cve/2022/CVE-2022-3432.md

### [CVE-2022-3432](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3432)
![](https://img.shields.io/static/v1?label=Product&message=BIOS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20various%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-276%20Incorrect%20Default%20Permissions&color=brighgreen)

### Description

A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/river-li/awesome-uefi-security