Incorrect default permissions in Lenovo BIOS
Priority LOW 31CWE-276Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00266 18th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | BIOS | various | — | No fix listed | CNA |
- BIOS VendorLenovo Affected various Fixed in — No fix listed CNA
CPE configurations NVD · 88
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:d330-10igl_firmware:*:*:*:*:*:*:*:* | before g0cn11ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:d330-10igl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_5_pro_16iah7_firmware:*:*:*:*:*:*:*:* | before j4cn33ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_5_pro_16iah7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_5_pro_16arh7_firmware:*:*:*:*:*:*:*:* | before j5cn27ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_5_pro_16arh7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_duet_3_10igl5_firmware:*:*:*:*:*:*:*:* | before eqcn37ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:slim_7_16arh7_firmware:*:*:*:*:*:*:*:* | before klcn15ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:slim_7_16arh7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:d330-10igl_firmware:*:*:*:*:*:*:*:* Versions before g0cn11ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:d330-10igl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_5_pro_16iah7_firmware:*:*:*:*:*:*:*:* Versions before j4cn33ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_5_pro_16iah7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_5_pro_16arh7_firmware:*:*:*:*:*:*:*:* Versions before j5cn27ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_5_pro_16arh7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_duet_3_10igl5_firmware:*:*:*:*:*:*:*:* Versions before eqcn37ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:slim_7_16arh7_firmware:*:*:*:*:*:*:*:* Versions before klcn15ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:slim_7_16arh7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Show 78 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:thinkbook_15p_imp_firmware:*:*:*:*:*:*:*:* | before f6cn25ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_15p_imp:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:slim_7-14are05_firmware:*:*:*:*:*:*:*:* | before dmcn43ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:slim_7-14are05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_slim_7-14iil05_firmware:*:*:*:*:*:*:*:* | before dhcn35ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_slim_7-14iil05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_slim_7-14itl05_firmware:*:*:*:*:*:*:*:* | before fbcn29ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_slim_7-14itl05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_slim_7-15iil05_firmware:*:*:*:*:*:*:*:* | before dhcn35ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_slim_7-15iil05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:slim_7-15imh05_firmware:*:*:*:*:*:*:*:* | before dncn32ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:slim_7-15imh05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:slim_7-15itl05_firmware:*:*:*:*:*:*:*:* | before fbcn29ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:slim_7-15itl05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_13x_itg_firmware:*:*:*:*:*:*:*:* | before hlcn30ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_13x_itg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14_g2_are_firmware:*:*:*:*:*:*:*:* | before facn33ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14_g2_are:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14_g2_itl_firmware:*:*:*:*:*:*:*:* | before f8cn52ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14_g2_itl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14_g3_acl_firmware:*:*:*:*:*:*:*:* | before gqcn35ww_hfcn30ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14_g3_acl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14_g3_itl_firmware:*:*:*:*:*:*:*:* | before hrcn13ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14_g3_itl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14_g4\+_ara_firmware:*:*:*:*:*:*:*:* | before j6cn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14_g4\+_ara:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14_g4\+_iap_firmware:*:*:*:*:*:*:*:* | before hycn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14_g4\+_iap:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14p_g3_arh_firmware:*:*:*:*:*:*:*:* | before k4cn31ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14p_g3_arh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14s_yoga_itl_firmware:*:*:*:*:*:*:*:* | before fncn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14s_yoga_itl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_15_g2_are_firmware:*:*:*:*:*:*:*:* | before facn33ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_15_g2_are:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_15_g2_itl_firmware:*:*:*:*:*:*:*:* | before f8cn52ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_15_g2_itl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_15_g3_acl_firmware:*:*:*:*:*:*:*:* | before gqcn35ww_hfcn30ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_15_g3_acl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_15_g3_itl_firmware:*:*:*:*:*:*:*:* | before hrcn13ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_15_g3_itl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_15_gd_aba_firmware:*:*:*:*:*:*:*:* | before jpcn20ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_15_g4_aba:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_15p_g2_ith_firmware:*:*:*:*:*:*:*:* | before hjcn31ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_15p_g2_ith:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_16_g4\+_ara_firmware:*:*:*:*:*:*:*:* | before j6cn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_16_g4\+_ara:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_16_g4\+_iap_firmware:*:*:*:*:*:*:*:* | before hycn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_16_g4\+_iap:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_16p_g3_arh_firmware:*:*:*:*:*:*:*:* | before kccn31ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_16p_g3_arh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_16p_nx_arh_firmware:*:*:*:*:*:*:*:* | before kjcn27ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_16p_nx_arh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_plus_g2_itg_firmware:*:*:*:*:*:*:*:* | before gycn31ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_plus_g3_iap_firmware:*:*:*:*:*:*:*:* | before k6cn29ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_creator_7-15imh05_firmware:*:*:*:*:*:*:*:* | before dncn32ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_creator_7-15imh05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_duet_7-13iml05_firmware:*:*:*:*:*:*:*:* | before ercn30ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_duet_7-13iml05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_duet_7-13itl6_firmware:*:*:*:*:*:*:*:* | before gpcn24ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_duet_7-13itl6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_duet_7-13itl6-lte_firmware:*:*:*:*:*:*:*:* | before gpcn24ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_duet_7-13itl6-lte:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7_pro_16arh7_firmware:*:*:*:*:*:*:*:* | before klcn15ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7_pro_16arh7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7-14are05_firmware:*:*:*:*:*:*:*:* | before dmcn43ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7-14are05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7-14iil05_firmware:*:*:*:*:*:*:*:* | before