Lucene search
LenovoCVELIST:CVE-2022-4434HistoryJan 05, 2023 - 5:32 p.m.
CVE-2022-4434
2023-01-0517:32:58
CWE-126
lenovo
www.cve.org
thinkpadx13s
bios driver
buffer over-read
vulnerability
information disclosure
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure.
CNA Affected
[
{
"defaultStatus": "unknown",
"product": "ThinkPad X13s",
"vendor": "Lenovo",
"versions": [
{
"status": "affected",
"version": "Versions prior to 1.47"
}
]
}
]Related
prion
prion
Buffer overflow
2023-01-05 18:15:00
nvd
nvd
CVE-2022-4434
2023-01-05 18:15:09
cve
cve
CVE-2022-4434
2023-01-05 18:15:09
thn
thn
Qualcomm Chipsets and Lenovo BIOS Get Security Updates to Fix Multiple Flaws
2023-01-04 10:47:00
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVELIST:CVE-2022-4434