MEDIUM🇵🇱 Wersja polska

CVE-2022-48188

CVSS 6.7v3.1pub. 2023-06-05upd. 2024-11-21

A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Lenovo Ideacentre 510s 07icb

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 510s 07icb Firmware

    OS
    Lenovo
    < m22kt48a< m22kt49a

  • Lenovo Ideacentre 510s 07ick

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 510s 07ick Firmware

    OS
    Lenovo
    < m30kt28a< m1zkt40a

  • Lenovo Ideacentre 720 18apr

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 720 18apr Firmware

    OS
    Lenovo
    < m25kt63a

  • Lenovo Ideacentre Aio 3 21itl7

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 21itl7 Firmware

    OS
    Lenovo
    < o5akt33

  • Lenovo Ideacentre Aio 3 22itl6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22itl6 Firmware

    OS
    Lenovo
    < o5akt33

  • Lenovo Ideacentre Aio 3 24itl6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24itl6 Firmware

    OS
    Lenovo
    < o5akt33

  • Lenovo Ideacentre Aio 3 27itl6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 27itl6 Firmware

    OS
    Lenovo
    < o5akt33

  • Lenovo Thinkcentre M720e

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M720e Firmware

    OS
    Lenovo
    < m1zkt40a

  • Lenovo Thinkcentre M720q

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M720q Firmware

    OS
    Lenovo
    < m1ukt70a

  • Lenovo Thinkcentre M720s

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M720s Firmware

    OS
    Lenovo
    < m1ukt70a

  • Lenovo Thinkcentre M720t

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M720t Firmware

    OS
    Lenovo
    < m1ukt70a

  • Lenovo Thinkcentre M725s

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M725s Firmware

    OS
    Lenovo
    < m25kt63a

  • Lenovo Thinkcentre M75s Gen 2

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M75s Gen 2 Firmware

    OS
    Lenovo
    < m3bkt30a< m46kt30a

  • Lenovo Thinkcentre M75t Gen 2

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M75t Gen 2 Firmware

    OS
    Lenovo
    < m46kt30a< m3akt4ca

  • Lenovo Thinkcentre M920q

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M920q Firmware

    OS
    Lenovo
    < m1ukt70a
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2019-6188CRITICAL9.8PL ✓same product

Lenovo ThinkPad — niesprawny mechanizm wykrywania naruszenia BIOS

CVE-2019-0130HIGH7.4same product

Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0....

CVE-2019-0135HIGH7.8same product

Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version...

CVE-2023-43567MEDIUM6.7same product

A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may al...

CVE-2023-43568MEDIUM4.4same product

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may a...