Lucene search
LenovoCVELIST:CVE-2022-4433HistoryJan 05, 2023 - 5:32 p.m.
CVE-2022-4433
2023-01-0517:32:48
CWE-126
lenovo
www.cve.org
3
thinkpadx13s
bios
buffer over-read
vulnerability
information disclosure
elevated privileges
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
6.4
Confidence
High
EPSS
0
Percentile
5.1%
A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
CNA Affected
[
{
"defaultStatus": "unknown",
"product": "ThinkPad X13s",
"vendor": "Lenovo",
"versions": [
{
"status": "affected",
"version": "Versions prior to 1.47"
}
]
}
]Related
cve
cve
CVE-2022-4433
2023-01-05 18:15:09
nvd
nvd
CVE-2022-4433
2023-01-05 18:15:09
prion
prion
Buffer overflow
2023-01-05 18:15:00
thn
thn
Qualcomm Chipsets and Lenovo BIOS Get Security Updates to Fix Multiple Flaws
2023-01-04 10:47:00
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
6.4
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2022-4433