Medium severity · published Jan 23, 2023
CVE-2022-3430
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by…
6.7
CVSS
0.3%
EPSS
No
On KEV
Description
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BI
BIOS · Lenovo
various · source: vendor
DF
D330-10igl Firmware · Lenovo
before g0cn11ww · source: NVD
I5
Ideapad 5 Pro 16arh7 Firmware · Lenovo
before j5cn27ww · source: NVD
I5
Ideapad 5 Pro 16iah7 Firmware · Lenovo
before j4cn33ww · source: NVD
ID
Ideapad Duet 3 10igl5 Firmware · Lenovo
before eqcn37ww · source: NVD
IS
Ideapad Slim 7-14iil05 Firmware · Lenovo
before dhcn35ww · source: NVD
IS
Ideapad Slim 7-14itl05 Firmware · Lenovo
before fbcn29ww · source: NVD
IS
Ideapad Slim 7-15iil05 Firmware · Lenovo
before dhcn35ww · source: NVD
S7
Slim 7 16arh7 Firmware · Lenovo
before klcn15ww · source: NVD
S7
Slim 7-14are05 Firmware · Lenovo
before dmcn43ww · source: NVD
S7
Slim 7-15imh05 Firmware · Lenovo
before dncn32ww · source: NVD
S7
Slim 7-15itl05 Firmware · Lenovo
before fbcn29ww · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-3430
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-3430
Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-94952
More from BIOS
7.8
CVE-2022-3431
A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with…
7.8
CVE-2022-1892
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code
7.8
CVE-2022-1891
A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code
7.8
CVE-2022-1890
A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code
7.8
CVE-2016-5247
The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240,…