CVE-2022-3430: A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot…

PriorityP429medium6.7CVSS 3.1

AVLACLPRHUINSUCHIHAH

EPSS

0.26%

17.2th percentile

A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Affected

45 ranges· showing 25

Vendor	Product	Version range	Fixed in
lenovo	bios	—	—
lenovo	d330-10igl_firmware	< g0cn11ww	g0cn11ww
lenovo	ideapad_5_pro_16arh7_firmware	< j5cn27ww	j5cn27ww
lenovo	ideapad_5_pro_16iah7_firmware	< j4cn33ww	j4cn33ww
lenovo	ideapad_duet_3_10igl5_firmware	< eqcn37ww	eqcn37ww
lenovo	ideapad_slim_7-14iil05_firmware	< dhcn35ww	dhcn35ww
lenovo	ideapad_slim_7-14itl05_firmware	< fbcn29ww	fbcn29ww
lenovo	ideapad_slim_7-15iil05_firmware	< dhcn35ww	dhcn35ww
lenovo	slim_7-14are05_firmware	< dmcn43ww	dmcn43ww
lenovo	slim_7-15imh05_firmware	< dncn32ww	dncn32ww
lenovo	slim_7-15itl05_firmware	< fbcn29ww	fbcn29ww
lenovo	slim_7_16arh7_firmware	< klcn15ww	klcn15ww
lenovo	thinkbook_13x_itg_firmware	< hlcn30ww	hlcn30ww
lenovo	thinkbook_14_g2_are_firmware	< facn33ww	facn33ww
lenovo	thinkbook_14_g2_itl_firmware	< f8cn52ww	f8cn52ww
lenovo	thinkbook_14_g3_acl_firmware	< gqcn35ww_hfcn30ww	gqcn35ww_hfcn30ww
lenovo	thinkbook_14_g3_itl_firmware	< hrcn13ww	hrcn13ww
lenovo	thinkbook_14_g4_+_ara_firmware	< j6cn40ww	j6cn40ww
lenovo	thinkbook_14_g4_+_iap_firmware	< hycn40ww	hycn40ww
lenovo	thinkbook_14p_g3_arh_firmware	< k4cn31ww	k4cn31ww
lenovo	thinkbook_14s_yoga_itl_firmware	< fncn40ww	fncn40ww
lenovo	thinkbook_15_g2_are_firmware	< facn33ww	facn33ww
lenovo	thinkbook_15_g2_itl_firmware	< f8cn52ww	f8cn52ww
lenovo	thinkbook_15_g3_acl_firmware	< gqcn35ww_hfcn30ww	gqcn35ww_hfcn30ww
lenovo	thinkbook_15_g3_itl_firmware	< hrcn13ww	hrcn13ww

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.