Lucene search
LenovoCVELIST:CVE-2022-3430HistoryJan 23, 2023 - 4:11 p.m.
CVE-2022-3430
2023-01-2316:11:41
CWE-276
lenovo
www.cve.org
4
vulnerability
lenovo notebook
wmi setup driver
elevated privileges
secure boot setting
nvram variable
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
High
EPSS
0
Percentile
13.2%
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "BIOS",
"vendor": "Lenovo",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
]Related
nvd
nvd
CVE-2022-3430
2023-01-23 17:15:10
prion
prion
Design/Logic Flaw
2023-01-23 17:15:00
cve
cve
CVE-2022-3430
2023-01-23 17:15:10
thn
thn
New UEFI Firmware Flaws Reported in Several Lenovo Notebook Models
2022-11-10 06:36:00
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
High
EPSS
0
Percentile
13.2%
Related for CVELIST:CVE-2022-3430