Lucene search
HistoryJan 26, 2023 - 9:15 p.m.
CVE-2022-1891
cve-2022-1891
buffer overflow
lenovo notebook
local privileges
arbitrary code
nvd
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Affected configurations
Node
lenovothinkbook_14-iml_firmwareRange<cjcn38ww
lenovothinkbook_14-imlMatch-
Node
lenovothinkbook_14-iil_firmwareRange<djcn28ww
lenovothinkbook_14-iilMatch-
Node
lenovothinkbook_15-iil_firmwareRange<djcn28ww
lenovothinkbook_15-iilMatch-
Node
lenovothinkbook_15-iml_firmwareRange<cjcn38ww
lenovothinkbook_15-imlMatch-
Node
lenovoyoga_c640-13iml_lte_firmwareRange<chcn28ww
lenovoyoga_c640-13iml_lteMatch-
Node
lenovoyoga_c640-13iml_firmwareRange<chcn28ww
lenovoyoga_c640-13imlMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| lenovo:thinkbook_14-iml_firmware | lenovo thinkbook 14-iml firmware | lt | cjcn38ww |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "BIOS",
"vendor": "Lenovo",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
]Related
cvelist
cvelist
CVE-2022-1891
2023-01-23 15:25:33
nvd
nvd
CVE-2022-1891
2023-01-26 21:15:25
prion
prion
Buffer overflow
2023-01-26 21:15:00
thn
thn
New UEFI Firmware Vulnerabilities Impact Several Lenovo Notebook Models
2022-07-13 11:47:00
New UEFI Firmware Flaws Reported in Several Lenovo Notebook Models
2022-11-10 06:36:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2022-1891