CVE-2022-3430
Medium
Description
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
SeverityMedium
CVSS6.7
Exploit probability—
ProductLenovo D330-10igl Firmware
PublishedJan 23, 2023
First seenJan 23, 2023
Weakness typeCWE-276CWE-276
How to fix
Update
- lenovo d330-10igl_firmwareg0cn11ww or later
- lenovo ideapad_5_pro_16iah7_firmwarej4cn33ww or later
- lenovo ideapad_5_pro_16arh7_firmwarej5cn27ww or later
- lenovo ideapad_duet_3_10igl5_firmwareeqcn37ww or later
- lenovo slim_7_16arh7_firmwareklcn15ww or later
- lenovo thinkbook_15p_imp_firmwaref6cn25ww or later
- lenovo slim_7-14are05_firmwaredmcn43ww or later
- lenovo ideapad_slim_7-14iil05_firmwaredhcn35ww or later
- lenovo ideapad_slim_7-14itl05_firmwarefbcn29ww or later
- lenovo ideapad_slim_7-15iil05_firmwaredhcn35ww or later
- lenovo slim_7-15imh05_firmwaredncn32ww or later
- lenovo slim_7-15itl05_firmwarefbcn29ww or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo d330-10igl_firmware | v < g0cn11ww | g0cn11ww |
| lenovo ideapad_5_pro_16iah7_firmware | v < j4cn33ww | j4cn33ww |
| lenovo ideapad_5_pro_16arh7_firmware | v < j5cn27ww | j5cn27ww |
| lenovo ideapad_duet_3_10igl5_firmware | v < eqcn37ww | eqcn37ww |
| lenovo slim_7_16arh7_firmware | v < klcn15ww | klcn15ww |
| lenovo thinkbook_15p_imp_firmware | v < f6cn25ww | f6cn25ww |
| lenovo slim_7-14are05_firmware | v < dmcn43ww | dmcn43ww |
| lenovo ideapad_slim_7-14iil05_firmware | v < dhcn35ww | dhcn35ww |
| lenovo ideapad_slim_7-14itl05_firmware | v < fbcn29ww | fbcn29ww |
| lenovo ideapad_slim_7-15iil05_firmware | v < dhcn35ww | dhcn35ww |
| lenovo slim_7-15imh05_firmware | v < dncn32ww | dncn32ww |
| lenovo slim_7-15itl05_firmware | v < fbcn29ww | fbcn29ww |
| lenovo thinkbook_13x_itg_firmware | v < hlcn30ww | hlcn30ww |
| lenovo thinkbook_14_g2_are_firmware | v < facn33ww | facn33ww |
| lenovo thinkbook_14_g2_itl_firmware | v < f8cn52ww | f8cn52ww |
| lenovo thinkbook_14_g3_acl_firmware | v < gqcn35ww_hfcn30ww | gqcn35ww_hfcn30ww |
| lenovo thinkbook_14_g3_itl_firmware | v < hrcn13ww | hrcn13ww |
| lenovo thinkbook_14_g4\+_ara_firmware | v < j6cn40ww | j6cn40ww |
| lenovo thinkbook_14_g4\+_iap_firmware | v < hycn40ww | hycn40ww |
| lenovo thinkbook_14p_g3_arh_firmware | v < k4cn31ww | k4cn31ww |
| lenovo thinkbook_14s_yoga_itl_firmware | v < fncn40ww | fncn40ww |
| lenovo thinkbook_15_g2_are_firmware | v < facn33ww | facn33ww |
| lenovo thinkbook_15_g2_itl_firmware | v < f8cn52ww | f8cn52ww |
| lenovo thinkbook_15_g3_acl_firmware | v < gqcn35ww_hfcn30ww | gqcn35ww_hfcn30ww |
| lenovo thinkbook_15_g3_itl_firmware | v < hrcn13ww | hrcn13ww |
| lenovo thinkbook_15_gd_aba_firmware | v < jpcn20ww | jpcn20ww |
| lenovo thinkbook_15p_g2_ith_firmware | v < hjcn31ww | hjcn31ww |
| lenovo thinkbook_16_g4\+_ara_firmware | v < j6cn40ww | j6cn40ww |
| lenovo thinkbook_16_g4\+_iap_firmware | v < hycn40ww | hycn40ww |
| lenovo thinkbook_16p_g3_arh_firmware | v < kccn31ww | kccn31ww |
| lenovo thinkbook_16p_nx_arh_firmware | v < kjcn27ww | kjcn27ww |
| lenovo thinkbook_plus_g2_itg_firmware | v < gycn31ww | gycn31ww |
| lenovo thinkbook_plus_g3_iap_firmware | v < k6cn29ww | k6cn29ww |
| lenovo yoga_creator_7-15imh05_firmware | v < dncn32ww | dncn32ww |
| lenovo yoga_duet_7-13iml05_firmware | v < ercn30ww | ercn30ww |
| lenovo yoga_duet_7-13itl6_firmware | v < gpcn24ww | gpcn24ww |
| lenovo yoga_duet_7-13itl6-lte_firmware | v < gpcn24ww | gpcn24ww |
| lenovo yoga_slim_7_pro_16arh7_firmware | v < klcn15ww | klcn15ww |
| lenovo yoga_slim_7-14are05_firmware | v < dmcn43ww | dmcn43ww |
| lenovo yoga_slim_7-14iil05_firmware | v < dmcn35ww | dmcn35ww |
| lenovo yoga_slim_7-14itl05_firmware | v < fbcn29ww | fbcn29ww |
| lenovo yoga_slim_7-15iil05_firmware | v < dhcn35ww | dhcn35ww |
| lenovo yoga_slim_7-15imh05_firmware | v < dncn32ww | dncn32ww |
| lenovo yoga_slim_7-15itl05_firmware | v < fbcn29ww | fbcn29ww |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.