Incorrect default permissions in Lenovo BIOS
Priority LOW 35CWE-276Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00206 10th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | BIOS | various | — | No fix listed | CNA |
- BIOS VendorLenovo Affected various Fixed in — No fix listed CNA
CPE configurations NVD · 50
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:ideapad_creator_5-16ach6_firmware:*:*:*:*:*:*:*:* | before gscn34ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_creator_5-16ach6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_5_pro-16ihu6_firmware:*:*:*:*:*:*:*:* | before grcn22ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_5_pro-16ihu6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_5_pro-16ach6_firmware:*:*:*:*:*:*:*:* | before gscn34ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_5_pro-16ach6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7-13itl05_firmware:*:*:*:*:*:*:*:* | before f7cn39ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7-13itl05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7-13acn05_firmware:*:*:*:*:*:*:*:* | before ghcn28ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7-13acn05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:ideapad_creator_5-16ach6_firmware:*:*:*:*:*:*:*:* Versions before gscn34ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_creator_5-16ach6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_5_pro-16ihu6_firmware:*:*:*:*:*:*:*:* Versions before grcn22ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_5_pro-16ihu6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_5_pro-16ach6_firmware:*:*:*:*:*:*:*:* Versions before gscn34ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_5_pro-16ach6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7-13itl05_firmware:*:*:*:*:*:*:*:* Versions before f7cn39ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7-13itl05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7-13acn05_firmware:*:*:*:*:*:*:*:* Versions before ghcn28ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7-13acn05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Show 40 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:yoga_slim_7_pro_16arh7_firmware:*:*:*:*:*:*:*:* | before klcn15ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7_pro_16arh7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7_pro_16ach6_firmware:*:*:*:*:*:*:*:* | before hucn16ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7_pro_16ach6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7_carbon_13itl5_firmware:*:*:*:*:*:*:*:* | before f7cn39ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7_carbon_13itl5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_duet_7-13itl6-lte_firmware:*:*:*:*:*:*:*:* | before gpcn24ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_duet_7-13itl6-lte:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_duet_7-13itl6_firmware:*:*:*:*:*:*:*:* | before gpcn24ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_duet_7-13itl6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_duet_7-13iml05_firmware:*:*:*:*:*:*:*:* | before ercn30ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_duet_7-13iml05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_plus_g3_iap_firmware:*:*:*:*:*:*:*:* | before k6cn29ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_plus_g2_itg_firmware:*:*:*:*:*:*:*:* | before gycn31ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_16p_nx_arh_firmware:*:*:*:*:*:*:*:* | before kjcn27ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_16p_nx_arh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_16_g4\+_iap_firmware:*:*:*:*:*:*:*:* | before hycn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_16_g4\+_iap:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_16_g4\+_ara_firmware:*:*:*:*:*:*:*:* | before j6cn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_16_g4\+_ara:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14_g4\+_iap_firmware:*:*:*:*:*:*:*:* | before hycn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14_g4\+_iap:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14_g4\+_ara_firmware:*:*:*:*:*:*:*:* | before j6cn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14_g4\+_ara:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_13x_itg_firmware:*:*:*:*:*:*:*:* | before hlcn30ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_13x_itg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_slim_7_pro_16ach6_firmware:*:*:*:*:*:*:*:* | before hucn16ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_slim_7_pro_16ach6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s540-15iml_firmware:*:*:*:*:*:*:*:* | before cncn22ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s540-15iml:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:slim_7_16arh7_firmware:*:*:*:*:*:*:*:* | before klcn15ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:slim_7_16arh7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_duet_3_10igl5_firmware:*:*:*:*:*:*:*:* | before eqcn37ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_5_pro_16arh7_firmware:*:*:*:*:*:*:*:* | before j4cn33ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_5_pro_16arh7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:d330-10igl_firmware:*:*:*:*:*:*:*:* | before g0cn11ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:d330-10igl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:yoga_slim_7_pro_16arh7_firmware:*:*:*:*:*:*:*:* Versions before klcn15ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7_pro_16arh7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7_pro_16ach6_firmware:*:*:*:*:*:*:*:* Versions before hucn16ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7_pro_16ach6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7_carbon_13itl5_firmware:*:*:*:*:*:*:*:* Versions before f7cn39ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7_carbon_13itl5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_duet_7-13itl6-lte_firmware:*:*:*:*:*:*:*:* Versions before gpcn24ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6-lte:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_duet_7-13itl6_firmware:*:*:*:*:*:*:*:* Versions before gpcn24ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_duet_7-13iml05_firmware:*:*:*:*:*:*:*:* Versions before ercn30ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_duet_7-13iml05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_plus_g3_iap_firmware:*:*:*:*:*:*:*:* Versions before k6cn29ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_plus_g2_itg_firmware:*:*:*:*:*:*:*:* Versions before gycn31ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_16p_nx_arh_firmware:*:*:*:*:*:*:*:* Versions before kjcn27ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_16p_nx_arh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_16_g4\+_iap_firmware:*:*:*:*:*:*:*:* Versions before hycn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_16_g4\+_iap:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_16_g4\+_ara_firmware:*:*:*:*:*:*:*:* Versions before j6cn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_16_g4\+_ara:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14_g4\+_iap_firmware:*:*:*:*:*:*:*:* Versions before hycn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14_g4\+_iap:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14_g4\+_ara_firmware:*:*:*:*:*:*:*:* Versions before j6cn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14_g4\+_ara:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_13x_itg_firmware:*:*:*:*:*:*:*:* Versions before hlcn30ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_13x_itg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_slim_7_pro_16ach6_firmware:*:*:*:*:*:*:*:* Versions before hucn16ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_slim_7_pro_16ach6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s540-15iml_firmware:*:*:*:*:*:*:*:* Versions before cncn22ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s540-15iml:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:slim_7_16arh7_firmware:*:*:*:*:*:*:*:* Versions before klcn15ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:slim_7_16arh7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_duet_3_10igl5_firmware:*:*:*:*:*:*:*:* Versions before eqcn37ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_5_pro_16arh7_firmware:*:*:*:*:*:*:*:* Versions before j4cn33ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_5_pro_16arh7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:d330-10igl_firmware:*:*:*:*:*:*:*:* Versions before g0cn11ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:d330-10igl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-3431
- 2026-10-03 Alias added: GHSA-jgmr-c4c9-rqmx
References
More Lenovo D330-10igl Firmware vulnerabilities
- TI-2022-03167 Incorrect default permissions in Lenovo BIOS CVSS 3.1MEDIUM 6.7
Sources
- CVE-2022-3431 · CVE Program
- CVE-2022-3431 · NVD
- FIRST EPSS
- GHSA-jgmr-c4c9-rqmx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences