CVE-2022-3430CWE-276

A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot…

Medium · published January 23, 2023

CVSS v3.1
6.7
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00257 · 16.4th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2023-01-23T16:11Z
EPSS history
Timeline
  • 23 JAN 16:11Z
    A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot…
    cvelistv5