CVEvulnerability

CVE-2022-1892

7.8 HIGH Published 2023-01-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-01-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120, CWE-122

Description

A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Affected configurations

• lenovo 100e 2nd gen firmware (< frcn23ww) • lenovo 100w gen 3 firmware (< gacn38ww) • lenovo 13w yoga firmware (< jacn31ww) • lenovo 14w gen 2 firmware (< h0cn21ww) • lenovo 300e 2nd gen firmware (< frcn23ww) • lenovo 300w gen 3 firmware (< gacn38ww) • lenovo 500w gen 3 firmware (< g6cn40ww) • lenovo 730s-13iml firmware (< brcn20ww) • lenovo flex 3-11ada05 firmware (< fpcn26ww) • lenovo flex 5-14alc05 firmware (< gjcn27ww) • lenovo flex 5-14are05 firmware (< eecn39ww) • lenovo flex 5-14iil05 firmware (< eecn40ww) • lenovo flex 5-14itl05 firmware (< fxcn38ww) • lenovo flex 5-15alc05 firmware (< gjcn27ww) • lenovo flex 5-15iil05 firmware (< eccn40ww) • lenovo flex 5-15itl05 firmware (< fxcn38ww) • lenovo ideapad 1-11ada05 firmware (< fqcn26ww) • lenovo ideapad 1-11igl05 firmware (< dwcn24ww) • lenovo ideapad 1-14ada05 firmware (< fqcn26ww) • lenovo ideapad 1-14igl05 firmware (< dwcn24ww) • lenovo ideapad 3-15ada05 firmware (< e8cn36ww) • lenovo ideapad 3-14ada05 firmware (< e8cn36ww) • lenovo ideapad 3-14ada6 firmware (< hbcn24ww) • lenovo ideapad 3-14alc6 firmware (< glcn48ww) • lenovo ideapad 3-15ada6 firmware (< hbcn24ww) • lenovo ideapad 3-15alc6 firmware (< glcn48ww) • lenovo ideapad 3-17alc6 firmware (< e8cn36ww) • lenovo ideapad 3-17ada05 firmware (< hbcn24ww) • lenovo ideapad 3-17ada6 firmware (< glcn48ww) • lenovo ideapad 5 15aba7 firmware (< kacn14ww) • lenovo ideapad flex 5 14alc7 firmware (< jccn29ww) • lenovo ideapad flex 5 16alc7 firmware (< jccn29ww) • lenovo legion s7-15imh5 firmware (< hacn37ww) • lenovo legion s7-15ach6 firmware (< g1cn27ww) • lenovo legion s7-15arh5 firmware (< fdcn40ww) • lenovo s145-14api firmware (< bucn33ww) • lenovo s145-14ast firmware (< aycn28ww) • lenovo s145-15api firmware (< bucn33ww) • lenovo s145-15ast firmware (< aycn28ww) • lenovo s540-13api firmware (< cxcn36ww) • lenovo ideapad s940-14iil firmware (< bqcn34ww) • lenovo yoga s940-14iil firmware (< bqcn34ww) • lenovo ideapad slim 1-14ast-05 firmware (< cwcn25ww) • lenovo ideapad slim 1-11ast-05 firmware (< cwcn25ww) • lenovo thinkbook 13s g3 acn firmware (< gmcn29ww) • lenovo thinkbook 13s g2 are firmware (< fvcn24ww) • lenovo thinkbook 13s g2 itl firmware (< f9cn50ww) • lenovo thinkbook 13s-iml firmware (< cqcn37ww) • lenovo thinkbook 14-iil firmware (< djcn28ww) • lenovo thinkbook 14-iml firmware (< cjcn38ww) • lenovo thinkbook 14p g2 ach firmware (< gwcn41ww) • lenovo thinkbook 14s g2 itl firmware (< f9cn50ww) • lenovo thinkbook 14s-iml firmware (< cqcn37ww) • lenovo thinkbook 15-iil firmware (< djcn28ww) • lenovo thinkbook 15-iml firmware (< cjcn38ww) • lenovo thinkbook 16p g2 ach firmware (< gxcn42ww) • lenovo v130-15ikb firmware (< 8vcn31ww) • lenovo v14 g2-alc firmware (< glcn48ww) • lenovo v14-ada firmware (< e8cn36ww) • lenovo v15 g2-alc firmware (< glcn48ww) … and 10 more

Related

Weakness · CWE (2)

  • CWE-120 Buffer Copy without Checking Size of Input weakness
  • CWE-122 Heap-based Buffer Overflow weakness

References