CVE-2022-48181

published 2023-06-05

CVE-2022-48181: An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their…

high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

Affected

123 ranges · showing 25

Vendor	Product	Version range	Fixed in
lenovo	ideacentre_3-07ada05_firmware	< o4fkt35a	o4fkt35a
lenovo	ideacentre_3-07ada05_firmware	< m4mkt12a	m4mkt12a
lenovo	ideacentre_3-07imb05_firmware	< m2vkt1ea	m2vkt1ea
lenovo	ideacentre_3_07ach7_firmware	< m4mkt12a	m4mkt12a
lenovo	ideacentre_3_07iab7_firmware	< m49kt21a	m49kt21a
lenovo	ideacentre_5-14acn6_firmware	< o5ekt24a	o5ekt24a
lenovo	ideacentre_5-14are05_firmware	< o4zkt2aa	o4zkt2aa
lenovo	ideacentre_5-14imb05_firmware	< o4hkt3aa	o4hkt3aa
lenovo	ideacentre_5-14iob6_firmware	< m3gkt3aa	m3gkt3aa
lenovo	ideacentre_510s-07icb_firmware	< m22kt49a	m22kt49a
lenovo	ideacentre_510s-07ick_firmware	< m30kt28a	m30kt28a
lenovo	ideacentre_510s-07ick_firmware	< m1zkt40a	m1zkt40a
lenovo	ideacentre_5_14iab7_firmware	< m42kt42a	m42kt42a
lenovo	ideacentre_720-18apr_firmware	< m25kt63a	m25kt63a
lenovo	ideacentre_aio_3-22imb05_firmware	< o5nkt32a	o5nkt32a
lenovo	ideacentre_aio_3-22itl6_firmware	< o5akt33	o5akt33
lenovo	ideacentre_aio_3-24alc6_firmware	< o5bkt25a	o5bkt25a
lenovo	ideacentre_aio_3-24imb05_firmware	< o5nkt32a	o5nkt32a
lenovo	ideacentre_aio_3-24itl6_firmware	< o5akt33	o5akt33
lenovo	ideacentre_aio_3-27alc6_firmware	< o5bkt25a	o5bkt25a
lenovo	ideacentre_aio_3-27imb05_firmware	< o5nkt32a	o5nkt32a
lenovo	ideacentre_aio_3-27itl6_firmware	< o5akt33	o5akt33
lenovo	ideacentre_aio_3_21itl7_firmware	< o5akt33	o5akt33
lenovo	ideacentre_aio_3_22iap7_firmware	< o5nkt32a	o5nkt32a
lenovo	ideacentre_aio_3_24iap7_firmware	< o5nkt32a	o5nkt32a

CWE-787