Lucene search
HistoryJan 26, 2023 - 9:15 p.m.
CVE-2022-1890
lenovo
notebook
readybootdxe
driver
buffer overflow
local privilege escalation
cve-2022-1890
nvd
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Affected configurations
Node
lenovothinkbook_14-imlMatch-
lenovothinkbook_14-iml_firmwareRange<cjcn38ww
Node
lenovothinkbook_14-iilMatch-
lenovothinkbook_14-iil_firmwareRange<djcn28ww
Node
lenovothinkbook_15-iilMatch-
lenovothinkbook_15-iil_firmwareRange<djcn28ww
Node
lenovothinkbook_15-imlMatch-
lenovothinkbook_15-iml_firmwareRange<cjcn38ww
Node
lenovoyoga_c640-13iml_lteMatch-
lenovoyoga_c640-13iml_lte_firmwareRange<chcn28ww
Node
lenovoyoga_c640-13imlMatch-
lenovoyoga_c640-13iml_firmwareRange<chcn28ww
| CPE | Name | Operator | Version |
|---|---|---|---|
| lenovo:thinkbook_14-iml_firmware | lenovo thinkbook 14-iml firmware | lt | cjcn38ww |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "BIOS",
"vendor": "Lenovo",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
]Related
cvelist
cvelist
CVE-2022-1890
2023-01-23 15:18:46
nvd
nvd
CVE-2022-1890
2023-01-26 21:15:24
prion
prion
Buffer overflow
2023-01-26 21:15:00
thn
thn
New UEFI Firmware Vulnerabilities Impact Several Lenovo Notebook Models
2022-07-13 11:47:00
New UEFI Firmware Flaws Reported in Several Lenovo Notebook Models
2022-11-10 06:36:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2022-1890