dmcn35ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7-14iil05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7-14itl05_firmware:*:*:*:*:*:*:*:* | before fbcn29ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7-14itl05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7-15iil05_firmware:*:*:*:*:*:*:*:* | before dhcn35ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7-15iil05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7-15imh05_firmware:*:*:*:*:*:*:*:* | before dncn32ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7-15imh05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7-15itl05_firmware:*:*:*:*:*:*:*:* | before fbcn29ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7-15itl05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:thinkbook_15p_imp_firmware:*:*:*:*:*:*:*:* Versions before f6cn25ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_15p_imp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:slim_7-14are05_firmware:*:*:*:*:*:*:*:* Versions before dmcn43ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:slim_7-14are05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_slim_7-14iil05_firmware:*:*:*:*:*:*:*:* Versions before dhcn35ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_slim_7-14iil05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_slim_7-14itl05_firmware:*:*:*:*:*:*:*:* Versions before fbcn29ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_slim_7-14itl05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_slim_7-15iil05_firmware:*:*:*:*:*:*:*:* Versions before dhcn35ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_slim_7-15iil05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:slim_7-15imh05_firmware:*:*:*:*:*:*:*:* Versions before dncn32ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:slim_7-15imh05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:slim_7-15itl05_firmware:*:*:*:*:*:*:*:* Versions before fbcn29ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:slim_7-15itl05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_13x_itg_firmware:*:*:*:*:*:*:*:* Versions before hlcn30ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_13x_itg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14_g2_are_firmware:*:*:*:*:*:*:*:* Versions before facn33ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14_g2_are:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14_g2_itl_firmware:*:*:*:*:*:*:*:* Versions before f8cn52ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14_g2_itl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14_g3_acl_firmware:*:*:*:*:*:*:*:* Versions before gqcn35ww_hfcn30ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14_g3_acl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14_g3_itl_firmware:*:*:*:*:*:*:*:* Versions before hrcn13ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14_g3_itl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14_g4\+_ara_firmware:*:*:*:*:*:*:*:* Versions before j6cn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14_g4\+_ara:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14_g4\+_iap_firmware:*:*:*:*:*:*:*:* Versions before hycn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14_g4\+_iap:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14p_g3_arh_firmware:*:*:*:*:*:*:*:* Versions before k4cn31ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14p_g3_arh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14s_yoga_itl_firmware:*:*:*:*:*:*:*:* Versions before fncn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14s_yoga_itl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_15_g2_are_firmware:*:*:*:*:*:*:*:* Versions before facn33ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_15_g2_are:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_15_g2_itl_firmware:*:*:*:*:*:*:*:* Versions before f8cn52ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_15_g2_itl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_15_g3_acl_firmware:*:*:*:*:*:*:*:* Versions before gqcn35ww_hfcn30ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_15_g3_acl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_15_g3_itl_firmware:*:*:*:*:*:*:*:* Versions before hrcn13ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_15_g3_itl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_15_gd_aba_firmware:*:*:*:*:*:*:*:* Versions before jpcn20ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_15_g4_aba:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_15p_g2_ith_firmware:*:*:*:*:*:*:*:* Versions before hjcn31ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_15p_g2_ith:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_16_g4\+_ara_firmware:*:*:*:*:*:*:*:* Versions before j6cn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_16_g4\+_ara:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_16_g4\+_iap_firmware:*:*:*:*:*:*:*:* Versions before hycn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_16_g4\+_iap:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_16p_g3_arh_firmware:*:*:*:*:*:*:*:* Versions before kccn31ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_16p_g3_arh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_16p_nx_arh_firmware:*:*:*:*:*:*:*:* Versions before kjcn27ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_16p_nx_arh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_plus_g2_itg_firmware:*:*:*:*:*:*:*:* Versions before gycn31ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_plus_g3_iap_firmware:*:*:*:*:*:*:*:* Versions before k6cn29ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_creator_7-15imh05_firmware:*:*:*:*:*:*:*:* Versions before dncn32ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_creator_7-15imh05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_duet_7-13iml05_firmware:*:*:*:*:*:*:*:* Versions before ercn30ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_duet_7-13iml05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_duet_7-13itl6_firmware:*:*:*:*:*:*:*:* Versions before gpcn24ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_duet_7-13itl6-lte_firmware:*:*:*:*:*:*:*:* Versions before gpcn24ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6-lte:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7_pro_16arh7_firmware:*:*:*:*:*:*:*:* Versions before klcn15ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7_pro_16arh7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7-14are05_firmware:*:*:*:*:*:*:*:* Versions before dmcn43ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7-14are05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7-14iil05_firmware:*:*:*:*:*:*:*:* Versions before dmcn35ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7-14iil05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7-14itl05_firmware:*:*:*:*:*:*:*:* Versions before fbcn29ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7-14itl05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7-15iil05_firmware:*:*:*:*:*:*:*:* Versions before dhcn35ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7-15iil05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7-15imh05_firmware:*:*:*:*:*:*:*:* Versions before dncn32ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7-15imh05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7-15itl05_firmware:*:*:*:*:*:*:*:* Versions before fbcn29ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7-15itl05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-3430
- 2026-10-03 Alias added: GHSA-vj5w-88wc-3p42
References
More Lenovo D330-10igl Firmware vulnerabilities
- TI-2022-03168 Incorrect default permissions in Lenovo BIOS CVSS 3.1HIGH 7.8
Sources
- CVE-2022-3430 · CVE Program
- CVE-2022-3430 · NVD
- FIRST EPSS
- GHSA-vj5w-88wc-3p42 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences