Vulnerability-Lookup

VAR-202306-0277

Vulnerability from variot - Updated: 2024-08-14 13:20

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202306-0277",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "thinkcentre m70s gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m41kt3da"
      },
      {
        "model": "thinkcentre m75s gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3akt4ca"
      },
      {
        "model": "thinkcentre m70t gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m41kt3da"
      },
      {
        "model": "thinkcentre m70s",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2tkt52a"
      },
      {
        "model": "thinkcentre m90q gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3jkt37a"
      },
      {
        "model": "thinkcentre neo 50s gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m49kt21a"
      },
      {
        "model": "thinkstation p350",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "s0akt39a"
      },
      {
        "model": "ideacentre aio 5 27iah7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5rkt39a"
      },
      {
        "model": "v530s-07icb",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m22kt49a"
      },
      {
        "model": "thinkcentre neo 30a 22 gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "legion r5-28imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4nkt1da"
      },
      {
        "model": "thinkcentre m75t gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m46kt30a"
      },
      {
        "model": "legion t5-26iob6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o54kt22a"
      },
      {
        "model": "thinkstation p350 tiny",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3jkt37a"
      },
      {
        "model": "thinkcentre m90t gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m40kt3da"
      },
      {
        "model": "thinkcentre m600",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m00kt68a"
      },
      {
        "model": "v35s-07ada",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4mkt12a"
      },
      {
        "model": "v30a-24itl",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5akt33"
      },
      {
        "model": "thinkcentre m60e tiny",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3skt25a"
      },
      {
        "model": "thinkcentre neo 30a 27 gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "thinkcentre m90a",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2rkt56a"
      },
      {
        "model": "legion c530-19icb",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4bkt22a"
      },
      {
        "model": "thinkcentre m90s",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2tkt52a"
      },
      {
        "model": "ideacentre gaming 5 17acn7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5ekt24a"
      },
      {
        "model": "ideacentre 3 07ach7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4mkt12a"
      },
      {
        "model": "thinkcentre m920t",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "thinkstation p320",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "s06kt63a"
      },
      {
        "model": "thinkstation p340 tiny",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2wkt59a"
      },
      {
        "model": "thinkcentre m70q gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m43kt1ba"
      },
      {
        "model": "legion t7-34imz5",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5fkt15a"
      },
      {
        "model": "thinkstation p330 gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1vkt6fa"
      },
      {
        "model": "thinkcentre m90t",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2tkt52a"
      },
      {
        "model": "ideacentre gaming 5-14iob6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3gkt3aa"
      },
      {
        "model": "thinkcentre m920x",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "ideacentre aio 3-24imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "ideacentre 5 14iab7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m42kt42a"
      },
      {
        "model": "ideacentre aio 3 27iap7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "thinkcentre m90a pro gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4hkt19a"
      },
      {
        "model": "ideacentre 5-14acn6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5ekt24a"
      },
      {
        "model": "ideacentre g5-14amr05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4zkt2aa"
      },
      {
        "model": "thinkcentre m920z",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1mkt55a"
      },
      {
        "model": "thinkcentre m920s",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "ideacentre aio 5 24iah7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5rkt39a"
      },
      {
        "model": "legion t7-34imz5",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4lkt20a"
      },
      {
        "model": "thinkcentre m720q",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "thinkcentre m90q tiny",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2wkt59a"
      },
      {
        "model": "ideacentre aio 3-24itl6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5akt33"
      },
      {
        "model": "ideacentre g5-14imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4hkt3aa"
      },
      {
        "model": "ideacentre aio 3 21itl7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5akt33"
      },
      {
        "model": "legion t7-34iaz7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5hkt2aa"
      },
      {
        "model": "ideacentre 3 07iab7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m49kt21a"
      },
      {
        "model": "thinkstation p330 tiny",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "thinkcentre m625q",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1wkt50a"
      },
      {
        "model": "ideacentre aio 3-24alc6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5bkt25a"
      },
      {
        "model": "ideacentre mini 5-01imh05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4ekt19a"
      },
      {
        "model": "thinkstation p360",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "s0ekt40a"
      },
      {
        "model": "ideacentre aio 3 22iap7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "thinkcentre m75s-1",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2ckt4fa"
      },
      {
        "model": "ideacentre gaming 5-14acn6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5ekt24a"
      },
      {
        "model": "thinkcentre m720s",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "thinkcentre neo 30a 24 gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "thinkcentre m90a gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3lkt28a"
      },
      {
        "model": "v530s-07icr",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1zkt40a"
      },
      {
        "model": "thinkcentre m80q gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4gkt23a"
      },
      {
        "model": "legion t530-28icb",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4bkt22a"
      },
      {
        "model": "thinkcentre m720t",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "thinkcentre m90q gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4gkt23a"
      },
      {
        "model": "thinkcentre m80s",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2tkt52a"
      },
      {
        "model": "thinkcentre m70c",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2vkt1ea"
      },
      {
        "model": "ideacentre 510s-07ick",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1zkt40a"
      },
      {
        "model": "ideacentre 3-07ada05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4mkt12a"
      },
      {
        "model": "ideacentre aio 3-22imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "v50t-13imb",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4hkt3aa"
      },
      {
        "model": "thinkcentre neo 50t gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m42kt42a"
      },
      {
        "model": "ideacentre 510s-07icb",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m22kt49a"
      },
      {
