Lucene search
HistoryJan 05, 2023 - 6:15 p.m.
CVE-2022-4433
buffer over-read
thinkpadx13s
bios
lenovosetupconfigdxe
information disclosure
CVSS3
4.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
AI Score
6.2
Confidence
High
EPSS
0
Percentile
5.1%
A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
Affected configurations
Node
lenovothinkpad_x13s_firmwareRange<1.47
lenovothinkpad_x13sMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| lenovo | thinkpad_x13s_firmware | * | cpe:2.3:o:lenovo:thinkpad_x13s_firmware:*:*:*:*:*:*:*:* |
| lenovo | thinkpad_x13s | - | cpe:2.3:h:lenovo:thinkpad_x13s:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-4433
2023-01-05 17:32:48
cve
cve
CVE-2022-4433
2023-01-05 18:15:09
prion
prion
Buffer overflow
2023-01-05 18:15:00
thn
thn
Qualcomm Chipsets and Lenovo BIOS Get Security Updates to Fix Multiple Flaws
2023-01-04 10:47:00
CVSS3
4.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
AI Score
6.2
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2022-4433