lenovo" for product "Ideapad Slim 7-14iil05"
--
Safe
Lenovo
Search vendor "Lenovo"
Ideapad Slim 7-14itl05 Firmware
Search vendor "Lenovo" for product "Ideapad Slim 7-14itl05 Firmware"
< fbcn29ww
Search vendor "Lenovo" for product "Ideapad Slim 7-14itl05 Firmware" and version " < fbcn29ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Ideapad Slim 7-14itl05
Search vendor "Lenovo" for product "Ideapad Slim 7-14itl05"
--
Safe
Lenovo
Search vendor "Lenovo"
Ideapad Slim 7-15iil05 Firmware
Search vendor "Lenovo" for product "Ideapad Slim 7-15iil05 Firmware"
< dhcn35ww
Search vendor "Lenovo" for product "Ideapad Slim 7-15iil05 Firmware" and version " < dhcn35ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Ideapad Slim 7-15iil05
Search vendor "Lenovo" for product "Ideapad Slim 7-15iil05"
--
Safe
Lenovo
Search vendor "Lenovo"
Slim 7-15imh05 Firmware
Search vendor "Lenovo" for product "Slim 7-15imh05 Firmware"
< dncn32ww
Search vendor "Lenovo" for product "Slim 7-15imh05 Firmware" and version " < dncn32ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Slim 7-15imh05
Search vendor "Lenovo" for product "Slim 7-15imh05"
--
Safe
Lenovo
Search vendor "Lenovo"
Slim 7-15itl05 Firmware
Search vendor "Lenovo" for product "Slim 7-15itl05 Firmware"
< fbcn29ww
Search vendor "Lenovo" for product "Slim 7-15itl05 Firmware" and version " < fbcn29ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Slim 7-15itl05
Search vendor "Lenovo" for product "Slim 7-15itl05"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 13x Itg Firmware
Search vendor "Lenovo" for product "Thinkbook 13x Itg Firmware"
< hlcn30ww
Search vendor "Lenovo" for product "Thinkbook 13x Itg Firmware" and version " < hlcn30ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 13x Itg
Search vendor "Lenovo" for product "Thinkbook 13x Itg"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 14 G2 Are Firmware
Search vendor "Lenovo" for product "Thinkbook 14 G2 Are Firmware"
< facn33ww
Search vendor "Lenovo" for product "Thinkbook 14 G2 Are Firmware" and version " < facn33ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 14 G2 Are
Search vendor "Lenovo" for product "Thinkbook 14 G2 Are"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 14 G2 Itl Firmware
Search vendor "Lenovo" for product "Thinkbook 14 G2 Itl Firmware"
< f8cn52ww
Search vendor "Lenovo" for product "Thinkbook 14 G2 Itl Firmware" and version " < f8cn52ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 14 G2 Itl
Search vendor "Lenovo" for product "Thinkbook 14 G2 Itl"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 14 G3 Acl Firmware
Search vendor "Lenovo" for product "Thinkbook 14 G3 Acl Firmware"
< gqcn35ww_hfcn30ww
Search vendor "Lenovo" for product "Thinkbook 14 G3 Acl Firmware" and version " < gqcn35ww_hfcn30ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 14 G3 Acl
Search vendor "Lenovo" for product "Thinkbook 14 G3 Acl"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 14 G3 Itl Firmware
Search vendor "Lenovo" for product "Thinkbook 14 G3 Itl Firmware"
< hrcn13ww
Search vendor "Lenovo" for product "Thinkbook 14 G3 Itl Firmware" and version " < hrcn13ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 14 G3 Itl
Search vendor "Lenovo" for product "Thinkbook 14 G3 Itl"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 14 G4\+ Ara Firmware
Search vendor "Lenovo" for product "Thinkbook 14 G4\+ Ara Firmware"
< j6cn40ww
Search vendor "Lenovo" for product "Thinkbook 14 G4\+ Ara Firmware" and version " < j6cn40ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 14 G4\+ Ara
Search vendor "Lenovo" for product "Thinkbook 14 G4\+ Ara"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 14 G4\+ Iap Firmware
Search vendor "Lenovo" for product "Thinkbook 14 G4\+ Iap Firmware"
< hycn40ww
Search vendor "Lenovo" for product "Thinkbook 14 G4\+ Iap Firmware" and version " < hycn40ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 14 G4\+ Iap
Search vendor "Lenovo" for product "Thinkbook 14 G4\+ Iap"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 14p G3 Arh Firmware
Search vendor "Lenovo" for product "Thinkbook 14p G3 Arh Firmware"
< k4cn31ww
Search vendor "Lenovo" for product "Thinkbook 14p G3 Arh Firmware" and version " < k4cn31ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 14p G3 Arh
Search vendor "Lenovo" for product "Thinkbook 14p G3 Arh"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 14s Yoga Itl Firmware
Search vendor "Lenovo" for product "Thinkbook 14s Yoga Itl Firmware"
< fncn40ww
Search vendor "Lenovo" for product "Thinkbook 14s Yoga Itl Firmware" and version " < fncn40ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 14s Yoga Itl
Search vendor "Lenovo" for product "Thinkbook 14s Yoga Itl"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 15 G2 Are Firmware
Search vendor "Lenovo" for product "Thinkbook 15 G2 Are Firmware"
< facn33ww
Search vendor "Lenovo" for product "Thinkbook 15 G2 Are Firmware" and version " < facn33ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 15 G2 Are
Search vendor "Lenovo" for product "Thinkbook 15 G2 Are"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 15 G2 Itl Firmware
Search vendor "Lenovo" for product "Thinkbook 15 G2 Itl Firmware"
< f8cn52ww
Search vendor "Lenovo" for product "Thinkbook 15 G2 Itl Firmware" and version " < f8cn52ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 15 G2 Itl
Search vendor "Lenovo" for product "Thinkbook 15 G2 Itl"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 15 G3 Acl Firmware
Search vendor "Lenovo" for product "Thinkbook 15 G3 Acl Firmware"
< gqcn35ww_hfcn30ww
Search vendor "Lenovo" for product "Thinkbook 15 G3 Acl Firmware" and version " < gqcn35ww_hfcn30ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 15 G3 Acl
Search vendor "Lenovo" for product "Thinkbook 15 G3 Acl"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 15 G3 Itl Firmware
Search vendor "Lenovo" for product "Thinkbook 15 G3 Itl Firmware"
< hrcn13ww
Search vendor "Lenovo" for product "Thinkbook 15 G3 Itl Firmware" and version " < hrcn13ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 15 G3 Itl
Search vendor "Lenovo" for product "Thinkbook 15 G3 Itl"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 15 Gd Aba Firmware
Search vendor "Lenovo" for product "Thinkbook 15 Gd Aba Firmware"
< jpcn20ww
Search vendor "Lenovo" for product "Thinkbook 15 Gd Aba Firmware" and version " < jpcn20ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 15 G4 Aba
Search vendor "Lenovo" for product "Thinkbook 15 G4 Aba"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 15p G2 Ith Firmware
Search vendor "Lenovo" for product "Thinkbook 15p G2 Ith Firmware"
< hjcn31ww
Search vendor "Lenovo" for product "Thinkbook 15p G2 Ith Firmware" and version " < hjcn31ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 15p G2 Ith
Search vendor "Lenovo" for product "Thinkbook 15p G2 Ith"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 16 G4\+ Ara Firmware
Search vendor "Lenovo" for product "Thinkbook 16 G4\+ Ara Firmware"
< j6cn40ww
Search vendor "Lenovo" for product "Thinkbook 16 G4\+ Ara Firmware" and version " < j6cn40ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 16 G4\+ Ara
Search vendor "Lenovo" for product "Thinkbook 16 G4\+ Ara"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 16 G4\+ Iap Firmware
Search vendor "Lenovo" for product "Thinkbook 16 G4\+ Iap Firmware"
< hycn40ww
Search vendor "Lenovo" for product "Thinkbook 16 G4\+ Iap Firmware" and version " < hycn40ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 16 G4\+ Iap
Search vendor "Lenovo" for product "Thinkbook 16 G4\+ Iap"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 16p G3 Arh Firmware
Search vendor "Lenovo" for product "Thinkbook 16p G3 Arh Firmware"
< kccn31ww
Search vendor "Lenovo" for product "Thinkbook 16p G3 Arh Firmware" and version " < kccn31ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 16p G3 Arh
Search vendor "Lenovo" for product "Thinkbook 16p G3 Arh"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook 16p Nx Arh Firmware
Search vendor "Lenovo" for product "Thinkbook 16p Nx Arh Firmware"
< kjcn27ww
Search vendor "Lenovo" for product "Thinkbook 16p Nx Arh Firmware" and version " < kjcn27ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook 16p Nx Arh
Search vendor "Lenovo" for product "Thinkbook 16p Nx Arh"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook Plus G2 Itg Firmware
Search vendor "Lenovo" for product "Thinkbook Plus G2 Itg Firmware"
< gycn31ww
Search vendor "Lenovo" for product "Thinkbook Plus G2 Itg Firmware" and version " < gycn31ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook Plus G2 Itg
Search vendor "Lenovo" for product "Thinkbook Plus G2 Itg"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkbook Plus G3 Iap Firmware
