CVE-2022-3432: Lenovo Ideapad y700-14isk Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Affected products

• Lenovo Ideapad y700-14isk Firmware: affected versions not specified

Published 2023-01-26. Last modified 2026-06-17.