CVEvulnerability
CVE-2022-48181
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-06-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.
Affected configurations
• lenovo ideacentre c5-14imb05 firmware (< o4hkt3aa)
• lenovo ideacentre 3 07ach7 firmware (< m4mkt12a)
• lenovo ideacentre 3 07iab7 firmware (< m49kt21a)
• lenovo ideacentre 3-07ada05 firmware (< o4fkt35a)
• lenovo ideacentre 3-07ada05 firmware (< m4mkt12a)
• lenovo ideacentre 3-07imb05 firmware (< m2vkt1ea)
• lenovo ideacentre 5 14iab7 firmware (< m42kt42a)
• lenovo ideacentre 5-14acn6 firmware (< o5ekt24a)
• lenovo ideacentre 5-14are05 firmware (< o4zkt2aa)
• lenovo ideacentre 5-14imb05 firmware (< o4hkt3aa)
• lenovo ideacentre 5-14iob6 firmware (< m3gkt3aa)
• lenovo ideacentre aio 3 21itl7 firmware (< o5akt33)
• lenovo ideacentre aio 3 22iap7 firmware (< o5nkt32a)
• lenovo ideacentre aio 3 24iap7 firmware (< o5nkt32a)
• lenovo ideacentre aio 3 27iap7 firmware (< o5nkt32a)
• lenovo ideacentre aio 3-22imb05 firmware (< o5nkt32a)
• lenovo ideacentre aio 3-22itl6 firmware (< o5akt33)
• lenovo ideacentre aio 3-24alc6 firmware (< o5bkt25a)
• lenovo ideacentre aio 3-24imb05 firmware (< o5nkt32a)
• lenovo ideacentre aio 3-24itl6 firmware (< o5akt33)
• lenovo ideacentre aio 3-27alc6 firmware (< o5bkt25a)
• lenovo ideacentre aio 3-27imb05 firmware (< o5nkt32a)
• lenovo ideacentre aio 3-27itl6 firmware (< o5akt33)
• lenovo ideacentre aio 5 24iah7 firmware (< o5rkt39a)
• lenovo ideacentre aio 5 27iah7 firmware (< o5rkt39a)
• lenovo ideacentre creator 5-14iob6 firmware (< m3gkt3aa)
• lenovo ideacentre g5-14amr05 firmware (< o4zkt2aa)
• lenovo ideacentre g5-14imb05 firmware (< o4hkt3aa)
• lenovo ideacentre gaming 5 17acn7 firmware (< o5ekt24a)
• lenovo ideacentre gaming 5 17iab7 firmware (< m42kt42a)
• lenovo ideacentre gaming 5-14acn6 firmware (< o5ekt24a)
• lenovo ideacentre gaming 5-14iob6 firmware (< m3gkt3aa)
• lenovo ideacentre mini 5 01iaq7 firmware (< o53kt0ea)
• lenovo ideacentre mini 5-01imh05 firmware (< o4ekt19a)
• lenovo legion c530-19icb firmware (< o4bkt22a)
• lenovo legion r5-28imb05 firmware (< o4nkt1da)
• lenovo legion t5-26amr5 firmware (< o4mkt2da)
• lenovo legion t5-26iob6 firmware (< o54kt22a)
• lenovo legion t5-28icb05 firmware (< o4bkt22a)
• lenovo legion t5-28imb05 firmware (< o4nkt1da)
• lenovo legion t530-28icb firmware (< o4bkt22a)
• lenovo legion t7-34iaz7 firmware (< o5hkt2aa)
• lenovo legion t7-34imz5 firmware (< o4lkt20a)
• lenovo legion t7-34imz5 firmware (< o5fkt15a)
• lenovo lenovo legion t5 26iab7 firmware (< o5lkt29a)
• lenovo thinkcentre m600 firmware (< m00kt68a)
• lenovo thinkcentre m60e tiny firmware (< m3skt25a)
• lenovo thinkcentre m625q firmware (< m1wkt50a)
• lenovo thinkcentre m70c firmware (< m2vkt1ea)
• lenovo thinkcentre m70q firmware (< m2wkt59a)
• lenovo thinkcentre m70q gen 2 firmware (< m3jkt37a)
• lenovo thinkcentre m70q gen 3 firmware (< m43kt1ba)
• lenovo thinkcentre m70s firmware (< m2tkt52a)
• lenovo thinkcentre m70s gen 3 firmware (< m41kt3da)
• lenovo thinkcentre m70t firmware (< m2tkt52a)
• lenovo thinkcentre m70t gen 3 firmware (< m41kt3da)
• lenovo thinkcentre m720e firmware (< m1zkt40a)
• lenovo thinkcentre m720q firmware (< m1ukt70a)
• lenovo thinkcentre m720s firmware (< m1ukt70a)
• lenovo thinkcentre m720t firmware (< m1ukt70a)
… and 62 more
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-124495 Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-124495 Vendor Advisory