Search vendor "Lenovo" for product "Thinkbook Plus G3 Iap Firmware"
< k6cn29ww
Search vendor "Lenovo" for product "Thinkbook Plus G3 Iap Firmware" and version " < k6cn29ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkbook Plus G3 Iap
Search vendor "Lenovo" for product "Thinkbook Plus G3 Iap"
--
Safe
Lenovo
Search vendor "Lenovo"
Yoga Creator 7-15imh05 Firmware
Search vendor "Lenovo" for product "Yoga Creator 7-15imh05 Firmware"
< dncn32ww
Search vendor "Lenovo" for product "Yoga Creator 7-15imh05 Firmware" and version " < dncn32ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Yoga Creator 7-15imh05
Search vendor "Lenovo" for product "Yoga Creator 7-15imh05"
--
Safe
Lenovo
Search vendor "Lenovo"
Yoga Duet 7-13iml05 Firmware
Search vendor "Lenovo" for product "Yoga Duet 7-13iml05 Firmware"
< ercn30ww
Search vendor "Lenovo" for product "Yoga Duet 7-13iml05 Firmware" and version " < ercn30ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Yoga Duet 7-13iml05
Search vendor "Lenovo" for product "Yoga Duet 7-13iml05"
--
Safe
Lenovo
Search vendor "Lenovo"
Yoga Duet 7-13itl6 Firmware
Search vendor "Lenovo" for product "Yoga Duet 7-13itl6 Firmware"
< gpcn24ww
Search vendor "Lenovo" for product "Yoga Duet 7-13itl6 Firmware" and version " < gpcn24ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Yoga Duet 7-13itl6
Search vendor "Lenovo" for product "Yoga Duet 7-13itl6"
--
Safe
Lenovo
Search vendor "Lenovo"
Yoga Duet 7-13itl6-lte Firmware
Search vendor "Lenovo" for product "Yoga Duet 7-13itl6-lte Firmware"
< gpcn24ww
Search vendor "Lenovo" for product "Yoga Duet 7-13itl6-lte Firmware" and version " < gpcn24ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Yoga Duet 7-13itl6-lte
Search vendor "Lenovo" for product "Yoga Duet 7-13itl6-lte"
--
Safe
Lenovo
Search vendor "Lenovo"
Yoga Slim 7 Pro 16arh7 Firmware
Search vendor "Lenovo" for product "Yoga Slim 7 Pro 16arh7 Firmware"
< klcn15ww
Search vendor "Lenovo" for product "Yoga Slim 7 Pro 16arh7 Firmware" and version " < klcn15ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Yoga Slim 7 Pro 16arh7
Search vendor "Lenovo" for product "Yoga Slim 7 Pro 16arh7"
--
Safe
Lenovo
Search vendor "Lenovo"
Yoga Slim 7-14are05 Firmware
Search vendor "Lenovo" for product "Yoga Slim 7-14are05 Firmware"
< dmcn43ww
Search vendor "Lenovo" for product "Yoga Slim 7-14are05 Firmware" and version " < dmcn43ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Yoga Slim 7-14are05
Search vendor "Lenovo" for product "Yoga Slim 7-14are05"
--
Safe
Lenovo
Search vendor "Lenovo"
Yoga Slim 7-14iil05 Firmware
Search vendor "Lenovo" for product "Yoga Slim 7-14iil05 Firmware"
< dmcn35ww
Search vendor "Lenovo" for product "Yoga Slim 7-14iil05 Firmware" and version " < dmcn35ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Yoga Slim 7-14iil05
Search vendor "Lenovo" for product "Yoga Slim 7-14iil05"
--
Safe
Lenovo
Search vendor "Lenovo"
Yoga Slim 7-14itl05 Firmware
Search vendor "Lenovo" for product "Yoga Slim 7-14itl05 Firmware"
< fbcn29ww
Search vendor "Lenovo" for product "Yoga Slim 7-14itl05 Firmware" and version " < fbcn29ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Yoga Slim 7-14itl05
Search vendor "Lenovo" for product "Yoga Slim 7-14itl05"
--
Safe
Lenovo
Search vendor "Lenovo"
Yoga Slim 7-15iil05 Firmware
Search vendor "Lenovo" for product "Yoga Slim 7-15iil05 Firmware"
< dhcn35ww
Search vendor "Lenovo" for product "Yoga Slim 7-15iil05 Firmware" and version " < dhcn35ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Yoga Slim 7-15iil05
Search vendor "Lenovo" for product "Yoga Slim 7-15iil05"
--
Safe
Lenovo
Search vendor "Lenovo"
Yoga Slim 7-15imh05 Firmware
Search vendor "Lenovo" for product "Yoga Slim 7-15imh05 Firmware"
< dncn32ww
Search vendor "Lenovo" for product "Yoga Slim 7-15imh05 Firmware" and version " < dncn32ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Yoga Slim 7-15imh05
Search vendor "Lenovo" for product "Yoga Slim 7-15imh05"
--
Safe
Lenovo
Search vendor "Lenovo"
Yoga Slim 7-15itl05 Firmware
Search vendor "Lenovo" for product "Yoga Slim 7-15itl05 Firmware"
< fbcn29ww
Search vendor "Lenovo" for product "Yoga Slim 7-15itl05 Firmware" and version " < fbcn29ww"
-
Affected
in Lenovo
Search vendor "Lenovo"
Yoga Slim 7-15itl05
Search vendor "Lenovo" for product "Yoga Slim 7-15itl05"
--
Safe