variot - var-202306-0277

var-202306-0277

Vulnerability from variot

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202306-0277",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "thinkcentre m70s gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m41kt3da"
      },
      {
        "model": "thinkcentre m75s gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3akt4ca"
      },
      {
        "model": "thinkcentre m70t gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m41kt3da"
      },
      {
        "model": "thinkcentre m70s",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2tkt52a"
      },
      {
        "model": "thinkcentre m90q gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3jkt37a"
      },
      {
        "model": "thinkcentre neo 50s gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m49kt21a"
      },
      {
        "model": "thinkstation p350",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "s0akt39a"
      },
      {
        "model": "ideacentre aio 5 27iah7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5rkt39a"
      },
      {
        "model": "v530s-07icb",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m22kt49a"
      },
      {
        "model": "thinkcentre neo 30a 22 gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "legion r5-28imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4nkt1da"
      },
      {
        "model": "thinkcentre m75t gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m46kt30a"
      },
      {
        "model": "legion t5-26iob6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o54kt22a"
      },
      {
        "model": "thinkstation p350 tiny",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3jkt37a"
      },
      {
        "model": "thinkcentre m90t gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m40kt3da"
      },
      {
        "model": "thinkcentre m600",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m00kt68a"
      },
      {
        "model": "v35s-07ada",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4mkt12a"
      },
      {
        "model": "v30a-24itl",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5akt33"
      },
      {
        "model": "thinkcentre m60e tiny",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3skt25a"
      },
      {
        "model": "thinkcentre neo 30a 27 gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "thinkcentre m90a",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2rkt56a"
      },
      {
        "model": "legion c530-19icb",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4bkt22a"
      },
      {
        "model": "thinkcentre m90s",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2tkt52a"
      },
      {
        "model": "ideacentre gaming 5 17acn7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5ekt24a"
      },
      {
        "model": "ideacentre 3 07ach7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4mkt12a"
      },
      {
        "model": "thinkcentre m920t",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "thinkstation p320",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "s06kt63a"
      },
      {
        "model": "thinkstation p340 tiny",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2wkt59a"
      },
      {
        "model": "thinkcentre m70q gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m43kt1ba"
      },
      {
        "model": "legion t7-34imz5",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5fkt15a"
      },
      {
        "model": "thinkstation p330 gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1vkt6fa"
      },
      {
        "model": "thinkcentre m90t",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2tkt52a"
      },
      {
        "model": "ideacentre gaming 5-14iob6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3gkt3aa"
      },
      {
        "model": "thinkcentre m920x",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "ideacentre aio 3-24imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "ideacentre 5 14iab7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m42kt42a"
      },
      {
        "model": "ideacentre aio 3 27iap7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "thinkcentre m90a pro gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4hkt19a"
      },
      {
        "model": "ideacentre 5-14acn6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5ekt24a"
      },
      {
        "model": "ideacentre g5-14amr05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4zkt2aa"
      },
      {
        "model": "thinkcentre m920z",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1mkt55a"
      },
      {
        "model": "thinkcentre m920s",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "ideacentre aio 5 24iah7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5rkt39a"
      },
      {
        "model": "legion t7-34imz5",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4lkt20a"
      },
      {
        "model": "thinkcentre m720q",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "thinkcentre m90q tiny",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2wkt59a"
      },
      {
        "model": "ideacentre aio 3-24itl6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5akt33"
      },
      {
        "model": "ideacentre g5-14imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4hkt3aa"
      },
      {
        "model": "ideacentre aio 3 21itl7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5akt33"
      },
      {
        "model": "legion t7-34iaz7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5hkt2aa"
      },
      {
        "model": "ideacentre 3 07iab7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m49kt21a"
      },
      {
        "model": "thinkstation p330 tiny",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "thinkcentre m625q",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1wkt50a"
      },
      {
        "model": "ideacentre aio 3-24alc6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5bkt25a"
      },
      {
        "model": "ideacentre mini 5-01imh05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4ekt19a"
      },
      {
        "model": "thinkstation p360",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "s0ekt40a"
      },
      {
        "model": "ideacentre aio 3 22iap7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "thinkcentre m75s-1",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2ckt4fa"
      },
      {
        "model": "ideacentre gaming 5-14acn6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5ekt24a"
      },
      {
        "model": "thinkcentre m720s",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "thinkcentre neo 30a 24 gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "thinkcentre m90a gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3lkt28a"
      },
      {
        "model": "v530s-07icr",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1zkt40a"
      },
      {
        "model": "thinkcentre m80q gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4gkt23a"
      },
      {
        "model": "legion t530-28icb",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4bkt22a"
      },
      {
        "model": "thinkcentre m720t",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "thinkcentre m90q gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4gkt23a"
      },
      {
        "model": "thinkcentre m80s",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2tkt52a"
      },
      {
        "model": "thinkcentre m70c",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2vkt1ea"
      },
      {
        "model": "ideacentre 510s-07ick",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1zkt40a"
      },
      {
        "model": "ideacentre 3-07ada05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4mkt12a"
      },
      {
        "model": "ideacentre aio 3-22imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "v50t-13imb",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4hkt3aa"
      },
      {
        "model": "thinkcentre neo 50t gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m42kt42a"
      },
      {
        "model": "ideacentre 510s-07icb",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m22kt49a"
      },
      {
        "model": "thinkcentre m80t gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m40kt3da"
      },
      {
        "model": "ideacentre creator 5-14iob6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3gkt3aa"
      },
      {
        "model": "thinkcentre m725s",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m25kt63a"
      },
      {
        "model": "ideacentre aio 3 24iap7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "ideacentre 3-07ada05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4fkt35a"
      },
      {
        "model": "legion t5-28icb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4bkt22a"
      },
      {
        "model": "thinkcentre m70q",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2wkt59a"
      },
      {
        "model": "thinkcentre m75s gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m46kt30a"
      },
      {
        "model": "thinkcentre m920q",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "ideacentre aio 3-27itl6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5akt33"
      },
      {
        "model": "v50t-13iob g2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3gkt3aa"
      },
      {
        "model": "ideacentre 5-14iob6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3gkt3aa"
      },
      {
        "model": "thinkstation p360 tiny",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4gkt23a"
      },
      {
        "model": "ideacentre aio 3-27imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "legion t5-28imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4nkt1da"
      },
      {
        "model": "thinkstation p340",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "s08kt53a"
      },
      {
        "model": "thinkcentre m80t",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2tkt52a"
      },
      {
        "model": "legion t5 26iab7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5lkt29a"
      },
      {
        "model": "thinkcentre m75n",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m33kt27a"
      },
      {
        "model": "v30a-22itl",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5akt33"
      },
      {
        "model": "thinkstation p360",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "s0ekt43a"
      },
      {
        "model": "ideacentre mini 5 01iaq7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o53kt0ea"
      },
      {
        "model": "ideacentre c5-14imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4hkt3aa"
      },
      {
        "model": "thinkcentre m80q",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2wkt59a"
      },
      {
        "model": "ideacentre 3-07imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2vkt1ea"
      },
      {
        "model": "thinkcentre m75t gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3bkt2fa"
      },
      {
        "model": "ideacentre 5-14are05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4zkt2aa"
      },
      {
        "model": "v55t gen 2 13acn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5jkt23a"
      },
      {
        "model": "ideacentre 510s-07ick",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m30kt28a"
      },
      {
        "model": "thinkcentre m70q gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3jkt37a"
      },
      {
        "model": "thinkcentre m75t gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3akt4ca"
      },
      {
        "model": "ideacentre 720-18apr",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m25kt63a"
      },
      {
        "model": "thinkstation p330",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1vkt6fa"
      },
      {
        "model": "legion t5-26amr5",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4mkt2da"
      },
      {
        "model": "ideacentre aio 3-27alc6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5bkt25a"
      },
      {
        "model": "thinkcentre t540-15ama g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2ckt4fa"
      },
      {
        "model": "thinkcentre m80s gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m40kt3da"
      },
      {
        "model": "ideacentre 5-14imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4hkt3aa"
      },
      {
        "model": "thinkcentre m90s gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m40kt3da"
      },
      {
        "model": "thinkcentre m720e",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1zkt40a"
      },
      {
        "model": "ideacentre aio 3-22itl6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5akt33"
      },
      {
        "model": "ideacentre gaming 5 17iab7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m42kt42a"
      },
      {
        "model": "thinkcentre m70t",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2tkt52a"
      },
      {
        "model": "thinkcentre m90a gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4ikt19a"
      },
      {
        "model": "v50s-07imb",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2vkt1ea"
      },
      {
        "model": "thinkcentre neo 70t gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m40kt3da"
      },
      {
        "model": "thinkcentre m75s gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3bkt2fa"
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "cve": "CVE-2022-48181",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 1.8,
            "id": "CVE-2022-48181",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "author": "psirt@lenovo.com",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 0.8,
            "id": "CVE-2022-48181",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2022-48181",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "psirt@lenovo.com",
            "id": "CVE-2022-48181",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202306-265",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-48181"
      }
    ],
    "trust": 0.99
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "LENOVO",
        "id": "LEN-124495",
        "trust": 1.7
      },
      {
        "db": "NVD",
        "id": "CVE-2022-48181",
        "trust": 1.7
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-48181",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2022-48181"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "id": "VAR-202306-0277",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.38333333
  },
  "last_update_date": "2024-08-14T13:20:14.250000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Lenovo ThinkPad Buffer error vulnerability fix",
        "trust": 0.6,
        "url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=241549"
      }
    ],
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-787",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.7,
        "url": "https://support.lenovo.com/us/en/product_security/len-124495"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-48181/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2022-48181"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULMON",
        "id": "CVE-2022-48181"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-06-05T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-48181"
      },
      {
        "date": "2023-06-05T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      },
      {
        "date": "2023-06-05T22:15:11.383000",
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-06-06T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-48181"
      },
      {
        "date": "2023-06-14T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      },
      {
        "date": "2023-06-13T19:34:14.697000",
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "local",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Lenovo ThinkPad Buffer error vulnerability",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      }
    ],
    "trust": 0.6
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "buffer error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      }
    ],
    "trust": 0.6
  }
}

CVE-2022-48181 (GCVE-0-2022-48181)

Vulnerability from cvelistv5

Published

2023-06-05 21:01

Modified

2025-01-08 15:55

Severity ?

6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-787 - Out-of-bounds Write

Summary

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

References

▼	URL	Tags
	https://support.lenovo.com/us/en/product_security/LEN-124495

Impacted products

	Vendor	Product	Version
	Lenovo	ThinkStation BIOS	Version: various

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:02:36.753Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-124495"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48181",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-08T15:55:49.844419Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-08T15:55:59.489Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ThinkStation BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Lenovo thanks River Li and Fangtao Cao for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code."
            }
          ],
          "value": "An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-05T21:01:48.880Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-124495"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update system firmware to the version (or newer) indicated for your model in the related Lenovo product security advisory:\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://support.lenovo.com/us/en/product_security/LEN-124495\"\u003ehttps://support.lenovo.com/us/en/product_security/LEN-124495\u003c/a\u003e"
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the related Lenovo product security advisory:\u00a0 https://support.lenovo.com/us/en/product_security/LEN-124495 https://support.lenovo.com/us/en/product_security/LEN-124495 "
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2022-48181",
    "datePublished": "2023-06-05T21:01:48.880Z",
    "dateReserved": "2022-12-29T17:29:25.495Z",
    "dateUpdated": "2025-01-08T15:55:59.489Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted