{"id":"CVE-2022-3744","aliases":["EUVD-2022-43100","GHSA-fq4g-xqp9-9643"],"status":"published","title":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...","description":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.0017,"percentile":0.06386,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2023-08-23T19:43:17Z","modified":"2026-06-17T05:00:13Z","products":[{"vendor":"jupyter","product":"notebook"},{"vendor":"lenovo","product":"ideapad_1-14ijl7_firmware"},{"vendor":"lenovo","product":"ideapad_1-15ijl7_firmware"},{"vendor":"lenovo","product":"ideapad_1_14iau7_firmware"},{"vendor":"lenovo","product":"ideapad_1_14igl7_firmware"},{"vendor":"lenovo","product":"ideapad_1_15iau7_firmware"},{"vendor":"lenovo","product":"ideapad_1_15igl7_firmware"},{"vendor":"lenovo","product":"ideapad_3-14igl05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14iil05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14iml05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14itl05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14itl6_firmware"},{"vendor":"lenovo","product":"ideapad_3-15igl05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15iil05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15iml05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15itl05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15itl6_firmware"},{"vendor":"lenovo","product":"ideapad_3-17iil05_firmware"},{"vendor":"lenovo","product":"ideapad_3-17iml05_firmware"},{"vendor":"lenovo","product":"ideapad_3-17itl6_firmware"},{"vendor":"lenovo","product":"ideapad_3_14iau7_firmware"},{"vendor":"lenovo","product":"ideapad_3_15iau7_firmware"},{"vendor":"lenovo","product":"ideapad_3_17iau7_firmware"},{"vendor":"lenovo","product":"ideapad_5-15iil05_firmware"},{"vendor":"lenovo","product":"ideapad_5-15itl05_firmware"},{"vendor":"lenovo","product":"ideapad_5_15ial7_firmware"},{"vendor":"lenovo","product":"ideapad_creator_5-15imh05_firmware"},{"vendor":"lenovo","product":"ideapad_gaming_3-15imh05_firmware"},{"vendor":"lenovo","product":"l3-15iml05_firmware"},{"vendor":"lenovo","product":"l3-15itl6_firmware"},{"vendor":"lenovo","product":"legion_5-15imh05_firmware"},{"vendor":"lenovo","product":"legion_5-15imh05h_firmware"},{"vendor":"lenovo","product":"legion_5-15imh6_firmware"},{"vendor":"lenovo","product":"legion_5-15ith6_firmware"},{"vendor":"lenovo","product":"legion_5-15ith6h_firmware"},{"vendor":"lenovo","product":"legion_5-17imh05_firmware"},{"vendor":"lenovo","product":"legion_5-17imh05h_firmware"},{"vendor":"lenovo","product":"legion_5-17ith6_firmware"},{"vendor":"lenovo","product":"legion_5-17ith6h_firmware"},{"vendor":"lenovo","product":"legion_5_15iah7_firmware"},{"vendor":"lenovo","product":"legion_5_15iah7h_firmware"},{"vendor":"lenovo","product":"legion_5_pro-16ith6_firmware"},{"vendor":"lenovo","product":"legion_5_pro-16ith6h_firmware"},{"vendor":"lenovo","product":"legion_5_pro_16iah7_firmware"},{"vendor":"lenovo","product":"legion_5_pro_16iah7h_firmware"},{"vendor":"lenovo","product":"legion_5p-15imh05_firmware"},{"vendor":"lenovo","product":"legion_5p-15imh05h_firmware"},{"vendor":"lenovo","product":"legion_7-16ithg6_firmware"},{"vendor":"lenovo","product":"legion_7_16iax7_firmware"},{"vendor":"lenovo","product":"notebook"},{"vendor":"lenovo","product":"s14_g2_itl_firmware"},{"vendor":"lenovo","product":"s14_g3_iap_firmware"},{"vendor":"lenovo","product":"s540-13itl_firmware"},{"vendor":"lenovo","product":"slim_7_14iap7_firmware"},{"vendor":"lenovo","product":"slim_7_carbon_13iap7_firmware"},{"vendor":"lenovo","product":"slim_7_pro-14ihu5_firmware"},{"vendor":"lenovo","product":"slim_7_prox_14iah7_firmware"},{"vendor":"lenovo","product":"slim_9-14itl05_firmware"},{"vendor":"lenovo","product":"slim_9_14iap7_firmware"},{"vendor":"lenovo","product":"thinkbook_15p_g2_ith_firmware"},{"vendor":"lenovo","product":"thinkbook_15p_imh_firmware"},{"vendor":"lenovo","product":"v14-igl_firmware"},{"vendor":"lenovo","product":"v14_g1-iml_firmware"},{"vendor":"lenovo","product":"v14_g2-itl_firmware"},{"vendor":"lenovo","product":"v14_g2_ijl_firmware"},{"vendor":"lenovo","product":"v14_g3_iap_firmware"},{"vendor":"lenovo","product":"v15-igl_firmware"},{"vendor":"lenovo","product":"v15_g1-iml_firmware"},{"vendor":"lenovo","product":"v15_g2-itl_firmware"},{"vendor":"lenovo","product":"v15_g2_ijl_firmware"},{"vendor":"lenovo","product":"v15_g3_iap_firmware"},{"vendor":"lenovo","product":"v17-iil_firmware"},{"vendor":"lenovo","product":"v17_g2-itl_firmware"},{"vendor":"lenovo","product":"v17_g3_iap_firmware"},{"vendor":"lenovo","product":"yoga_7-14itl5_firmware"},{"vendor":"lenovo","product":"yoga_7-15itl5_firmware"},{"vendor":"lenovo","product":"yoga_7_14ial7_firmware"},{"vendor":"lenovo","product":"yoga_7_16iah7_firmware"},{"vendor":"lenovo","product":"yoga_7_16iap7_firmware"},{"vendor":"lenovo","product":"yoga_9_14iap7_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_carbon_13iap7_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14ihu5_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14ihu5_o_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14itl5_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro_14iah7_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro_14iap7_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_prox_14iah7_firmware"},{"vendor":"lenovo","product":"yoga_slim_9-14itl05_firmware"},{"vendor":"lenovo","product":"yoga_slim_9_14iap7_firmware"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-103710","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3744"},{"url":"https://github.com/advisories/GHSA-fq4g-xqp9-9643"}],"sources":{"cve":[{"id":"CVE-2022-3744","description":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential.","status":"published","published":"2023-08-23T19:43:17.503Z","modified":"2024-08-03T01:20:57.61Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:34:33.24035Z"}],"euvd":[{"id":"EUVD-2022-43100","description":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential.","status":"published","published":"2023-08-23T19:43:17Z","modified":"2024-08-03T01:20:57Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T03:25:56.994006Z"}],"ghsa":[{"id":"GHSA-fq4g-xqp9-9643","title":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...","description":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential.","status":"published","published":"2023-08-23T21:30:26Z","modified":"2024-04-04T07:10:07Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:56:48.742308Z"}],"nvd":[{"id":"CVE-2022-3744","description":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential.","status":"published","published":"2023-08-23T20:15:08.577Z","modified":"2026-06-17T05:00:13.477Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:07:39.811118Z"}]}}