CVE-2022-3431CWE-276

A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow…

Medium · published October 9, 2023

CVSS v3.1
6.7
EPSS
0%
Percentile
10.1
In the wild
Unconfirmed
What it is

A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.1th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2023-10-09T18:18Z
EPSS history
Timeline
  • 09 OCT 18:18Z
    A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow…
    cvelistv5