CVE-2022-1890

🗓️ 23 Jan 2023 15:18:46Reported by lenovoType

Buffer overflow in Lenovo Notebook ReadyBootDxe driver allows local privilege escalatio

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-1890	14 Jul 202209:33	–	circl
CNNVD	Lenovo Notebook 缓冲区错误漏洞	26 Jan 202300:00	–	cnnvd
Cvelist	CVE-2022-1890	23 Jan 202315:18	–	cvelist
EUVD	EUVD-2022-25162	3 Oct 202520:07	–	euvd
Lenovo	Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US	8 Jul 202213:50	–	lenovo
NVD	CVE-2022-1890	26 Jan 202321:15	–	nvd
Prion	Buffer overflow	26 Jan 202321:15	–	prion
Positive Technologies	PT-2022-3641 · Lenovo · Readybootdxe	12 Jul 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-1890	22 May 202523:32	–	redhatcve
The Hacker News	New UEFI Firmware Flaws Reported in Several Lenovo Notebook Models	10 Nov 202206:36	–	thn

NVD

Vulners

Node

lenovo thinkbook_14-iml_firmwareRange<cjcn38ww

AND

lenovo thinkbook_14-imlMatch-

Node

lenovo thinkbook_14-iil_firmwareRange<djcn28ww

AND

lenovo thinkbook_14-iilMatch-

Node

lenovo thinkbook_15-iil_firmwareRange<djcn28ww

AND

lenovo thinkbook_15-iilMatch-

Node

lenovo thinkbook_15-iml_firmwareRange<cjcn38ww

AND

lenovo thinkbook_15-imlMatch-

Node

lenovo yoga_c640-13iml_lte_firmwareRange<chcn28ww

AND

lenovo yoga_c640-13iml_lteMatch-

Node

lenovo yoga_c640-13iml_firmwareRange<chcn28ww

AND

lenovo yoga_c640-13imlMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "BIOS",
    "vendor": "Lenovo",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Source	Link
support	www.support.lenovo.com/us/en/product_security/LEN-91369

21 Nov 2024 06:41Current

8High risk

Vulners AI Score8

CVSS 3.16.7 - 7.8

EPSS0.00043

SSVC