CVEvulnerability
CVE-2022-1892
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-01-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-120, CWE-122
Description
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Affected configurations
• lenovo 100e 2nd gen firmware (< frcn23ww)
• lenovo 100w gen 3 firmware (< gacn38ww)
• lenovo 13w yoga firmware (< jacn31ww)
• lenovo 14w gen 2 firmware (< h0cn21ww)
• lenovo 300e 2nd gen firmware (< frcn23ww)
• lenovo 300w gen 3 firmware (< gacn38ww)
• lenovo 500w gen 3 firmware (< g6cn40ww)
• lenovo 730s-13iml firmware (< brcn20ww)
• lenovo flex 3-11ada05 firmware (< fpcn26ww)
• lenovo flex 5-14alc05 firmware (< gjcn27ww)
• lenovo flex 5-14are05 firmware (< eecn39ww)
• lenovo flex 5-14iil05 firmware (< eecn40ww)
• lenovo flex 5-14itl05 firmware (< fxcn38ww)
• lenovo flex 5-15alc05 firmware (< gjcn27ww)
• lenovo flex 5-15iil05 firmware (< eccn40ww)
• lenovo flex 5-15itl05 firmware (< fxcn38ww)
• lenovo ideapad 1-11ada05 firmware (< fqcn26ww)
• lenovo ideapad 1-11igl05 firmware (< dwcn24ww)
• lenovo ideapad 1-14ada05 firmware (< fqcn26ww)
• lenovo ideapad 1-14igl05 firmware (< dwcn24ww)
• lenovo ideapad 3-15ada05 firmware (< e8cn36ww)
• lenovo ideapad 3-14ada05 firmware (< e8cn36ww)
• lenovo ideapad 3-14ada6 firmware (< hbcn24ww)
• lenovo ideapad 3-14alc6 firmware (< glcn48ww)
• lenovo ideapad 3-15ada6 firmware (< hbcn24ww)
• lenovo ideapad 3-15alc6 firmware (< glcn48ww)
• lenovo ideapad 3-17alc6 firmware (< e8cn36ww)
• lenovo ideapad 3-17ada05 firmware (< hbcn24ww)
• lenovo ideapad 3-17ada6 firmware (< glcn48ww)
• lenovo ideapad 5 15aba7 firmware (< kacn14ww)
• lenovo ideapad flex 5 14alc7 firmware (< jccn29ww)
• lenovo ideapad flex 5 16alc7 firmware (< jccn29ww)
• lenovo legion s7-15imh5 firmware (< hacn37ww)
• lenovo legion s7-15ach6 firmware (< g1cn27ww)
• lenovo legion s7-15arh5 firmware (< fdcn40ww)
• lenovo s145-14api firmware (< bucn33ww)
• lenovo s145-14ast firmware (< aycn28ww)
• lenovo s145-15api firmware (< bucn33ww)
• lenovo s145-15ast firmware (< aycn28ww)
• lenovo s540-13api firmware (< cxcn36ww)
• lenovo ideapad s940-14iil firmware (< bqcn34ww)
• lenovo yoga s940-14iil firmware (< bqcn34ww)
• lenovo ideapad slim 1-14ast-05 firmware (< cwcn25ww)
• lenovo ideapad slim 1-11ast-05 firmware (< cwcn25ww)
• lenovo thinkbook 13s g3 acn firmware (< gmcn29ww)
• lenovo thinkbook 13s g2 are firmware (< fvcn24ww)
• lenovo thinkbook 13s g2 itl firmware (< f9cn50ww)
• lenovo thinkbook 13s-iml firmware (< cqcn37ww)
• lenovo thinkbook 14-iil firmware (< djcn28ww)
• lenovo thinkbook 14-iml firmware (< cjcn38ww)
• lenovo thinkbook 14p g2 ach firmware (< gwcn41ww)
• lenovo thinkbook 14s g2 itl firmware (< f9cn50ww)
• lenovo thinkbook 14s-iml firmware (< cqcn37ww)
• lenovo thinkbook 15-iil firmware (< djcn28ww)
• lenovo thinkbook 15-iml firmware (< cjcn38ww)
• lenovo thinkbook 16p g2 ach firmware (< gxcn42ww)
• lenovo v130-15ikb firmware (< 8vcn31ww)
• lenovo v14 g2-alc firmware (< glcn48ww)
• lenovo v14-ada firmware (< e8cn36ww)
• lenovo v15 g2-alc firmware (< glcn48ww)
… and 10 more
Related
References
- https://support.lenovo.com/us/en/product_security/LEN-91369 Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-91369 Vendor Advisory