CVEvulnerability

CVE-2022-48181

7.8 HIGH Published 2023-06-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-787

Description

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

Affected configurations

• lenovo ideacentre c5-14imb05 firmware (< o4hkt3aa) • lenovo ideacentre 3 07ach7 firmware (< m4mkt12a) • lenovo ideacentre 3 07iab7 firmware (< m49kt21a) • lenovo ideacentre 3-07ada05 firmware (< o4fkt35a) • lenovo ideacentre 3-07ada05 firmware (< m4mkt12a) • lenovo ideacentre 3-07imb05 firmware (< m2vkt1ea) • lenovo ideacentre 5 14iab7 firmware (< m42kt42a) • lenovo ideacentre 5-14acn6 firmware (< o5ekt24a) • lenovo ideacentre 5-14are05 firmware (< o4zkt2aa) • lenovo ideacentre 5-14imb05 firmware (< o4hkt3aa) • lenovo ideacentre 5-14iob6 firmware (< m3gkt3aa) • lenovo ideacentre aio 3 21itl7 firmware (< o5akt33) • lenovo ideacentre aio 3 22iap7 firmware (< o5nkt32a) • lenovo ideacentre aio 3 24iap7 firmware (< o5nkt32a) • lenovo ideacentre aio 3 27iap7 firmware (< o5nkt32a) • lenovo ideacentre aio 3-22imb05 firmware (< o5nkt32a) • lenovo ideacentre aio 3-22itl6 firmware (< o5akt33) • lenovo ideacentre aio 3-24alc6 firmware (< o5bkt25a) • lenovo ideacentre aio 3-24imb05 firmware (< o5nkt32a) • lenovo ideacentre aio 3-24itl6 firmware (< o5akt33) • lenovo ideacentre aio 3-27alc6 firmware (< o5bkt25a) • lenovo ideacentre aio 3-27imb05 firmware (< o5nkt32a) • lenovo ideacentre aio 3-27itl6 firmware (< o5akt33) • lenovo ideacentre aio 5 24iah7 firmware (< o5rkt39a) • lenovo ideacentre aio 5 27iah7 firmware (< o5rkt39a) • lenovo ideacentre creator 5-14iob6 firmware (< m3gkt3aa) • lenovo ideacentre g5-14amr05 firmware (< o4zkt2aa) • lenovo ideacentre g5-14imb05 firmware (< o4hkt3aa) • lenovo ideacentre gaming 5 17acn7 firmware (< o5ekt24a) • lenovo ideacentre gaming 5 17iab7 firmware (< m42kt42a) • lenovo ideacentre gaming 5-14acn6 firmware (< o5ekt24a) • lenovo ideacentre gaming 5-14iob6 firmware (< m3gkt3aa) • lenovo ideacentre mini 5 01iaq7 firmware (< o53kt0ea) • lenovo ideacentre mini 5-01imh05 firmware (< o4ekt19a) • lenovo legion c530-19icb firmware (< o4bkt22a) • lenovo legion r5-28imb05 firmware (< o4nkt1da) • lenovo legion t5-26amr5 firmware (< o4mkt2da) • lenovo legion t5-26iob6 firmware (< o54kt22a) • lenovo legion t5-28icb05 firmware (< o4bkt22a) • lenovo legion t5-28imb05 firmware (< o4nkt1da) • lenovo legion t530-28icb firmware (< o4bkt22a) • lenovo legion t7-34iaz7 firmware (< o5hkt2aa) • lenovo legion t7-34imz5 firmware (< o4lkt20a) • lenovo legion t7-34imz5 firmware (< o5fkt15a) • lenovo lenovo legion t5 26iab7 firmware (< o5lkt29a) • lenovo thinkcentre m600 firmware (< m00kt68a) • lenovo thinkcentre m60e tiny firmware (< m3skt25a) • lenovo thinkcentre m625q firmware (< m1wkt50a) • lenovo thinkcentre m70c firmware (< m2vkt1ea) • lenovo thinkcentre m70q firmware (< m2wkt59a) • lenovo thinkcentre m70q gen 2 firmware (< m3jkt37a) • lenovo thinkcentre m70q gen 3 firmware (< m43kt1ba) • lenovo thinkcentre m70s firmware (< m2tkt52a) • lenovo thinkcentre m70s gen 3 firmware (< m41kt3da) • lenovo thinkcentre m70t firmware (< m2tkt52a) • lenovo thinkcentre m70t gen 3 firmware (< m41kt3da) • lenovo thinkcentre m720e firmware (< m1zkt40a) • lenovo thinkcentre m720q firmware (< m1ukt70a) • lenovo thinkcentre m720s firmware (< m1ukt70a) • lenovo thinkcentre m720t firmware (< m1ukt70a) … and 62 more

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References