Skip to content
OpenAdvisories
Medium · 6.7 CVE-2022-3432 EUVD-2022-42808GHSA-w8r4-jpw4-3xhr

A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may a…

Published Jan 23, 2023 · Updated Apr 1, 2025 · Assigned by lenovo

Description

A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Affected products

VendorProductAffectedFixed
Lenovo BIOS various —

References