        "model": "thinkcentre m80t gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m40kt3da"
      },
      {
        "model": "ideacentre creator 5-14iob6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3gkt3aa"
      },
      {
        "model": "thinkcentre m725s",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m25kt63a"
      },
      {
        "model": "ideacentre aio 3 24iap7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "ideacentre 3-07ada05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4fkt35a"
      },
      {
        "model": "legion t5-28icb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4bkt22a"
      },
      {
        "model": "thinkcentre m70q",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2wkt59a"
      },
      {
        "model": "thinkcentre m75s gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m46kt30a"
      },
      {
        "model": "thinkcentre m920q",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1ukt70a"
      },
      {
        "model": "ideacentre aio 3-27itl6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5akt33"
      },
      {
        "model": "v50t-13iob g2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3gkt3aa"
      },
      {
        "model": "ideacentre 5-14iob6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3gkt3aa"
      },
      {
        "model": "thinkstation p360 tiny",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4gkt23a"
      },
      {
        "model": "ideacentre aio 3-27imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5nkt32a"
      },
      {
        "model": "legion t5-28imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4nkt1da"
      },
      {
        "model": "thinkstation p340",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "s08kt53a"
      },
      {
        "model": "thinkcentre m80t",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2tkt52a"
      },
      {
        "model": "legion t5 26iab7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5lkt29a"
      },
      {
        "model": "thinkcentre m75n",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m33kt27a"
      },
      {
        "model": "v30a-22itl",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5akt33"
      },
      {
        "model": "thinkstation p360",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "s0ekt43a"
      },
      {
        "model": "ideacentre mini 5 01iaq7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o53kt0ea"
      },
      {
        "model": "ideacentre c5-14imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4hkt3aa"
      },
      {
        "model": "thinkcentre m80q",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2wkt59a"
      },
      {
        "model": "ideacentre 3-07imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2vkt1ea"
      },
      {
        "model": "thinkcentre m75t gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3bkt2fa"
      },
      {
        "model": "ideacentre 5-14are05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4zkt2aa"
      },
      {
        "model": "v55t gen 2 13acn",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5jkt23a"
      },
      {
        "model": "ideacentre 510s-07ick",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m30kt28a"
      },
      {
        "model": "thinkcentre m70q gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3jkt37a"
      },
      {
        "model": "thinkcentre m75t gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3akt4ca"
      },
      {
        "model": "ideacentre 720-18apr",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m25kt63a"
      },
      {
        "model": "thinkstation p330",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1vkt6fa"
      },
      {
        "model": "legion t5-26amr5",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4mkt2da"
      },
      {
        "model": "ideacentre aio 3-27alc6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5bkt25a"
      },
      {
        "model": "thinkcentre t540-15ama g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2ckt4fa"
      },
      {
        "model": "thinkcentre m80s gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m40kt3da"
      },
      {
        "model": "ideacentre 5-14imb05",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o4hkt3aa"
      },
      {
        "model": "thinkcentre m90s gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m40kt3da"
      },
      {
        "model": "thinkcentre m720e",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m1zkt40a"
      },
      {
        "model": "ideacentre aio 3-22itl6",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "o5akt33"
      },
      {
        "model": "ideacentre gaming 5 17iab7",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m42kt42a"
      },
      {
        "model": "thinkcentre m70t",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2tkt52a"
      },
      {
        "model": "thinkcentre m90a gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m4ikt19a"
      },
      {
        "model": "v50s-07imb",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m2vkt1ea"
      },
      {
        "model": "thinkcentre neo 70t gen 3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m40kt3da"
      },
      {
        "model": "thinkcentre m75s gen 2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "m3bkt2fa"
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "cve": "CVE-2022-48181",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 1.8,
            "id": "CVE-2022-48181",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "author": "psirt@lenovo.com",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 0.8,
            "id": "CVE-2022-48181",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2022-48181",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "psirt@lenovo.com",
            "id": "CVE-2022-48181",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202306-265",
            "trust": 0.6,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-48181"
      }
    ],
    "trust": 0.99
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "LENOVO",
        "id": "LEN-124495",
        "trust": 1.7
      },
      {
        "db": "NVD",
        "id": "CVE-2022-48181",
        "trust": 1.7
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2022-48181",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2022-48181"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "id": "VAR-202306-0277",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.38333333
  },
  "last_update_date": "2024-08-14T13:20:14.250000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Lenovo ThinkPad Buffer error vulnerability fix",
        "trust": 0.6,
        "url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=241549"
      }
    ],
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-787",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.7,
        "url": "https://support.lenovo.com/us/en/product_security/len-124495"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2022-48181/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2022-48181"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULMON",
        "id": "CVE-2022-48181"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      },
      {
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-06-05T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-48181"
      },
      {
        "date": "2023-06-05T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      },
      {
        "date": "2023-06-05T22:15:11.383000",
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-06-06T00:00:00",
        "db": "VULMON",
        "id": "CVE-2022-48181"
      },
      {
        "date": "2023-06-14T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      },
      {
        "date": "2023-06-13T19:34:14.697000",
        "db": "NVD",
        "id": "CVE-2022-48181"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "local",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Lenovo ThinkPad Buffer error vulnerability",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      }
    ],
    "trust": 0.6
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "buffer error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202306-265"
      }
    ],
    "trust": 0.6
  }
}

CVE-2022-48181 (GCVE-0-2022-48181)

Vulnerability from cvelistv5 – Published: 2023-06-05 21:01 – Updated: 2025-01-08 15:55

Summary

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-08 15:55 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

lenovo CNA under the mitre root

CNA scorecard B 84/100 over 43 records in the last 180 days details

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…

Impacted products

1 product

Vendor	Product	Version
Lenovo	ThinkStation BIOS	Affected: various

Credits

Lenovo thanks River Li and Fangtao Cao for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:02:36.753Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-124495"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-48181",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-08T15:55:49.844419Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-08T15:55:59.489Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ThinkStation BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Lenovo thanks River Li and Fangtao Cao for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code."
            }
          ],
          "value": "An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-05T21:01:48.880Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-124495"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update system firmware to the version (or newer) indicated for your model in the related Lenovo product security advisory:\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://support.lenovo.com/us/en/product_security/LEN-124495\"\u003ehttps://support.lenovo.com/us/en/product_security/LEN-124495\u003c/a\u003e"
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the related Lenovo product security advisory:\u00a0 https://support.lenovo.com/us/en/product_security/LEN-124495 https://support.lenovo.com/us/en/product_security/LEN-124495 "
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2022-48181",
    "datePublished": "2023-06-05T21:01:48.880Z",
    "dateReserved": "2022-12-29T17:29:25.495Z",
    "dateUpdated": "2025-01-08T15:55:59.489Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted