CVE-2022-1892
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD
Description
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Affected (70)
Products: Lenovo: 100e 2nd Gen Firmware, 100w Gen 3 Firmware, 13w Yoga Firmware, 14w Gen 2 Firmware, 300e 2nd Gen Firmware, 300w Gen 3 Firmware, 500w Gen 3 Firmware, 730s 13iml Firmware, Flex 3 11ada05 Firmware, Flex 5 14alc05 Firmware, Flex 5 14are05 Firmware, Flex 5 14iil05 Firmware, Flex 5 14itl05 Firmware, Flex 5 15alc05 Firmware, Flex 5 15iil05 Firmware, Flex 5 15itl05 Firmware, Ideapad 1 11ada05 Firmware, Ideapad 1 11igl05 Firmware, Ideapad 1 14ada05 Firmware, Ideapad 1 14igl05 Firmware, Ideapad 3 15ada05 Firmware, Ideapad 3 14ada05 Firmware, Ideapad 3 14ada6 Firmware, Ideapad 3 14alc6 Firmware, Ideapad 3 15ada6 Firmware, Ideapad 3 15alc6 Firmware, Ideapad 3 17alc6 Firmware, Ideapad 3 17ada05 Firmware, Ideapad 3 17ada6 Firmware, Ideapad 5 15aba7 Firmware, Ideapad Flex 5 14alc7 Firmware, Ideapad Flex 5 16alc7 Firmware, Legion S7 15imh5 Firmware, Legion S7 15ach6 Firmware, Legion S7 15arh5 Firmware, S145 14api Firmware, S145 14ast Firmware, S145 15api Firmware, S145 15ast Firmware, S540 13api Firmware, Ideapad S940 14iil Firmware, Ideapad Slim 1 14ast 05 Firmware, Ideapad Slim 1 11ast 05 Firmware, Thinkbook 13s G3 Acn Firmware, Thinkbook 13s G2 Are Firmware, Thinkbook 13s G2 Itl Firmware, Thinkbook 13s Iml Firmware, Thinkbook 14 Iil Firmware, Thinkbook 14 Iml Firmware, Thinkbook 14p G2 Ach Firmware, Thinkbook 14s G2 Itl Firmware, Thinkbook 14s Iml Firmware, Thinkbook 15 Iil Firmware, Thinkbook 15 Iml Firmware, Thinkbook 16p G2 Ach Firmware, V130 15ikb Firmware, V14 G2 Alc Firmware, V14 Ada Firmware, V15 G2 Alc Firmware, V15 Ada Firmware, Yoga 9 15imh5 Firmware, Yoga C640 13iml Firmware, Yoga C640 13iml Lte Firmware, Yoga C940 15irh Firmware, Yoga S730 13iml Firmware, Yoga S940 14iil Firmware, Yoga Slim 7 Pro 14ach5 Firmware, Yoga Slim 7 Pro 14ach5 O Firmware, Yoga Slim 7 Pro 14arh5 Firmware, Ideapad 5 15alc05 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| version < frcn23ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo 100e 2nd Gen | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| version < gacn38ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo 100w Gen 3 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| version < jacn31ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo 13w Yoga | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| version < h0cn21ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo 14w Gen 2 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| version < frcn23ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo 300e 2nd Gen | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| version < gacn38ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo 300w Gen 3 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| version < g6cn40ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo 500w Gen 3 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| version < brcn20ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo 730s 13iml | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| version < fpcn26ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Flex 3 11ada05 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| version < gjcn27ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Flex 5 14alc05 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| version < eecn39ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Flex 5 14are05 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| version < eecn40ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Flex 5 14iil05 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| version < fxcn38ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Flex 5 14itl05 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| version < gjcn27ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Flex 5 15alc05 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| version < eccn40ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Flex 5 15iil05 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| version < fxcn38ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Flex 5 15itl05 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| version < fqcn26ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 1 11ada05 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| version < dwcn24ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 1 11igl05 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| version < fqcn26ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 1 14ada05 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| version < dwcn24ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 1 14igl05 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| version < e8cn36ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 3 15ada05 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| version < e8cn36ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 3 14ada05 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| version < hbcn24ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 3 14ada6 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| version < glcn48ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 3 14alc6 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| version < hbcn24ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 3 15ada6 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| version < glcn48ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 3 15alc6 | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| version < e8cn36ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 3 17alc6 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| version < hbcn24ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 3 17ada05 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| version < glcn48ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 3 17ada6 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| version < kacn14ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 5 15aba7 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| version < jccn29ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad Flex 5 14alc7 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| version < jccn29ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad Flex 5 16alc7 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| version < hacn37ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Legion S7 15imh5 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| version < g1cn27ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Legion S7 15ach6 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| version < fdcn40ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Legion S7 15arh5 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| version < bucn33ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo S145 14api | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| version < aycn28ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo S145 14ast | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| version < bucn33ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo S145 15api | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| version < aycn28ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo S145 15ast | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| version < cxcn36ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo S540 13api | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| version < bqcn34ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad S940 14iil | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| version < cwcn25ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad Slim 1 14ast 05 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| version < cwcn25ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad Slim 1 11ast 05 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| version < gmcn29ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkbook 13s G3 Acn | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| version < fvcn24ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkbook 13s G2 Are | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| version < f9cn50ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkbook 13s G2 Itl | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| version < cqcn37ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkbook 13s Iml | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| version < djcn28ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkbook 14 Iil | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| version < cjcn38ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkbook 14 Iml | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| version < gwcn41ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkbook 14p G2 Ach | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| version < f9cn50ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkbook 14s G2 Itl | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| version < cqcn37ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkbook 14s Iml | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| version < djcn28ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkbook 15 Iil | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| version < cjcn38ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkbook 15 Iml | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| version < gxcn42ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkbook 16p G2 Ach | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| version < 8vcn31ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo V130 15ikb | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| version < glcn48ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo V14 G2 Alc | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| version < e8cn36ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo V14 Ada | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| version < glcn48ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo V15 G2 Alc | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| version < e8cn36ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo V15 Ada | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| version < epcn28ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Yoga 9 15imh5 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| version < chcn28ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Yoga C640 13iml | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| version < chcn28ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Yoga C640 13iml Lte | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| version < bscn37ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Yoga C940 15irh | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| version < brcn20ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Yoga S730 13iml | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| version < bqcn34ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Yoga S940 14iil | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| version < gzcn29ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Yoga Slim 7 Pro 14ach5 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| version < gzcn29ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Yoga Slim 7 Pro 14ach5 O | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| version < gzcn24ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Yoga Slim 7 Pro 14arh5 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| version < h2cn27ww |
| Running on/with | Platform Versions |
|---|---|
Lenovo Ideapad 5 15alc05 | All versions |
Related CWEs
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
CWE-122
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.