Lucene search

[email protected]NVD:CVE-2022-3430

HistoryJan 23, 2023 - 5:15 p.m.

CVE-2022-3430

2023-01-2317:15:10

CWE-276

[email protected]

web.nvd.nist.gov

vulnerability

wmi setup

lenovo notebook

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Affected configurations

NVD

Node

lenovod330-10igl_firmwareRange<g0cn11ww

AND

lenovod330-10iglMatch-

Node

lenovoideapad_5_pro_16iah7_firmwareRange<j4cn33ww

AND

lenovoideapad_5_pro_16iah7Match-

Node

lenovoideapad_5_pro_16arh7_firmwareRange<j5cn27ww

AND

lenovoideapad_5_pro_16arh7Match-

Node

lenovoideapad_duet_3_10igl5_firmwareRange<eqcn37ww

AND

lenovoideapad_duet_3_10igl5Match-

Node

lenovoslim_7_16arh7_firmwareRange<klcn15ww

AND

lenovoslim_7_16arh7Match-

Node

lenovothinkbook_15p_imp_firmwareRange<f6cn25ww

AND

lenovothinkbook_15p_impMatch-

Node

lenovoslim_7-14are05_firmwareRange<dmcn43ww

AND

lenovoslim_7-14are05Match-

Node

lenovoideapad_slim_7-14iil05_firmwareRange<dhcn35ww

AND

lenovoideapad_slim_7-14iil05Match-

Node

lenovoideapad_slim_7-14itl05_firmwareRange<fbcn29ww

AND

lenovoideapad_slim_7-14itl05Match-

Node

lenovoideapad_slim_7-15iil05_firmwareRange<dhcn35ww

AND

lenovoideapad_slim_7-15iil05Match-

Node

lenovoslim_7-15imh05_firmwareRange<dncn32ww

AND

lenovoslim_7-15imh05Match-

Node

lenovoslim_7-15itl05_firmwareRange<fbcn29ww

AND

lenovoslim_7-15itl05Match-

Node

lenovothinkbook_13x_itg_firmwareRange<hlcn30ww

AND

lenovothinkbook_13x_itgMatch-

Node

lenovothinkbook_14_g2_are_firmwareRange<facn33ww

AND

lenovothinkbook_14_g2_areMatch-

Node

lenovothinkbook_14_g2_itl_firmwareRange<f8cn52ww

AND

lenovothinkbook_14_g2_itlMatch-

Node

lenovothinkbook_14_g3_acl_firmwareRange<gqcn35ww_hfcn30ww

AND

lenovothinkbook_14_g3_aclMatch-

Node

lenovothinkbook_14_g3_itl_firmwareRange<hrcn13ww

AND

lenovothinkbook_14_g3_itlMatch-

Node

lenovothinkbook_14_g4\+_ara_firmwareRange<j6cn40ww

AND

lenovothinkbook_14_g4\+_araMatch-

Node

lenovothinkbook_14_g4\+_iap_firmwareRange<hycn40ww

AND

lenovothinkbook_14_g4\+_iapMatch-

Node

lenovothinkbook_14p_g3_arh_firmwareRange<k4cn31ww

AND

lenovothinkbook_14p_g3_arhMatch-

Node

lenovothinkbook_14s_yoga_itl_firmwareRange<fncn40ww

AND

lenovothinkbook_14s_yoga_itlMatch-

Node

lenovothinkbook_15_g2_are_firmwareRange<facn33ww

AND

lenovothinkbook_15_g2_areMatch-

Node

lenovothinkbook_15_g2_itl_firmwareRange<f8cn52ww

AND

lenovothinkbook_15_g2_itlMatch-

Node

lenovothinkbook_15_g3_acl_firmwareRange<gqcn35ww_hfcn30ww

AND

lenovothinkbook_15_g3_aclMatch-

Node

lenovothinkbook_15_g3_itlMatch-

AND

lenovothinkbook_15_g3_itl_firmwareRange<hrcn13ww

Node

lenovothinkbook_15_g4_abaMatch-

AND

lenovothinkbook_15_gd_aba_firmwareRange<jpcn20ww

Node

lenovothinkbook_15p_g2_ithMatch-

AND

lenovothinkbook_15p_g2_ith_firmwareRange<hjcn31ww

Node

lenovothinkbook_16_g4\+_araMatch-

AND

lenovothinkbook_16_g4\+_ara_firmwareRange<j6cn40ww

Node

lenovothinkbook_16_g4\+_iapMatch-

AND

lenovothinkbook_16_g4\+_iap_firmwareRange<hycn40ww

Node

lenovothinkbook_16p_g3_arhMatch-

AND

lenovothinkbook_16p_g3_arh_firmwareRange<kccn31ww

Node

lenovothinkbook_16p_nx_arhMatch-

AND

lenovothinkbook_16p_nx_arh_firmwareRange<kjcn27ww

Node

lenovothinkbook_plus_g2_itgMatch-

AND

lenovothinkbook_plus_g2_itg_firmwareRange<gycn31ww

Node

lenovothinkbook_plus_g3_iap_firmwareRange<k6cn29ww

AND

lenovothinkbook_plus_g3_iapMatch-

Node

lenovoyoga_creator_7-15imh05_firmwareRange<dncn32ww

AND

lenovoyoga_creator_7-15imh05Match-

Node

lenovoyoga_duet_7-13iml05_firmwareRange<ercn30ww

AND

lenovoyoga_duet_7-13iml05Match-

Node

lenovoyoga_duet_7-13itl6_firmwareRange<gpcn24ww

AND

lenovoyoga_duet_7-13itl6Match-

Node

lenovoyoga_duet_7-13itl6-lte_firmwareRange<gpcn24ww

AND

lenovoyoga_duet_7-13itl6-lteMatch-

Node

lenovoyoga_slim_7_pro_16arh7_firmwareRange<klcn15ww

AND

lenovoyoga_slim_7_pro_16arh7Match-

Node

lenovoyoga_slim_7-14are05_firmwareRange<dmcn43ww

AND

lenovoyoga_slim_7-14are05Match-

Node

lenovoyoga_slim_7-14iil05_firmwareRange<dmcn35ww

AND

lenovoyoga_slim_7-14iil05Match-

Node

lenovoyoga_slim_7-14itl05_firmwareRange<fbcn29ww

AND

lenovoyoga_slim_7-14itl05Match-

Node

lenovoyoga_slim_7-15iil05_firmwareRange<dhcn35ww

AND

lenovoyoga_slim_7-15iil05Match-

Node

lenovoyoga_slim_7-15imh05_firmwareRange<dncn32ww

AND

lenovoyoga_slim_7-15imh05Match-

Node

lenovoyoga_slim_7-15itl05_firmwareRange<fbcn29ww

AND

lenovoyoga_slim_7-15itl05Match-

References

support.lenovo.com/us/en/product_security/LEN-94952

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for NVD:CVE-2022-3430

cve1 cvelist1 prion1 thn1