High severity · published Oct 9, 2023
CVE-2022-3431
A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BI
BIOS · Lenovo
various · source: vendor
DF
D330-10igl Firmware · Lenovo
before g0cn11ww · source: NVD
I5
Ideapad 5 Pro 16arh7 Firmware · Lenovo
before j4cn33ww · source: NVD
I5
Ideapad 5 Pro-16ach6 Firmware · Lenovo
before gscn34ww · source: NVD
I5
Ideapad 5 Pro-16ihu6 Firmware · Lenovo
before grcn22ww · source: NVD
IC
Ideapad Creator 5-16ach6 Firmware · Lenovo
before gscn34ww · source: NVD
ID
Ideapad Duet 3 10igl5 Firmware · Lenovo
before eqcn37ww · source: NVD
IS
Ideapad Slim 7 Pro 16ach6 Firmware · Lenovo
before hucn16ww · source: NVD
SF
S540-15iml Firmware · Lenovo
before cncn22ww · source: NVD
S7
Slim 7 16arh7 Firmware · Lenovo
before klcn15ww · source: NVD
T1
Thinkbook 13x Itg Firmware · Lenovo
before hlcn30ww · source: NVD
T1
Thinkbook 14 G4+ Ara Firmware · Lenovo
before j6cn40ww · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-3431
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-3431
Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-94952
More from BIOS
7.8
CVE-2016-5247
The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240,…
6.7
CVE-2023-25493
A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and ThinkStation products that could allow a local user with…
6.7
CVE-2023-45079
A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables
6.7
CVE-2023-45078
A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables
6.7
CVE-2023-45077
A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables