Lucene search
HistoryJan 26, 2023 - 9:15 p.m.
CVE-2022-1890
buffer overflow
lenovo notebook
readybootdxe
local privileges
arbitrary code
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Affected configurations
Node
lenovothinkbook_14-imlMatch-
lenovothinkbook_14-iml_firmwareRange<cjcn38ww
Node
lenovothinkbook_14-iilMatch-
lenovothinkbook_14-iil_firmwareRange<djcn28ww
Node
lenovothinkbook_15-iilMatch-
lenovothinkbook_15-iil_firmwareRange<djcn28ww
Node
lenovothinkbook_15-imlMatch-
lenovothinkbook_15-iml_firmwareRange<cjcn38ww
Node
lenovoyoga_c640-13iml_lteMatch-
lenovoyoga_c640-13iml_lte_firmwareRange<chcn28ww
Node
lenovoyoga_c640-13imlMatch-
lenovoyoga_c640-13iml_firmwareRange<chcn28ww
Related
cvelist
cvelist
CVE-2022-1890
2023-01-23 15:18:46
prion
prion
Buffer overflow
2023-01-26 21:15:00
cve
cve
CVE-2022-1890
2023-01-26 21:15:24
thn
thn
New UEFI Firmware Vulnerabilities Impact Several Lenovo Notebook Models
2022-07-13 11:47:00
New UEFI Firmware Flaws Reported in Several Lenovo Notebook Models
2022-11-10 06:36:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2022-1890