CVE-2022-48181 | Severity.io

Description

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

Related CPE's

ideacentre_c5-14imb05_firmware

Vulnerable

ideacentre_c5-14imb05

ideacentre_3_07ach7_firmware

Vulnerable

ideacentre_3_07ach7

ideacentre_3_07iab7_firmware

Vulnerable

ideacentre_3_07iab7

o

lenovo

ideacentre_3-07ada05_firmware

2

h

lenovo

ideacentre_3-07ada05

2

ideacentre_3-07imb05_firmware

Vulnerable

ideacentre_3-07imb05

ideacentre_5_14iab7_firmware

Vulnerable

ideacentre_5_14iab7

ideacentre_5-14acn6_firmware

Vulnerable

ideacentre_5-14acn6

ideacentre_5-14are05_firmware

Vulnerable

ideacentre_5-14are05

ideacentre_5-14imb05_firmware

Vulnerable

ideacentre_5-14imb05

ideacentre_5-14iob6_firmware

Vulnerable

ideacentre_5-14iob6

ideacentre_aio_3_21itl7_firmware

Vulnerable

ideacentre_aio_3_21itl7

ideacentre_aio_3_22iap7_firmware

Vulnerable

ideacentre_aio_3_22iap7

ideacentre_aio_3_24iap7_firmware

Vulnerable

ideacentre_aio_3_24iap7

ideacentre_aio_3_27iap7_firmware

Vulnerable

ideacentre_aio_3_27iap7

ideacentre_aio_3-22imb05_firmware

Vulnerable

ideacentre_aio_3-22imb05

ideacentre_aio_3-22itl6_firmware

Vulnerable

ideacentre_aio_3-22itl6

ideacentre_aio_3-24alc6_firmware

Vulnerable

ideacentre_aio_3-24alc6

ideacentre_aio_3-24imb05_firmware

Vulnerable

ideacentre_aio_3-24imb05

ideacentre_aio_3-24itl6_firmware

Vulnerable

ideacentre_aio_3-24itl6

ideacentre_aio_3-27alc6_firmware

Vulnerable

ideacentre_aio_3-27alc6

ideacentre_aio_3-27imb05_firmware

Vulnerable

ideacentre_aio_3-27imb05

ideacentre_aio_3-27itl6_firmware

Vulnerable

ideacentre_aio_3-27itl6

ideacentre_aio_5_24iah7_firmware

Vulnerable

ideacentre_aio_5_24iah7

ideacentre_aio_5_27iah7_firmware

Vulnerable

ideacentre_aio_5_27iah7

ideacentre_creator_5-14iob6_firmware

Vulnerable

ideacentre_creator_5-14iob6

ideacentre_g5-14amr05_firmware

Vulnerable

ideacentre_g5-14amr05

ideacentre_g5-14imb05_firmware

Vulnerable

ideacentre_g5-14imb05

ideacentre_gaming_5_17acn7_firmware

Vulnerable

ideacentre_gaming_5_17acn7

ideacentre_gaming_5_17iab7_firmware

Vulnerable

ideacentre_gaming_5_17iab7

ideacentre_gaming_5-14acn6_firmware

Vulnerable

ideacentre_gaming_5-14acn6

ideacentre_gaming_5-14iob6_firmware

Vulnerable

ideacentre_gaming_5-14iob6

ideacentre_mini_5_01iaq7_firmware

Vulnerable

ideacentre_mini_5_01iaq7

ideacentre_mini_5-01imh05_firmware

Vulnerable

ideacentre_mini_5-01imh05

legion_c530-19icb_firmware

Vulnerable

legion_c530-19icb

legion_r5-28imb05_firmware

Vulnerable

legion_r5-28imb05

legion_t5-26amr5_firmware

Vulnerable

legion_t5-26amr5

legion_t5-26iob6_firmware

Vulnerable

legion_t5-26iob6

legion_t5-28icb05_firmware

Vulnerable

legion_t5-28icb05

legion_t5-28imb05_firmware

Vulnerable

legion_t5-28imb05

legion_t530-28icb_firmware

Vulnerable

legion_t530-28icb

legion_t7-34iaz7_firmware

Vulnerable

legion_t7-34iaz7

o

lenovo

legion_t7-34imz5_firmware

2

h

lenovo

legion_t7-34imz5

2

lenovo_legion_t5_26iab7_firmware

Vulnerable

lenovo_legion_t5_26iab7

thinkcentre_m600_firmware

Vulnerable

thinkcentre_m600

thinkcentre_m60e_tiny_firmware

Vulnerable

thinkcentre_m60e_tiny

thinkcentre_m625q_firmware

Vulnerable

thinkcentre_m625q

thinkcentre_m70c_firmware

Vulnerable

thinkcentre_m70c

thinkcentre_m70q_firmware

Vulnerable

thinkcentre_m70q

thinkcentre_m70q_gen_2_firmware

Vulnerable

thinkcentre_m70q_gen_2

thinkcentre_m70q_gen_3_firmware

Vulnerable

thinkcentre_m70q_gen_3

thinkcentre_m70s_firmware

Vulnerable

thinkcentre_m70s

thinkcentre_m70s_gen_3_firmware

Vulnerable

thinkcentre_m70s_gen_3

thinkcentre_m70t_firmware

Vulnerable

thinkcentre_m70t

thinkcentre_m70t_gen_3_firmware

Vulnerable

thinkcentre_m70t_gen_3

thinkcentre_m720e_firmware

Vulnerable

thinkcentre_m720e

thinkcentre_m720q_firmware

Vulnerable

thinkcentre_m720q

thinkcentre_m720s_firmware

Vulnerable

thinkcentre_m720s

thinkcentre_m720t_firmware

