🛡️ CVE-2022-3430
🟡 CVSS 6.7 — Medium ✅ No Known Exploit CWE-276 NVD
6.7
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Details

Severity MEDIUM
CVSS Score 6.7
CVSS Vector CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE CWE-276
Public Exploit ✅ No
Source NVD
Published 2023-01-23
Updated 2026-06-08
Modified 2024-11-21
Fix URL N/A

Affected Packages

Software From version Fixed in
d330-10igl-firmware — g0cn11ww
ideapad-5-pro-16arh7-firmware — j5cn27ww
ideapad-5-pro-16iah7-firmware — j4cn33ww
ideapad-duet-3-10igl5-firmware — eqcn37ww
ideapad-slim-7-14iil05-firmware — dhcn35ww
ideapad-slim-7-14itl05-firmware — fbcn29ww
ideapad-slim-7-15iil05-firmware — dhcn35ww
slim-7-14are05-firmware — dmcn43ww
slim-7-15imh05-firmware — dncn32ww
slim-7-15itl05-firmware — fbcn29ww
slim-7-16arh7-firmware — klcn15ww
thinkbook-13x-itg-firmware — hlcn30ww
thinkbook-14-g2-are-firmware — facn33ww
thinkbook-14-g2-itl-firmware — f8cn52ww
thinkbook-14-g3-acl-firmware — gqcn35ww_hfcn30ww
thinkbook-14-g3-itl-firmware — hrcn13ww
thinkbook-14-g4\+-ara-firmware — j6cn40ww
thinkbook-14-g4\+-iap-firmware — hycn40ww
thinkbook-14p-g3-arh-firmware — k4cn31ww
thinkbook-14s-yoga-itl-firmware — fncn40ww
thinkbook-15-g2-are-firmware — facn33ww
thinkbook-15-g2-itl-firmware — f8cn52ww
thinkbook-15-g3-acl-firmware — gqcn35ww_hfcn30ww
thinkbook-15-g3-itl-firmware — hrcn13ww
thinkbook-15-gd-aba-firmware — jpcn20ww
thinkbook-15p-g2-ith-firmware — hjcn31ww
thinkbook-15p-imp-firmware — f6cn25ww
thinkbook-16-g4\+-ara-firmware — j6cn40ww
thinkbook-16-g4\+-iap-firmware — hycn40ww
thinkbook-16p-g3-arh-firmware — kccn31ww
thinkbook-16p-nx-arh-firmware — kjcn27ww
thinkbook-plus-g2-itg-firmware — gycn31ww
thinkbook-plus-g3-iap-firmware — k6cn29ww
yoga-creator-7-15imh05-firmware — dncn32ww
yoga-duet-7-13iml05-firmware — ercn30ww
yoga-duet-7-13itl6-firmware — gpcn24ww
yoga-duet-7-13itl6-lte-firmware — gpcn24ww
yoga-slim-7-14are05-firmware — dmcn43ww
yoga-slim-7-14iil05-firmware — dmcn35ww
yoga-slim-7-14itl05-firmware — fbcn29ww
yoga-slim-7-15iil05-firmware — dhcn35ww
yoga-slim-7-15imh05-firmware — dncn32ww
yoga-slim-7-15itl05-firmware — fbcn29ww
yoga-slim-7-pro-16arh7-firmware — klcn15ww

Similar Threats

Free Vulnerability Check

Is your WordPress site affected?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against known CVE records.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.