← Database
CVE-2022-3431
MEDIUM
CVSS: 6.7
Published: 2023-10-09
Modified: 2026-06-17
Description
A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
Affected Platforms
Lenovo Yoga Slim 7-13Acn05 FirmwareLenovo Slim 7 16Arh7Lenovo Yoga Duet 7-13Iml05Lenovo Ideapad Slim 7 Pro 16Ach6 FirmwareLenovo D330-10Igl FirmwareLenovo Thinkbook 16 G4\+ Ara FirmwareLenovo Ideapad Slim 7 Pro 16Ach6Lenovo Slim 7 16Arh7 FirmwareLenovo Ideapad 5 Pro-16Ach6Lenovo Ideapad 5 Pro 16Arh7
Weakness Type
CWE-276, CWE-276