PT-2022-22129 · Lenovo · Lenovo Ideapad Y700-14Isk

Published 2022-11-10 · Updated 2023-02-03 · CVE-2022-3432

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo Ideapad Y700-14ISK (affected versions not specified)

Description A potential issue in a driver used during the manufacturing process may allow an attacker with elevated privileges to modify secure boot settings by altering an NVRAM variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2022-3432

Affected Products

Lenovo Ideapad Y700-14Isk

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-3432 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-94952 · Vendor Advisory
• https://t.me/true_secator/3685 · Telegram Post