medium6.7
CVE-2022-3430
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot…
Impact
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | D330-10igl Firmware | before g0cn11ww |
| Lenovo | Ideapad 5 Pro 16iah7 Firmware | before j4cn33ww |
| Lenovo | Ideapad 5 Pro 16arh7 Firmware | before j5cn27ww |
| Lenovo | Ideapad Duet 3 10igl5 Firmware | before eqcn37ww |
| Lenovo | Slim 7 16arh7 Firmware | before klcn15ww |
| Lenovo | Thinkbook 15p Imp Firmware | before f6cn25ww |
| Lenovo | Slim 7-14are05 Firmware | before dmcn43ww |
| Lenovo | Ideapad Slim 7-14iil05 Firmware | before dhcn35ww |
| Lenovo | Ideapad Slim 7-14itl05 Firmware | before fbcn29ww |
| Lenovo | Ideapad Slim 7-15iil05 Firmware | before dhcn35ww |
| Lenovo | Slim 7-15imh05 Firmware | before dncn32ww |
| Lenovo | Slim 7-15itl05 Firmware | before fbcn29ww |