CVE-2022-48181

Published: Jun 5, 2023Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

Affected (122)

Lenovo

114 products

Ideacentre C5 14imb05 Firmware

Ideacentre 3 07ach7 Firmware

Ideacentre 3 07iab7 Firmware

Ideacentre 3 07ada05 Firmware

Ideacentre 3 07imb05 Firmware

Ideacentre 5 14iab7 Firmware

Ideacentre 5 14acn6 Firmware

Ideacentre 5 14are05 Firmware

Ideacentre 5 14imb05 Firmware

Ideacentre 5 14iob6 Firmware

Ideacentre Aio 3 21itl7 Firmware

Ideacentre Aio 3 22iap7 Firmware

Ideacentre Aio 3 24iap7 Firmware

Ideacentre Aio 3 27iap7 Firmware

Ideacentre Aio 3 22imb05 Firmware

Ideacentre Aio 3 22itl6 Firmware

Ideacentre Aio 3 24alc6 Firmware

Ideacentre Aio 3 24imb05 Firmware

Ideacentre Aio 3 24itl6 Firmware

Ideacentre Aio 3 27alc6 Firmware

Ideacentre Aio 3 27imb05 Firmware

Ideacentre Aio 3 27itl6 Firmware

Ideacentre Aio 5 24iah7 Firmware

Ideacentre Aio 5 27iah7 Firmware

Ideacentre Creator 5 14iob6 Firmware

Ideacentre G5 14amr05 Firmware

Ideacentre G5 14imb05 Firmware

Ideacentre Gaming 5 17acn7 Firmware

Ideacentre Gaming 5 17iab7 Firmware

Ideacentre Gaming 5 14acn6 Firmware

Ideacentre Gaming 5 14iob6 Firmware

Ideacentre Mini 5 01iaq7 Firmware

Ideacentre Mini 5 01imh05 Firmware

Legion C530 19icb Firmware

Legion R5 28imb05 Firmware

Legion T5 26amr5 Firmware

Legion T5 26iob6 Firmware

Legion T5 28icb05 Firmware

Legion T5 28imb05 Firmware

Legion T530 28icb Firmware

Legion T7 34iaz7 Firmware

Legion T7 34imz5 Firmware

Lenovo Legion T5 26iab7 Firmware

Thinkcentre M600 Firmware

Thinkcentre M60e Tiny Firmware

Thinkcentre M625q Firmware

Thinkcentre M70c Firmware

Thinkcentre M70q Firmware

Thinkcentre M70q Gen 2 Firmware

Thinkcentre M70q Gen 3 Firmware

Thinkcentre M70s Firmware

Thinkcentre M70s Gen 3 Firmware

Thinkcentre M70t Firmware

Thinkcentre M70t Gen 3 Firmware

Thinkcentre M720e Firmware

Thinkcentre M720q Firmware

Thinkcentre M720s Firmware

Thinkcentre M720t Firmware

Thinkcentre M725s Firmware

Thinkcentre M75n Firmware

Thinkcentre M75s Gen 2 Firmware

Thinkcentre M75s 1 Firmware

Thinkcentre M75t Gen 2 Firmware

Thinkcentre M80q Firmware

Thinkcentre M80q Gen 3 Firmware

Thinkcentre M80s Firmware

Thinkcentre M80s Gen 3 Firmware

Thinkcentre M80t Firmware

Thinkcentre M80t Gen 3 Firmware

Thinkcentre M90a Firmware

Thinkcentre M90a Gen 2 Firmware

Thinkcentre M90a Gen 3 Firmware

Thinkcentre M90a Pro Gen 3 Firmware

Thinkcentre M90q Gen 2 Firmware

Thinkcentre M90q Gen 3 Firmware

Thinkcentre M90q Tiny Firmware

Thinkcentre M90s Firmware

Thinkcentre M90s Gen 3 Firmware

Thinkcentre M90t Firmware

Thinkcentre M90t Gen 3 Firmware

Thinkcentre M920q Firmware

Thinkcentre M920s Firmware

Thinkcentre M920t Firmware

Thinkcentre M920x Firmware

Thinkcentre M920z Firmware

Thinkcentre Neo 30a 22 Gen 3 Firmware

Thinkcentre Neo 30a 24 Gen 3 Firmware

Thinkcentre Neo 30a 27 Gen 3 Firmware

Thinkcentre Neo 50s Gen 3 Firmware

Thinkcentre Neo 50t Gen 3 Firmware

Thinkcentre Neo 70t Gen 3 Firmware

Thinkcentre T540 15ama G Firmware

Ideacentre 510s 07icb Firmware

Ideacentre 510s 07ick Firmware

Ideacentre 720 18apr Firmware

V50t 13iob G2 Firmware

V530s 07icb Firmware

V530s 07icr Firmware

V55t Gen 2 13acn Firmware

Thinkstation P320 Firmware

Thinkstation P330 Tiny Firmware

Thinkstation P330 Firmware

Thinkstation P330 Gen 2 Firmware

Thinkstation P340 Tiny Firmware

Thinkstation P340 Firmware

Thinkstation P350 Tiny Firmware

Thinkstation P350 Firmware

Thinkstation P360 Tiny Firmware

Thinkstation P360 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre C5 14imb05 Firmware	Before o4hkt3aa

Running on/with	Platform Versions
Lenovo Ideacentre C5 14imb05	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 3 07ach7 Firmware	Before m4mkt12a

Running on/with	Platform Versions
Lenovo Ideacentre 3 07ach7	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 3 07iab7 Firmware	Before m49kt21a

Running on/with	Platform Versions
Lenovo Ideacentre 3 07iab7	All versions

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Ideacentre 3 07ada05 Firmware	Before o4fkt35a

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 3 07ada05 Firmware	Before m4mkt12a

Running on/with	Platform Versions
Lenovo Ideacentre 3 07ada05	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 3 07imb05 Firmware	Before m2vkt1ea

Running on/with	Platform Versions
Lenovo Ideacentre 3 07imb05	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 5 14iab7 Firmware	Before m42kt42a

Running on/with	Platform Versions
Lenovo Ideacentre 5 14iab7	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 5 14acn6 Firmware	Before o5ekt24a

Running on/with	Platform Versions
Lenovo Ideacentre 5 14acn6	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 5 14are05 Firmware	Before o4zkt2aa

Running on/with	Platform Versions
Lenovo Ideacentre 5 14are05	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 5 14imb05 Firmware	Before o4hkt3aa

Running on/with	Platform Versions
Lenovo Ideacentre 5 14imb05	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 5 14iob6 Firmware	Before m3gkt3aa

Running on/with	Platform Versions
Lenovo Ideacentre 5 14iob6	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 21itl7 Firmware	Before o5akt33

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 21itl7	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 22iap7 Firmware	Before o5nkt32a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 22iap7	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 24iap7 Firmware	Before o5nkt32a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 24iap7	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 27iap7 Firmware	Before o5nkt32a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 27iap7	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 22imb05 Firmware	Before o5nkt32a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 22imb05	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 22itl6 Firmware	Before o5akt33

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 22itl6	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 24alc6 Firmware	Before o5bkt25a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 24alc6	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 24imb05 Firmware	Before o5nkt32a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 24imb05	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 24itl6 Firmware	Before o5akt33

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 24itl6	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 27alc6 Firmware	Before o5bkt25a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 27alc6	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 27imb05 Firmware	Before o5nkt32a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 27imb05	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 27itl6 Firmware	Before o5akt33

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 27itl6	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 5 24iah7 Firmware	Before o5rkt39a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 5 24iah7	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 5 27iah7 Firmware	Before o5rkt39a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 5 27iah7	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Creator 5 14iob6 Firmware	Before m3gkt3aa

Running on/with	Platform Versions
Lenovo Ideacentre Creator 5 14iob6	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre G5 14amr05 Firmware	Before o4zkt2aa

Running on/with	Platform Versions
Lenovo Ideacentre G5 14amr05	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre G5 14imb05 Firmware	Before o4hkt3aa

Running on/with	Platform Versions
Lenovo Ideacentre G5 14imb05	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Gaming 5 17acn7 Firmware	Before o5ekt24a

Running on/with	Platform Versions
Lenovo Ideacentre Gaming 5 17acn7	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Gaming 5 17iab7 Firmware	Before m42kt42a

Running on/with	Platform Versions
Lenovo Ideacentre Gaming 5 17iab7	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Gaming 5 14acn6 Firmware	Before o5ekt24a

Running on/with	Platform Versions
Lenovo Ideacentre Gaming 5 14acn6	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Gaming 5 14iob6 Firmware	Before m3gkt3aa

Running on/with	Platform Versions
Lenovo Ideacentre Gaming 5 14iob6	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Mini 5 01iaq7 Firmware	Before o53kt0ea

Running on/with	Platform Versions
Lenovo Ideacentre Mini 5 01iaq7	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Mini 5 01imh05 Firmware	Before o4ekt19a

Running on/with	Platform Versions
Lenovo Ideacentre Mini 5 01imh05	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion C530 19icb Firmware	Before o4bkt22a

Running on/with	Platform Versions
Lenovo Legion C530 19icb	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion R5 28imb05 Firmware	Before o4nkt1da

Running on/with	Platform Versions
Lenovo Legion R5 28imb05	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion T5 26amr5 Firmware	Before o4mkt2da

Running on/with	Platform Versions
Lenovo Legion T5 26amr5	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion T5 26iob6 Firmware	Before o54kt22a

Running on/with	Platform Versions
Lenovo Legion T5 26iob6	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion T5 28icb05 Firmware	Before o4bkt22a

Running on/with	Platform Versions
Lenovo Legion T5 28icb05	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion T5 28imb05 Firmware	Before o4nkt1da

Running on/with	Platform Versions
Lenovo Legion T5 28imb05	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion T530 28icb Firmware	Before o4bkt22a

Running on/with	Platform Versions
Lenovo Legion T530 28icb	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion T7 34iaz7 Firmware	Before o5hkt2aa

Running on/with	Platform Versions
Lenovo Legion T7 34iaz7	All versions

Configuration Q

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Legion T7 34imz5 Firmware	Before o4lkt20a

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion T7 34imz5 Firmware	Before o5fkt15a

Running on/with	Platform Versions
Lenovo Legion T7 34imz5	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Lenovo Legion T5 26iab7 Firmware	Before o5lkt29a

Running on/with	Platform Versions
Lenovo Lenovo Legion T5 26iab7	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M600 Firmware	Before m00kt68a

Running on/with	Platform Versions
Lenovo Thinkcentre M600	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M60e Tiny Firmware	Before m3skt25a

Running on/with	Platform Versions
Lenovo Thinkcentre M60e Tiny	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M625q Firmware	Before m1wkt50a

Running on/with	Platform Versions
Lenovo Thinkcentre M625q	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70c Firmware	Before m2vkt1ea

Running on/with	Platform Versions
Lenovo Thinkcentre M70c	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70q Firmware	Before m2wkt59a

Running on/with	Platform Versions
Lenovo Thinkcentre M70q	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70q Gen 2 Firmware	Before m3jkt37a

Running on/with	Platform Versions
Lenovo Thinkcentre M70q Gen 2	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70q Gen 3 Firmware	Before m43kt1ba

Running on/with	Platform Versions
Lenovo Thinkcentre M70q Gen 3	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70s Firmware	Before m2tkt52a

Running on/with	Platform Versions
Lenovo Thinkcentre M70s	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70s Gen 3 Firmware	Before m41kt3da

Running on/with	Platform Versions
Lenovo Thinkcentre M70s Gen 3	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70t Firmware	Before m2tkt52a

Running on/with	Platform Versions
Lenovo Thinkcentre M70t	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70t Gen 3 Firmware	Before m41kt3da

Running on/with	Platform Versions
Lenovo Thinkcentre M70t Gen 3	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M720e Firmware	Before m1zkt40a

Running on/with	Platform Versions
Lenovo Thinkcentre M720e	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M720q Firmware	Before m1ukt70a

Running on/with	Platform Versions
Lenovo Thinkcentre M720q	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M720s Firmware	Before m1ukt70a

Running on/with	Platform Versions
Lenovo Thinkcentre M720s	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M720t Firmware	Before m1ukt70a

Running on/with	Platform Versions
Lenovo Thinkcentre M720t	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M725s Firmware	Before m25kt63a

Running on/with	Platform Versions
Lenovo Thinkcentre M725s	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75n Firmware	Before m33kt27a

Running on/with	Platform Versions
Lenovo Thinkcentre M75n	All versions

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75s Gen 2 Firmware	Before m46kt30a

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75s Gen 2 Firmware	Before m3bkt2fa

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75s Gen 2 Firmware	Before m3akt4ca

Running on/with	Platform Versions
Lenovo Thinkcentre M75s Gen 2	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75s 1 Firmware	Before m2ckt4fa

Running on/with	Platform Versions
Lenovo Thinkcentre M75s 1	All versions

Configuration O

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75t Gen 2 Firmware	Before m46kt30a

Configuration P

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75t Gen 2 Firmware	Before m3bkt2fa

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75t Gen 2 Firmware	Before m3akt4ca

Running on/with	Platform Versions
Lenovo Thinkcentre M75t Gen 2	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80q Firmware	Before m2wkt59a

Running on/with	Platform Versions
Lenovo Thinkcentre M80q	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80q Gen 3 Firmware	Before m4gkt23a

Running on/with	Platform Versions
Lenovo Thinkcentre M80q Gen 3	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80s Firmware	Before m2tkt52a

Running on/with	Platform Versions
Lenovo Thinkcentre M80s	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80s Gen 3 Firmware	Before m40kt3da

Running on/with	Platform Versions
Lenovo Thinkcentre M80s Gen 3	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80t Firmware	Before m2tkt52a

Running on/with	Platform Versions
Lenovo Thinkcentre M80t	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80t Gen 3 Firmware	Before m40kt3da

Running on/with	Platform Versions
Lenovo Thinkcentre M80t Gen 3	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90a Firmware	Before m2rkt56a

Running on/with	Platform Versions
Lenovo Thinkcentre M90a	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90a Gen 2 Firmware	Before m3lkt28a

Running on/with	Platform Versions
Lenovo Thinkcentre M90a Gen 2	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90a Gen 3 Firmware	Before m4ikt19a

Running on/with	Platform Versions
Lenovo Thinkcentre M90a Gen 3	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90a Pro Gen 3 Firmware	Before m4hkt19a

Running on/with	Platform Versions
Lenovo Thinkcentre M90a Pro Gen 3	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90q Gen 2 Firmware	Before m3jkt37a

Running on/with	Platform Versions
Lenovo Thinkcentre M90q Gen 2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90q Gen 3 Firmware	Before m4gkt23a

Running on/with	Platform Versions
Lenovo Thinkcentre M90q Gen 3	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90q Tiny Firmware	Before m2wkt59a

Running on/with	Platform Versions
Lenovo Thinkcentre M90q Tiny	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90s Firmware	Before m2tkt52a

Running on/with	Platform Versions
Lenovo Thinkcentre M90s	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90s Gen 3 Firmware	Before m40kt3da

Running on/with	Platform Versions
Lenovo Thinkcentre M90s Gen 3	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90t Firmware	Before m2tkt52a

Running on/with	Platform Versions
Lenovo Thinkcentre M90t	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90t Gen 3 Firmware	Before m40kt3da

Running on/with	Platform Versions
Lenovo Thinkcentre M90t Gen 3	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M920q Firmware	Before m1ukt70a

Running on/with	Platform Versions
Lenovo Thinkcentre M920q	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M920s Firmware	Before m1ukt70a

Running on/with	Platform Versions
Lenovo Thinkcentre M920s	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M920t Firmware	Before m1ukt70a

Running on/with	Platform Versions
Lenovo Thinkcentre M920t	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M920x Firmware	Before m1ukt70a

