Lucene search
LenovoCVELIST:CVE-2022-4435HistoryJan 05, 2023 - 5:33 p.m.
CVE-2022-4435
2023-01-0517:33:08
CWE-126
lenovo
www.cve.org
3
buffer over-read
thinkpadx13s bios
lenovoremoteconfigupdatedxe
information disclosure
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
6.4
Confidence
High
EPSS
0
Percentile
5.1%
A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
CNA Affected
[
{
"defaultStatus": "unknown",
"product": "ThinkPad X13s",
"vendor": "Lenovo",
"versions": [
{
"status": "affected",
"version": "Versions prior to 1.47"
}
]
}
]Related
prion
prion
Buffer overflow
2023-01-05 18:15:00
nvd
nvd
CVE-2022-4435
2023-01-05 18:15:09
cve
cve
CVE-2022-4435
2023-01-05 18:15:09
thn
thn
Qualcomm Chipsets and Lenovo BIOS Get Security Updates to Fix Multiple Flaws
2023-01-04 10:47:00
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
6.4
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2022-4435