← Database

CVE-2022-3432

MEDIUM CVSS: 6.7 Published: 2023-01-26 Modified: 2026-06-17

Description

A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Affected Platforms

Lenovo Ideapad Y700-14Isk FirmwareLenovo Ideapad Y700-14Isk

Weakness Type

CWE-276, CWE-276

References