CVE-2022-3431

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-10-09 · updated 2026-06-17
Weakness: CWE-276

Description

A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Affected products

Lenovo D330-10Igl Firmware: before g0cn11ww — fixed in g0cn11ww
Lenovo Ideapad 5 Pro-16Ach6 Firmware: before gscn34ww — fixed in gscn34ww
Lenovo Ideapad 5 Pro-16Ihu6 Firmware: before grcn22ww — fixed in grcn22ww
Lenovo Ideapad 5 Pro 16Arh7 Firmware: before j4cn33ww — fixed in j4cn33ww
Lenovo Ideapad Creator 5-16Ach6 Firmware: before gscn34ww — fixed in gscn34ww
Lenovo IdeaPad Duet 3-10IGL5: before eqcn37ww — fixed in eqcn37ww
Lenovo Ideapad Slim 7 Pro 16Ach6 Firmware: before hucn16ww — fixed in hucn16ww
Lenovo S540-15Iml Firmware: before cncn22ww — fixed in cncn22ww
Lenovo Slim 7 16Arh7 Firmware: before klcn15ww — fixed in klcn15ww
Lenovo Thinkbook 13X Itg Firmware: before hlcn30ww — fixed in hlcn30ww
Lenovo Thinkbook 14 G4+ Ara Firmware: before j6cn40ww — fixed in j6cn40ww
Lenovo Thinkbook 14 G4+ Iap Firmware: before hycn40ww — fixed in hycn40ww
Lenovo Thinkbook 16 G4+ Ara Firmware: before j6cn40ww — fixed in j6cn40ww
Lenovo Thinkbook 16 G4+ Iap Firmware: before hycn40ww — fixed in hycn40ww
Lenovo Thinkbook 16P Nx Arh Firmware: before kjcn27ww — fixed in kjcn27ww
Lenovo Thinkbook Plus G2 Itg Firmware: before gycn31ww — fixed in gycn31ww
Lenovo Thinkbook Plus G3 Iap Firmware: before k6cn29ww — fixed in k6cn29ww
Lenovo Yoga Duet 7-13Iml05 Firmware: before ercn30ww — fixed in ercn30ww
Lenovo Yoga Duet 7-13Itl6-Lte Firmware: before gpcn24ww — fixed in gpcn24ww
Lenovo Yoga Duet 7-13Itl6 Firmware: before gpcn24ww — fixed in gpcn24ww
Lenovo Yoga Slim 7-13Acn05 Firmware: before ghcn28ww — fixed in ghcn28ww
Lenovo Yoga Slim 7-13Itl05 Firmware: before f7cn39ww — fixed in f7cn39ww
Lenovo Yoga Slim 7 Carbon 13Itl5 Firmware: before f7cn39ww — fixed in f7cn39ww
Lenovo Yoga Slim 7 Pro 16Ach6 Firmware: before hucn16ww — fixed in hucn16ww
Lenovo Yoga Slim 7 Pro 16Arh7 Firmware: before klcn15ww — fixed in klcn15ww

How to fix

Upgrade to a fixed version: Lenovo D330-10Igl Firmware g0cn11ww; Lenovo Ideapad 5 Pro-16Ach6 Firmware gscn34ww; Lenovo Ideapad 5 Pro-16Ihu6 Firmware grcn22ww; Lenovo Ideapad 5 Pro 16Arh7 Firmware j4cn33ww; Lenovo Ideapad Creator 5-16Ach6 Firmware gscn34ww; Lenovo IdeaPad Duet 3-10IGL5 eqcn37ww; Lenovo Ideapad Slim 7 Pro 16Ach6 Firmware hucn16ww; Lenovo S540-15Iml Firmware cncn22ww; Lenovo Slim 7 16Arh7 Firmware klcn15ww; Lenovo Thinkbook 13X Itg Firmware hlcn30ww; Lenovo Thinkbook 14 G4+ Ara Firmware j6cn40ww; Lenovo Thinkbook 14 G4+ Iap Firmware hycn40ww. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-3431 or the next vulnerability affects your stack