CVE-2022-3431: Lenovo d330-10igl Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Affected products

  • Lenovo d330-10igl Firmware: before g0cn11ww (fixed in g0cn11ww)
  • Lenovo Ideapad 5 Pro-16ach6 Firmware: before gscn34ww (fixed in gscn34ww)
  • Lenovo Ideapad 5 Pro-16ihu6 Firmware: before grcn22ww (fixed in grcn22ww)
  • Lenovo Ideapad 5 Pro 16arh7 Firmware: before j4cn33ww (fixed in j4cn33ww)
  • Lenovo Ideapad Creator 5-16ach6 Firmware: before gscn34ww (fixed in gscn34ww)
  • Lenovo Ideapad Duet 3 10igl5 Firmware: before eqcn37ww (fixed in eqcn37ww)
  • Lenovo Ideapad Slim 7 Pro 16ach6 Firmware: before hucn16ww (fixed in hucn16ww)
  • Lenovo s540-15iml Firmware: before cncn22ww (fixed in cncn22ww)
  • Lenovo Slim 7 16arh7 Firmware: before klcn15ww (fixed in klcn15ww)
  • Lenovo Thinkbook 13x Itg Firmware: before hlcn30ww (fixed in hlcn30ww)
  • Lenovo Thinkbook 14 g4+ Ara Firmware: before j6cn40ww (fixed in j6cn40ww)
  • Lenovo Thinkbook 14 g4+ Iap Firmware: before hycn40ww (fixed in hycn40ww)
  • Lenovo Thinkbook 16 g4+ Ara Firmware: before j6cn40ww (fixed in j6cn40ww)
  • Lenovo Thinkbook 16 g4+ Iap Firmware: before hycn40ww (fixed in hycn40ww)
  • Lenovo Thinkbook 16p NX Arh Firmware: before kjcn27ww (fixed in kjcn27ww)
  • Lenovo Thinkbook Plus g2 Itg Firmware: before gycn31ww (fixed in gycn31ww)
  • Lenovo Thinkbook Plus g3 Iap Firmware: before k6cn29ww (fixed in k6cn29ww)
  • Lenovo Yoga Duet 7-13iml05 Firmware: before ercn30ww (fixed in ercn30ww)
  • Lenovo Yoga Duet 7-13itl6-Lte Firmware: before gpcn24ww (fixed in gpcn24ww)
  • Lenovo Yoga Duet 7-13itl6 Firmware: before gpcn24ww (fixed in gpcn24ww)
  • Lenovo Yoga Slim 7-13acn05 Firmware: before ghcn28ww (fixed in ghcn28ww)
  • Lenovo Yoga Slim 7-13itl05 Firmware: before f7cn39ww (fixed in f7cn39ww)
  • Lenovo Yoga Slim 7 Carbon 13itl5 Firmware: before f7cn39ww (fixed in f7cn39ww)
  • Lenovo Yoga Slim 7 Pro 16ach6 Firmware: before hucn16ww (fixed in hucn16ww)
  • Lenovo Yoga Slim 7 Pro 16arh7 Firmware: before klcn15ww (fixed in klcn15ww)

Published 2023-10-09. Last modified 2026-06-17.