CVE-2022-3431

🗓️ 09 Oct 2023 18:18:54Reported by lenovoType

Potential vulnerability in Lenovo Notebook driver allows attacker to modify secure boot settin

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-3431	10 Nov 202212:01	–	circl
CNNVD	Lenovo Notebook Security Breach	9 Oct 202300:00	–	cnnvd
Cvelist	CVE-2022-3431	9 Oct 202318:18	–	cvelist
EUVD	EUVD-2022-42807	3 Oct 202520:07	–	euvd
NVD	CVE-2022-3431	9 Oct 202319:15	–	nvd
Prion	Design/Logic Flaw	9 Oct 202319:15	–	prion
Positive Technologies	PT-2022-22120 · Lenovo · Lenovo Notebook	10 Nov 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-3431	22 May 202523:04	–	redhatcve
The Hacker News	New UEFI Firmware Flaws Reported in Several Lenovo Notebook Models	10 Nov 202206:36	–	thn
Vulnrichment	CVE-2022-3431	9 Oct 202318:18	–	vulnrichment

NVD

Vulners

Node

lenovo ideapad_creator_5-16ach6_firmwareRange<gscn34ww

AND

lenovo ideapad_creator_5-16ach6Match-

Node

lenovo ideapad_5_pro-16ihu6_firmwareRange<grcn22ww

AND

lenovo ideapad_5_pro-16ihu6Match-

Node

lenovo ideapad_5_pro-16ach6_firmwareRange<gscn34ww

AND

lenovo ideapad_5_pro-16ach6Match-

Node

lenovo yoga_slim_7-13itl05_firmwareRange<f7cn39ww

AND

lenovo yoga_slim_7-13itl05Match-

Node

lenovo yoga_slim_7-13acn05_firmwareRange<ghcn28ww

AND

lenovo yoga_slim_7-13acn05Match-

Node

lenovo yoga_slim_7_pro_16arh7_firmwareRange<klcn15ww

AND

lenovo yoga_slim_7_pro_16arh7Match-

Node

lenovo yoga_slim_7_pro_16ach6_firmwareRange<hucn16ww

AND

lenovo yoga_slim_7_pro_16ach6Match-

Node

lenovo yoga_slim_7_carbon_13itl5_firmwareRange<f7cn39ww

AND

lenovo yoga_slim_7_carbon_13itl5Match-

Node

lenovo yoga_duet_7-13itl6-lte_firmwareRange<gpcn24ww

AND

lenovo yoga_duet_7-13itl6-lteMatch-

Node

lenovo yoga_duet_7-13itl6_firmwareRange<gpcn24ww

AND

lenovo yoga_duet_7-13itl6Match-

Node

lenovo yoga_duet_7-13iml05_firmwareRange<ercn30ww

AND

lenovo yoga_duet_7-13iml05Match-

Node

lenovo thinkbook_plus_g3_iap_firmwareRange<k6cn29ww

AND

lenovo thinkbook_plus_g3_iapMatch-

Node

lenovo thinkbook_plus_g2_itg_firmwareRange<gycn31ww

AND

lenovo thinkbook_plus_g2_itgMatch-

Node

lenovo thinkbook_16p_nx_arh_firmwareRange<kjcn27ww

AND

lenovo thinkbook_16p_nx_arhMatch-

Node

lenovo thinkbook_16_g4+_iap_firmwareRange<hycn40ww

AND

lenovo thinkbook_16_g4+_iapMatch-

Node

lenovo thinkbook_16_g4+_ara_firmwareRange<j6cn40ww

AND

lenovo thinkbook_16_g4+_araMatch-

Node

lenovo thinkbook_14_g4+_iap_firmwareRange<hycn40ww

AND

lenovo thinkbook_14_g4+_iapMatch-

Node

lenovo thinkbook_14_g4+_ara_firmwareRange<j6cn40ww

AND

lenovo thinkbook_14_g4+_araMatch-

Node

lenovo thinkbook_13x_itg_firmwareRange<hlcn30ww

AND

lenovo thinkbook_13x_itgMatch-

Node

lenovo ideapad_slim_7_pro_16ach6_firmwareRange<hucn16ww

AND

lenovo ideapad_slim_7_pro_16ach6Match-

Node

lenovo s540-15iml_firmwareRange<cncn22ww

AND

lenovo s540-15imlMatch-

Node

lenovo slim_7_16arh7_firmwareRange<klcn15ww

AND

lenovo slim_7_16arh7Match-

Node

lenovo ideapad_duet_3_10igl5_firmwareRange<eqcn37ww

AND

lenovo ideapad_duet_3_10igl5Match-

Node

lenovo ideapad_5_pro_16arh7_firmwareRange<j4cn33ww

AND

lenovo ideapad_5_pro_16arh7Match-

Node

lenovo d330-10igl_firmwareRange<g0cn11ww

AND

lenovo d330-10iglMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "BIOS",
    "vendor": "Lenovo",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Source	Link
support	www.support.lenovo.com/us/en/product_security/LEN-94952

21 Nov 2024 07:19Current

7.5High risk

Vulners AI Score7.5

CVSS 3.16.7 - 7.8

EPSS0.00035

SSVC

CWE-276