7.8

CVE-2022-48181

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

Data is provided by the National Vulnerability Database (NVD)
LenovoIdeacentre C5-14imb05 Firmware Version < o4hkt3aa
   LenovoIdeacentre C5-14imb05 Version-
LenovoIdeacentre 3 07ach7 Firmware Version < m4mkt12a
   LenovoIdeacentre 3 07ach7 Version-
LenovoIdeacentre 3 07iab7 Firmware Version < m49kt21a
   LenovoIdeacentre 3 07iab7 Version-
LenovoIdeacentre 3-07ada05 Firmware Version < o4fkt35a
   LenovoIdeacentre 3-07ada05 Version-
LenovoIdeacentre 3-07ada05 Firmware Version < m4mkt12a
   LenovoIdeacentre 3-07ada05 Version-
LenovoIdeacentre 3-07imb05 Firmware Version < m2vkt1ea
   LenovoIdeacentre 3-07imb05 Version-
LenovoIdeacentre 5 14iab7 Firmware Version < m42kt42a
   LenovoIdeacentre 5 14iab7 Version-
LenovoIdeacentre 5-14acn6 Firmware Version < o5ekt24a
   LenovoIdeacentre 5-14acn6 Version-
LenovoIdeacentre 5-14are05 Firmware Version < o4zkt2aa
   LenovoIdeacentre 5-14are05 Version-
LenovoIdeacentre 5-14imb05 Firmware Version < o4hkt3aa
   LenovoIdeacentre 5-14imb05 Version-
LenovoIdeacentre 5-14iob6 Firmware Version < m3gkt3aa
   LenovoIdeacentre 5-14iob6 Version-
LenovoIdeacentre Aio 3 21itl7 Firmware Version < o5akt33
   LenovoIdeacentre Aio 3 21itl7 Version-
LenovoIdeacentre Aio 3 22iap7 Firmware Version < o5nkt32a
   LenovoIdeacentre Aio 3 22iap7 Version-
LenovoIdeacentre Aio 3 24iap7 Firmware Version < o5nkt32a
   LenovoIdeacentre Aio 3 24iap7 Version-
LenovoIdeacentre Aio 3 27iap7 Firmware Version < o5nkt32a
   LenovoIdeacentre Aio 3 27iap7 Version-
LenovoIdeacentre Aio 3-22imb05 Firmware Version < o5nkt32a
   LenovoIdeacentre Aio 3-22imb05 Version-
LenovoIdeacentre Aio 3-22itl6 Firmware Version < o5akt33
   LenovoIdeacentre Aio 3-22itl6 Version-
LenovoIdeacentre Aio 3-24alc6 Firmware Version < o5bkt25a
   LenovoIdeacentre Aio 3-24alc6 Version-
LenovoIdeacentre Aio 3-24imb05 Firmware Version < o5nkt32a
   LenovoIdeacentre Aio 3-24imb05 Version-
LenovoIdeacentre Aio 3-24itl6 Firmware Version < o5akt33
   LenovoIdeacentre Aio 3-24itl6 Version-
LenovoIdeacentre Aio 3-27alc6 Firmware Version < o5bkt25a
   LenovoIdeacentre Aio 3-27alc6 Version-
LenovoIdeacentre Aio 3-27imb05 Firmware Version < o5nkt32a
   LenovoIdeacentre Aio 3-27imb05 Version-
LenovoIdeacentre Aio 3-27itl6 Firmware Version < o5akt33
   LenovoIdeacentre Aio 3-27itl6 Version-
LenovoIdeacentre Aio 5 24iah7 Firmware Version < o5rkt39a
   LenovoIdeacentre Aio 5 24iah7 Version-
LenovoIdeacentre Aio 5 27iah7 Firmware Version < o5rkt39a
   LenovoIdeacentre Aio 5 27iah7 Version-
LenovoIdeacentre G5-14amr05 Firmware Version < o4zkt2aa
   LenovoIdeacentre G5-14amr05 Version-
LenovoIdeacentre G5-14imb05 Firmware Version < o4hkt3aa
   LenovoIdeacentre G5-14imb05 Version-
LenovoIdeacentre Mini 5 01iaq7 Firmware Version < o53kt0ea
   LenovoIdeacentre Mini 5 01iaq7 Version-
LenovoLegion C530-19icb Firmware Version < o4bkt22a
   LenovoLegion C530-19icb Version-
LenovoLegion R5-28imb05 Firmware Version < o4nkt1da
   LenovoLegion R5-28imb05 Version-
LenovoLegion T5-26amr5 Firmware Version < o4mkt2da
   LenovoLegion T5-26amr5 Version-
LenovoLegion T5-26iob6 Firmware Version < o54kt22a
   LenovoLegion T5-26iob6 Version-
LenovoLegion T5-28icb05 Firmware Version < o4bkt22a
   LenovoLegion T5-28icb05 Version-
LenovoLegion T5-28imb05 Firmware Version < o4nkt1da
   LenovoLegion T5-28imb05 Version-
LenovoLegion T530-28icb Firmware Version < o4bkt22a
   LenovoLegion T530-28icb Version-
LenovoLegion T7-34iaz7 Firmware Version < o5hkt2aa
   LenovoLegion T7-34iaz7 Version-
LenovoLegion T7-34imz5 Firmware Version < o4lkt20a
   LenovoLegion T7-34imz5 Version-
LenovoLegion T7-34imz5 Firmware Version < o5fkt15a
   LenovoLegion T7-34imz5 Version-
LenovoLenovo Legion T5 26iab7 Firmware Version < o5lkt29a
   LenovoLenovo Legion T5 26iab7 Version-
LenovoThinkcentre M600 Firmware Version < m00kt68a
   LenovoThinkcentre M600 Version-
LenovoThinkcentre M60e Tiny Firmware Version < m3skt25a
   LenovoThinkcentre M60e Tiny Version-
LenovoThinkcentre M625q Firmware Version < m1wkt50a
   LenovoThinkcentre M625q Version-
LenovoThinkcentre M70c Firmware Version < m2vkt1ea
   LenovoThinkcentre M70c Version-
LenovoThinkcentre M70q Firmware Version < m2wkt59a
   LenovoThinkcentre M70q Version-
LenovoThinkcentre M70q Gen 2 Firmware Version < m3jkt37a
   LenovoThinkcentre M70q Gen 2 Version-
LenovoThinkcentre M70q Gen 3 Firmware Version < m43kt1ba
   LenovoThinkcentre M70q Gen 3 Version-
LenovoThinkcentre M70s Firmware Version < m2tkt52a
   LenovoThinkcentre M70s Version-
LenovoThinkcentre M70s Gen 3 Firmware Version < m41kt3da
   LenovoThinkcentre M70s Gen 3 Version-
LenovoThinkcentre M70t Firmware Version < m2tkt52a
   LenovoThinkcentre M70t Version-
LenovoThinkcentre M70t Gen 3 Firmware Version < m41kt3da
   LenovoThinkcentre M70t Gen 3 Version-
LenovoThinkcentre M720e Firmware Version < m1zkt40a
   LenovoThinkcentre M720e Version-
LenovoThinkcentre M720q Firmware Version < m1ukt70a
   LenovoThinkcentre M720q Version-
LenovoThinkcentre M720s Firmware Version < m1ukt70a
   LenovoThinkcentre M720s Version-
LenovoThinkcentre M720t Firmware Version < m1ukt70a
   LenovoThinkcentre M720t Version-
LenovoThinkcentre M725s Firmware Version < m25kt63a
   LenovoThinkcentre M725s Version-
LenovoThinkcentre M75n Firmware Version < m33kt27a
   LenovoThinkcentre M75n Version-
LenovoThinkcentre M75s Gen 2 Firmware Version < m46kt30a
   LenovoThinkcentre M75s Gen 2 Version-
LenovoThinkcentre M75s Gen 2 Firmware Version < m3bkt2fa
   LenovoThinkcentre M75s Gen 2 Version-
LenovoThinkcentre M75s Gen 2 Firmware Version < m3akt4ca
   LenovoThinkcentre M75s Gen 2 Version-
LenovoThinkcentre M75s-1 Firmware Version < m2ckt4fa
   LenovoThinkcentre M75s-1 Version-
LenovoThinkcentre M75t Gen 2 Firmware Version < m46kt30a
   LenovoThinkcentre M75t Gen 2 Version-
LenovoThinkcentre M75t Gen 2 Firmware Version < m3bkt2fa
   LenovoThinkcentre M75t Gen 2 Version-
LenovoThinkcentre M75t Gen 2 Firmware Version < m3akt4ca
   LenovoThinkcentre M75t Gen 2 Version-
LenovoThinkcentre M80q Firmware Version < m2wkt59a
   LenovoThinkcentre M80q Version-
LenovoThinkcentre M80q Gen 3 Firmware Version < m4gkt23a
   LenovoThinkcentre M80q Gen 3 Version-
LenovoThinkcentre M80s Firmware Version < m2tkt52a
   LenovoThinkcentre M80s Version-
LenovoThinkcentre M80s Gen 3 Firmware Version < m40kt3da
   LenovoThinkcentre M80s Gen 3 Version-
LenovoThinkcentre M80t Firmware Version < m2tkt52a
   LenovoThinkcentre M80t Version-
LenovoThinkcentre M80t Gen 3 Firmware Version < m40kt3da
   LenovoThinkcentre M80t Gen 3 Version-
LenovoThinkcentre M90a Firmware Version < m2rkt56a
   LenovoThinkcentre M90a Version-
LenovoThinkcentre M90a Gen 2 Firmware Version < m3lkt28a
   LenovoThinkcentre M90a Gen 2 Version-
LenovoThinkcentre M90a Gen 3 Firmware Version < m4ikt19a
   LenovoThinkcentre M90a Gen 3 Version-
LenovoThinkcentre M90q Gen 2 Firmware Version < m3jkt37a
   LenovoThinkcentre M90q Gen 2 Version-
LenovoThinkcentre M90q Gen 3 Firmware Version < m4gkt23a
   LenovoThinkcentre M90q Gen 3 Version-
LenovoThinkcentre M90q Tiny Firmware Version < m2wkt59a
   LenovoThinkcentre M90q Tiny Version-
LenovoThinkcentre M90s Firmware Version < m2tkt52a
   LenovoThinkcentre M90s Version-
LenovoThinkcentre M90s Gen 3 Firmware Version < m40kt3da
   LenovoThinkcentre M90s Gen 3 Version-
LenovoThinkcentre M90t Firmware Version < m2tkt52a
   LenovoThinkcentre M90t Version-
LenovoThinkcentre M90t Gen 3 Firmware Version < m40kt3da
   LenovoThinkcentre M90t Gen 3 Version-
LenovoThinkcentre M920q Firmware Version < m1ukt70a
   LenovoThinkcentre M920q Version-
LenovoThinkcentre M920s Firmware Version < m1ukt70a
   LenovoThinkcentre M920s Version-
LenovoThinkcentre M920t Firmware Version < m1ukt70a
   LenovoThinkcentre M920t Version-
LenovoThinkcentre M920x Firmware Version < m1ukt70a
   LenovoThinkcentre M920x Version-
LenovoThinkcentre M920z Firmware Version < m1mkt55a
   LenovoThinkcentre M920z Version-
LenovoThinkcentre T540-15ama G Firmware Version < m2ckt4fa
   LenovoThinkcentre T540-15ama G Version-
LenovoIdeacentre 510s-07icb Firmware Version < m22kt49a
   LenovoIdeacentre 510s-07icb Version-
LenovoIdeacentre 510s-07ick Firmware Version < m30kt28a
   LenovoIdeacentre 510s-07ick Version-
LenovoIdeacentre 510s-07ick Firmware Version < m1zkt40a
   LenovoIdeacentre 510s-07ick Version-
LenovoIdeacentre 720-18apr Firmware Version < m25kt63a
   LenovoIdeacentre 720-18apr Version-
LenovoV30a-22itl Firmware Version < o5akt33
   LenovoV30a-22itl Version-
LenovoV30a-24itl Firmware Version < o5akt33
   LenovoV30a-24itl Version-
LenovoV35s-07ada Firmware Version < m4mkt12a
   LenovoV35s-07ada Version-
LenovoV50s-07imb Firmware Version < m2vkt1ea
   LenovoV50s-07imb Version-
LenovoV50t-13imb Firmware Version < o4hkt3aa
   LenovoV50t-13imb Version-
LenovoV50t-13iob G2 Firmware Version < m3gkt3aa
   LenovoV50t-13iob G2 Version-
LenovoV530s-07icb Firmware Version < m22kt49a
   LenovoV530s-07icb Version-
LenovoV530s-07icr Firmware Version < m1zkt40a
   LenovoV530s-07icr Version-
LenovoV55t Gen 2 13acn Firmware Version < o5jkt23a
   LenovoV55t Gen 2 13acn Version-
LenovoThinkstation P320 Firmware Version < s06kt63a
   LenovoThinkstation P320 Version-
LenovoThinkstation P330 Tiny Firmware Version < m1ukt70a
   LenovoThinkstation P330 Tiny Version-
LenovoThinkstation P330 Firmware Version < m1vkt6fa
   LenovoThinkstation P330 Version-
LenovoThinkstation P330 Gen 2 Firmware Version < m1vkt6fa
   LenovoThinkstation P330 Gen 2 Version-
LenovoThinkstation P340 Tiny Firmware Version < m2wkt59a
   LenovoThinkstation P340 Tiny Version-
LenovoThinkstation P340 Firmware Version < s08kt53a
   LenovoThinkstation P340 Version-
LenovoThinkstation P350 Tiny Firmware Version < m3jkt37a
   LenovoThinkstation P350 Tiny Version-
LenovoThinkstation P350 Firmware Version < s0akt39a
   LenovoThinkstation P350 Version-
LenovoThinkstation P360 Tiny Firmware Version < m4gkt23a
   LenovoThinkstation P360 Tiny Version-
LenovoThinkstation P360 Firmware Version < s0ekt40a
   LenovoThinkstation P360 Version-
LenovoThinkstation P360 Firmware Version < s0ekt43a
   LenovoThinkstation P360 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.058
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
psirt@lenovo.com 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.