{"id":"CVE-2022-3430","aliases":["EUVD-2022-42806","GHSA-vj5w-88wc-3p42"],"status":"published","title":"A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may...","description":"A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00266,"percentile":0.18684,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276"],"published":"2023-01-23T16:11:41Z","modified":"2026-06-17T04:59:30Z","products":[{"vendor":"lenovo","product":"bios"},{"vendor":"lenovo","product":"d330-10igl_firmware"},{"vendor":"lenovo","product":"ideapad_5_pro_16arh7_firmware"},{"vendor":"lenovo","product":"ideapad_5_pro_16iah7_firmware"},{"vendor":"lenovo","product":"ideapad_duet_3_10igl5_firmware"},{"vendor":"lenovo","product":"ideapad_slim_7-14iil05_firmware"},{"vendor":"lenovo","product":"ideapad_slim_7-14itl05_firmware"},{"vendor":"lenovo","product":"ideapad_slim_7-15iil05_firmware"},{"vendor":"lenovo","product":"slim_7-14are05_firmware"},{"vendor":"lenovo","product":"slim_7-15imh05_firmware"},{"vendor":"lenovo","product":"slim_7-15itl05_firmware"},{"vendor":"lenovo","product":"slim_7_16arh7_firmware"},{"vendor":"lenovo","product":"thinkbook_13x_itg_firmware"},{"vendor":"lenovo","product":"thinkbook_14_g2_are_firmware"},{"vendor":"lenovo","product":"thinkbook_14_g2_itl_firmware"},{"vendor":"lenovo","product":"thinkbook_14_g3_acl_firmware"},{"vendor":"lenovo","product":"thinkbook_14_g3_itl_firmware"},{"vendor":"lenovo","product":"thinkbook_14_g4\\+_ara_firmware"},{"vendor":"lenovo","product":"thinkbook_14_g4\\+_iap_firmware"},{"vendor":"lenovo","product":"thinkbook_14p_g3_arh_firmware"},{"vendor":"lenovo","product":"thinkbook_14s_yoga_itl_firmware"},{"vendor":"lenovo","product":"thinkbook_15_g2_are_firmware"},{"vendor":"lenovo","product":"thinkbook_15_g2_itl_firmware"},{"vendor":"lenovo","product":"thinkbook_15_g3_acl_firmware"},{"vendor":"lenovo","product":"thinkbook_15_g3_itl_firmware"},{"vendor":"lenovo","product":"thinkbook_15_gd_aba_firmware"},{"vendor":"lenovo","product":"thinkbook_15p_g2_ith_firmware"},{"vendor":"lenovo","product":"thinkbook_15p_imp_firmware"},{"vendor":"lenovo","product":"thinkbook_16_g4\\+_ara_firmware"},{"vendor":"lenovo","product":"thinkbook_16_g4\\+_iap_firmware"},{"vendor":"lenovo","product":"thinkbook_16p_g3_arh_firmware"},{"vendor":"lenovo","product":"thinkbook_16p_nx_arh_firmware"},{"vendor":"lenovo","product":"thinkbook_plus_g2_itg_firmware"},{"vendor":"lenovo","product":"thinkbook_plus_g3_iap_firmware"},{"vendor":"lenovo","product":"yoga_creator_7-15imh05_firmware"},{"vendor":"lenovo","product":"yoga_duet_7-13iml05_firmware"},{"vendor":"lenovo","product":"yoga_duet_7-13itl6-lte_firmware"},{"vendor":"lenovo","product":"yoga_duet_7-13itl6_firmware"},{"vendor":"lenovo","product":"yoga_slim_7-14are05_firmware"},{"vendor":"lenovo","product":"yoga_slim_7-14iil05_firmware"},{"vendor":"lenovo","product":"yoga_slim_7-14itl05_firmware"},{"vendor":"lenovo","product":"yoga_slim_7-15iil05_firmware"},{"vendor":"lenovo","product":"yoga_slim_7-15imh05_firmware"},{"vendor":"lenovo","product":"yoga_slim_7-15itl05_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro_16arh7_firmware"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-94952","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3430"},{"url":"https://github.com/advisories/GHSA-vj5w-88wc-3p42"}],"sources":{"cve":[{"id":"CVE-2022-3430","description":"A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.","status":"published","published":"2023-01-23T16:11:41.102Z","modified":"2025-04-02T15:01:31.058Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:34:33.574107Z"}],"euvd":[{"id":"EUVD-2022-42806","description":"A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.","status":"published","published":"2023-01-23T16:11:41Z","modified":"2025-04-02T15:01:31Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T20:52:44.834568Z"}],"ghsa":[{"id":"GHSA-vj5w-88wc-3p42","title":"A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may...","description":"A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.","status":"published","published":"2023-01-23T18:30:19Z","modified":"2023-02-11T05:05:56Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:54:04.413406Z"}],"nvd":[{"id":"CVE-2022-3430","description":"A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.","status":"published","published":"2023-01-23T17:15:10.647Z","modified":"2026-06-17T04:59:30.72Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:07:35.561816Z"}]}}