Vulnerable

thinkcentre_m720t

thinkcentre_m725s_firmware

Vulnerable

thinkcentre_m725s

thinkcentre_m75n_firmware

Vulnerable

thinkcentre_m75n

o

lenovo

thinkcentre_m75s_gen_2_firmware

3

h

lenovo

thinkcentre_m75s_gen_2

3

thinkcentre_m75s-1_firmware

Vulnerable

thinkcentre_m75s-1

o

lenovo

thinkcentre_m75t_gen_2_firmware

3

h

lenovo

thinkcentre_m75t_gen_2

3

thinkcentre_m80q_firmware

Vulnerable

thinkcentre_m80q

thinkcentre_m80q_gen_3_firmware

Vulnerable

thinkcentre_m80q_gen_3

thinkcentre_m80s_firmware

Vulnerable

thinkcentre_m80s

thinkcentre_m80s_gen_3_firmware

Vulnerable

thinkcentre_m80s_gen_3

thinkcentre_m80t_firmware

Vulnerable

thinkcentre_m80t

thinkcentre_m80t_gen_3_firmware

Vulnerable

thinkcentre_m80t_gen_3

thinkcentre_m90a_firmware

Vulnerable

thinkcentre_m90a

thinkcentre_m90a_gen_2_firmware

Vulnerable

thinkcentre_m90a_gen_2

thinkcentre_m90a_gen_3_firmware

Vulnerable

thinkcentre_m90a_gen_3

thinkcentre_m90a_pro_gen_3_firmware

Vulnerable

thinkcentre_m90a_pro_gen_3

thinkcentre_m90q_gen_2_firmware

Vulnerable

thinkcentre_m90q_gen_2

thinkcentre_m90q_gen_3_firmware

Vulnerable

thinkcentre_m90q_gen_3

thinkcentre_m90q_tiny_firmware

Vulnerable

thinkcentre_m90q_tiny

thinkcentre_m90s_firmware

Vulnerable

thinkcentre_m90s

thinkcentre_m90s_gen_3_firmware

Vulnerable

thinkcentre_m90s_gen_3

thinkcentre_m90t_firmware

Vulnerable

thinkcentre_m90t

thinkcentre_m90t_gen_3_firmware

Vulnerable

thinkcentre_m90t_gen_3

thinkcentre_m920q_firmware

Vulnerable

thinkcentre_m920q

thinkcentre_m920s_firmware

Vulnerable

thinkcentre_m920s

thinkcentre_m920t_firmware

Vulnerable

thinkcentre_m920t

thinkcentre_m920x_firmware

Vulnerable

thinkcentre_m920x

thinkcentre_m920z_firmware

Vulnerable

thinkcentre_m920z

thinkcentre_neo_30a_22_gen_3_firmware

Vulnerable

thinkcentre_neo_30a_22_gen_3

thinkcentre_neo_30a_24_gen_3_firmware

Vulnerable

thinkcentre_neo_30a_24_gen_3

thinkcentre_neo_30a_27_gen_3_firmware

Vulnerable

thinkcentre_neo_30a_27_gen_3

thinkcentre_neo_50s_gen_3_firmware

Vulnerable

thinkcentre_neo_50s_gen_3

thinkcentre_neo_50t_gen_3_firmware

Vulnerable

thinkcentre_neo_50t_gen_3

thinkcentre_neo_70t_gen_3_firmware

Vulnerable

thinkcentre_neo_70t_gen_3

thinkcentre_t540-15ama_g_firmware

Vulnerable

thinkcentre_t540-15ama_g

ideacentre_510s-07icb_firmware

Vulnerable

ideacentre_510s-07icb

o

lenovo

ideacentre_510s-07ick_firmware

2

h

lenovo

ideacentre_510s-07ick

2

ideacentre_720-18apr_firmware

Vulnerable

ideacentre_720-18apr

v30a-22itl_firmware

Vulnerable

v30a-24itl_firmware

Vulnerable

v35s-07ada_firmware

Vulnerable

v50s-07imb_firmware

Vulnerable

v50t-13imb_firmware

Vulnerable

v50t-13iob_g2_firmware

Vulnerable

v530s-07icb_firmware

Vulnerable

v530s-07icr_firmware

Vulnerable

v55t_gen_2_13acn_firmware

Vulnerable

v55t_gen_2_13acn

thinkstation_p320_firmware

Vulnerable

thinkstation_p320

thinkstation_p330_tiny_firmware

Vulnerable

thinkstation_p330_tiny

thinkstation_p330_firmware

Vulnerable

thinkstation_p330

thinkstation_p330_gen_2_firmware

Vulnerable

thinkstation_p330_gen_2

thinkstation_p340_tiny_firmware

Vulnerable

thinkstation_p340_tiny

thinkstation_p340_firmware

Vulnerable

thinkstation_p340

thinkstation_p350_tiny_firmware

Vulnerable

thinkstation_p350_tiny

thinkstation_p350_firmware

Vulnerable

thinkstation_p350

thinkstation_p360_tiny_firmware

Vulnerable

thinkstation_p360_tiny

o

lenovo

thinkstation_p360_firmware

2

h

lenovo

thinkstation_p360

2

References

https://support.lenovo.com/us/en/product_security/LEN-124495

Vendor Advisory

Weaknesses

[email protected]

Primary

CWE-787

[email protected]

Secondary

CWE-787

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 · High

CVSS V3.1
CVSS V3.0
CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2023-06-05T22:15:11.383

1 year ago

Last modified

2023-06-13T19:34:14.697

1 year ago