MEDIUM🇵🇱 Wersja polska

CVE-2022-48181

CVSS 6.7v3.1pub. 2023-06-05upd. 2024-11-21

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Lenovo Ideacentre 3 07ach7

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 3 07ach7 Firmware

    OS
    Lenovo
    < m4mkt12a

  • Lenovo Ideacentre 3 07ada05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 3 07ada05 Firmware

    OS
    Lenovo
    < m4mkt12a< o4fkt35a

  • Lenovo Ideacentre 3 07iab7

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 3 07iab7 Firmware

    OS
    Lenovo
    < m49kt21a

  • Lenovo Ideacentre 3 07imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 3 07imb05 Firmware

    OS
    Lenovo
    < m2vkt1ea

  • Lenovo Ideacentre 5 14acn6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14acn6 Firmware

    OS
    Lenovo
    < o5ekt24a

  • Lenovo Ideacentre 5 14are05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14are05 Firmware

    OS
    Lenovo
    < o4zkt2aa

  • Lenovo Ideacentre 5 14iab7

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14iab7 Firmware

    OS
    Lenovo
    < m42kt42a

  • Lenovo Ideacentre 5 14imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14imb05 Firmware

    OS
    Lenovo
    < o4hkt3aa

  • Lenovo Ideacentre 5 14iob6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14iob6 Firmware

    OS
    Lenovo
    < m3gkt3aa

  • Lenovo Ideacentre Aio 3 21itl7

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 21itl7 Firmware

    OS
    Lenovo
    < o5akt33

  • Lenovo Ideacentre Aio 3 22iap7

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22iap7 Firmware

    OS
    Lenovo
    < o5nkt32a

  • Lenovo Ideacentre Aio 3 22imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22imb05 Firmware

    OS
    Lenovo
    < o5nkt32a

  • Lenovo Ideacentre Aio 3 22itl6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22itl6 Firmware

    OS
    Lenovo
    < o5akt33

  • Lenovo Ideacentre Aio 3 24alc6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24alc6 Firmware

    OS
    Lenovo
    < o5bkt25a

  • Lenovo Ideacentre Aio 3 24iap7

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24iap7 Firmware

    OS
    Lenovo
    < o5nkt32a
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2019-6188CRITICAL9.8PL ✓same product

Lenovo ThinkPad — niesprawny mechanizm wykrywania naruszenia BIOS

CVE-2023-43568MEDIUM4.4same product

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may a...

CVE-2023-43567MEDIUM6.7same product

A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may al...

CVE-2023-43569MEDIUM6.7same product

A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local att...

CVE-2023-43570MEDIUM6.7same product

A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a loc...