← Database
CVE-2022-3430
MEDIUM
CVSS: 6.7
Published: 2023-01-23
Modified: 2026-06-17
Description
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
Affected Platforms
Lenovo Ideapad Slim 7-14Iil05Lenovo Slim 7 16Arh7 FirmwareLenovo Ideapad Slim 7-15Iil05 FirmwareLenovo Yoga Creator 7-15Imh05Lenovo Yoga Slim 7-14Itl05 FirmwareLenovo Thinkbook 15P G2 IthLenovo Ideapad 5 Pro 16Arh7Lenovo Thinkbook 16 G4\+ IapLenovo Yoga Slim 7-14Are05Lenovo Yoga Duet 7-13Itl6-Lte Firmware
Weakness Type
CWE-276, CWE-276