Running on/with	Platform Versions
Lenovo Thinkcentre M920x	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M920z Firmware	Before m1mkt55a

Running on/with	Platform Versions
Lenovo Thinkcentre M920z	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 30a 22 Gen 3 Firmware	Before o5nkt32a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 30a 22 Gen 3	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 30a 24 Gen 3 Firmware	Before o5nkt32a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 30a 24 Gen 3	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 30a 27 Gen 3 Firmware	Before o5nkt32a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 30a 27 Gen 3	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 50s Gen 3 Firmware	Before m49kt21a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 50s Gen 3	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 50t Gen 3 Firmware	Before m42kt42a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 50t Gen 3	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 70t Gen 3 Firmware	Before m40kt3da

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 70t Gen 3	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre T540 15ama G Firmware	Before m2ckt4fa

Running on/with	Platform Versions
Lenovo Thinkcentre T540 15ama G	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 510s 07icb Firmware	Before m22kt49a

Running on/with	Platform Versions
Lenovo Ideacentre 510s 07icb	All versions

Configuration V

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Ideacentre 510s 07ick Firmware	Before m30kt28a

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 510s 07ick Firmware	Before m1zkt40a

Running on/with	Platform Versions
Lenovo Ideacentre 510s 07ick	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 720 18apr Firmware	Before m25kt63a

Running on/with	Platform Versions
Lenovo Ideacentre 720 18apr	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V30a 22itl Firmware	Before o5akt33

Running on/with	Platform Versions
Lenovo V30a 22itl	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V30a 24itl Firmware	Before o5akt33

Running on/with	Platform Versions
Lenovo V30a 24itl	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V35s 07ada Firmware	Before m4mkt12a

Running on/with	Platform Versions
Lenovo V35s 07ada	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50s 07imb Firmware	Before m2vkt1ea

Running on/with	Platform Versions
Lenovo V50s 07imb	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50t 13imb Firmware	Before o4hkt3aa

Running on/with	Platform Versions
Lenovo V50t 13imb	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50t 13iob G2 Firmware	Before m3gkt3aa

Running on/with	Platform Versions
Lenovo V50t 13iob G2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V530s 07icb Firmware	Before m22kt49a

Running on/with	Platform Versions
Lenovo V530s 07icb	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V530s 07icr Firmware	Before m1zkt40a

Running on/with	Platform Versions
Lenovo V530s 07icr	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V55t Gen 2 13acn Firmware	Before o5jkt23a

Running on/with	Platform Versions
Lenovo V55t Gen 2 13acn	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P320 Firmware	Before s06kt63a

Running on/with	Platform Versions
Lenovo Thinkstation P320	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P330 Tiny Firmware	Before m1ukt70a

Running on/with	Platform Versions
Lenovo Thinkstation P330 Tiny	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P330 Firmware	Before m1vkt6fa

Running on/with	Platform Versions
Lenovo Thinkstation P330	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P330 Gen 2 Firmware	Before m1vkt6fa

Running on/with	Platform Versions
Lenovo Thinkstation P330 Gen 2	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P340 Tiny Firmware	Before m2wkt59a

Running on/with	Platform Versions
Lenovo Thinkstation P340 Tiny	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P340 Firmware	Before s08kt53a

Running on/with	Platform Versions
Lenovo Thinkstation P340	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P350 Tiny Firmware	Before m3jkt37a

Running on/with	Platform Versions
Lenovo Thinkstation P350 Tiny	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P350 Firmware	Before s0akt39a

Running on/with	Platform Versions
Lenovo Thinkstation P350	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P360 Tiny Firmware	Before m4gkt23a

Running on/with	Platform Versions
Lenovo Thinkstation P360 Tiny	All versions

Configuration Q

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkstation P360 Firmware	Before s0ekt40a

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P360 Firmware	Before s0ekt43a

Running on/with	Platform Versions
Lenovo Thinkstation P360	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

https://support.lenovo.com/us/en/product_security/LEN-124495

Source: psirt@lenovo.com

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-124495

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.