CVE Feed

    Dashboard / CVE / CVE-2022-3430

    CVE-2022-3430

    A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

    Published:Jan 23, 2023
    Last Modified:Apr 2, 2025
    EPS:Jan 23, 2023
    EPSS Score:0.0004
    CVSS Score:6.7

    Affected Products

    Vendor
    Lenovo
    Product
    D330-10igl
    Vendor
    Lenovo
    Product
    D330-10igl Firmware
    Vendor
    Lenovo
    Product
    Ideapad 5 Pro 16arh7
    Vendor
    Lenovo
    Product
    Ideapad 5 Pro 16arh7 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 5 Pro 16iah7
    Vendor
    Lenovo
    Product
    Ideapad 5 Pro 16iah7 Firmware
    Vendor
    Lenovo
    Product
    Ideapad Duet 3 10igl5
    Vendor
    Lenovo
    Product
    Ideapad Duet 3 10igl5 Firmware
    Vendor
    Lenovo
    Product
    Ideapad Slim 7-14iil05
    Vendor
    Lenovo
    Product
    Ideapad Slim 7-14iil05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad Slim 7-14itl05
    Vendor
    Lenovo
    Product
    Ideapad Slim 7-14itl05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad Slim 7-15iil05
    Vendor
    Lenovo
    Product
    Ideapad Slim 7-15iil05 Firmware
    Vendor
    Lenovo
    Product
    Slim 7-14are05
    Vendor
    Lenovo
    Product
    Slim 7-14are05 Firmware
    Vendor
    Lenovo
    Product
    Slim 7-15imh05
    Vendor
    Lenovo
    Product
    Slim 7-15imh05 Firmware
    Vendor
    Lenovo
    Product
    Slim 7-15itl05
    Vendor
    Lenovo
    Product
    Slim 7-15itl05 Firmware
    Vendor
    Lenovo
    Product
    Slim 7 16arh7
    Vendor
    Lenovo
    Product
    Slim 7 16arh7 Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 13x Itg
    Vendor
    Lenovo
    Product
    Thinkbook 13x Itg Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 14 G2 Are
    Vendor
    Lenovo
    Product
    Thinkbook 14 G2 Are Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 14 G2 Itl
    Vendor
    Lenovo
    Product
    Thinkbook 14 G2 Itl Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 14 G3 Acl
    Vendor
    Lenovo
    Product
    Thinkbook 14 G3 Acl Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 14 G3 Itl
    Vendor
    Lenovo
    Product
    Thinkbook 14 G3 Itl Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 14 G4\+ Ara
    Vendor
    Lenovo
    Product
    Thinkbook 14 G4\+ Ara Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 14 G4\+ Iap
    Vendor
    Lenovo
    Product
    Thinkbook 14 G4\+ Iap Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 14p G3 Arh
    Vendor
    Lenovo
    Product
    Thinkbook 14p G3 Arh Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 14s Yoga Itl
    Vendor
    Lenovo
    Product
    Thinkbook 14s Yoga Itl Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 15 G2 Are
    Vendor
    Lenovo
    Product
    Thinkbook 15 G2 Are Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 15 G2 Itl
    Vendor
    Lenovo
    Product
    Thinkbook 15 G2 Itl Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 15 G3 Acl
    Vendor
    Lenovo
    Product
    Thinkbook 15 G3 Acl Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 15 G3 Itl
    Vendor
    Lenovo
    Product
    Thinkbook 15 G3 Itl Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 15 G4 Aba
    Vendor
    Lenovo
    Product
    Thinkbook 15 Gd Aba Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 15p G2 Ith
    Vendor
    Lenovo
    Product
    Thinkbook 15p G2 Ith Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 15p Imp
    Vendor
    Lenovo
    Product
    Thinkbook 15p Imp Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 16 G4\+ Ara
    Vendor
    Lenovo
    Product
    Thinkbook 16 G4\+ Ara Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 16 G4\+ Iap
    Vendor
    Lenovo
    Product
    Thinkbook 16 G4\+ Iap Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 16p G3 Arh
    Vendor
    Lenovo
    Product
    Thinkbook 16p G3 Arh Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 16p Nx Arh
    Vendor
    Lenovo
    Product
    Thinkbook 16p Nx Arh Firmware
    Vendor
    Lenovo
    Product
    Thinkbook Plus G2 Itg
    Vendor
    Lenovo
    Product
    Thinkbook Plus G2 Itg Firmware
    Vendor
    Lenovo
    Product
    Thinkbook Plus G3 Iap
    Vendor
    Lenovo
    Product
    Thinkbook Plus G3 Iap Firmware
    Vendor
    Lenovo
    Product
    Yoga Creator 7-15imh05
    Vendor
    Lenovo
    Product
    Yoga Creator 7-15imh05 Firmware
    Vendor
    Lenovo
    Product
    Yoga Duet 7-13iml05
    Vendor
    Lenovo
    Product
    Yoga Duet 7-13iml05 Firmware
    Vendor
    Lenovo
    Product
    Yoga Duet 7-13itl6
    Vendor
    Lenovo
    Product
    Yoga Duet 7-13itl6-lte
    Vendor
    Lenovo
    Product
    Yoga Duet 7-13itl6-lte Firmware
    Vendor
    Lenovo
    Product
    Yoga Duet 7-13itl6 Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7-14are05
    Vendor
    Lenovo
    Product
    Yoga Slim 7-14are05 Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7-14iil05
    Vendor
    Lenovo
    Product
    Yoga Slim 7-14iil05 Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7-14itl05
    Vendor
    Lenovo
    Product
    Yoga Slim 7-14itl05 Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7-15iil05
    Vendor
    Lenovo
    Product
    Yoga Slim 7-15iil05 Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7-15imh05
    Vendor
    Lenovo
    Product
    Yoga Slim 7-15imh05 Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7-15itl05
    Vendor
    Lenovo
    Product
    Yoga Slim 7-15itl05 Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro 16arh7
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro 16arh7 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-276 Incorrect Default Permissions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High