{ "id": "CVE-2022-48188", "sourceIdentifier": "psirt@lenovo.com", "published": "2023-06-05T22:15:11.563", "lastModified": "2024-11-21T07:32:56.600", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code." } ], "metrics": { "cvssMetricV31": [ { "source": "psirt@lenovo.com", "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 6.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, "exploitabilityScore": 0.8, "impactScore": 5.9 }, { "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, "exploitabilityScore": 1.8, "impactScore": 5.9 } ] }, "weaknesses": [ { "source": "psirt@lenovo.com", "type": "Secondary", "description": [ { "lang": "en", "value": "CWE-787" } ] }, { "source": "nvd@nist.gov", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-787" } ] } ], "configurations": [ { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:ideacentre_aio_3_21itl7_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "o5akt33", "matchCriteriaId": "CCF434C4-92FB-4285-9D70-346CEEC22535" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:ideacentre_aio_3_21itl7:-:*:*:*:*:*:*:*", "matchCriteriaId": "06FA56AE-3377-41FE-B2FA-3D7C48668FE2" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:ideacentre_aio_3-22itl6_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "o5akt33", "matchCriteriaId": "C0A88174-FD66-4A97-8C09-25D83FA3B080" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:ideacentre_aio_3-22itl6:-:*:*:*:*:*:*:*", "matchCriteriaId": "35E8DEFA-7E34-4B38-9555-505CD5EAACA1" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:ideacentre_aio_3-24itl6_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "o5akt33", "matchCriteriaId": "213EBCF5-5ACC-49C3-B80A-6F7ACC095292" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:ideacentre_aio_3-24itl6:-:*:*:*:*:*:*:*", "matchCriteriaId": "A264E0C3-8D56-443B-9EAE-E08F46748A80" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:ideacentre_aio_3-27itl6_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "o5akt33", "matchCriteriaId": "35BA2F95-6488-4D5E-A498-89FEB7996AD6" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:ideacentre_aio_3-27itl6:-:*:*:*:*:*:*:*", "matchCriteriaId": "59B1DBF8-0788-40BA-BE29-5B2EA35874B1" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m720e_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m1zkt40a", "matchCriteriaId": "2ABB82BF-1F1C-4E02-8956-43CBD91B459E" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m720e:-:*:*:*:*:*:*:*", "matchCriteriaId": "02F399A4-01A9-4D9E-9371-F260C31CB942" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m720q_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m1ukt70a", "matchCriteriaId": "AEAAD454-64DA-4ABF-8AC3-6DCCCA700366" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m720q:-:*:*:*:*:*:*:*", "matchCriteriaId": "90230B12-DF65-4D6B-90E0-65F523BA98CF" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m720s_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m1ukt70a", "matchCriteriaId": "BD01C911-C7B0-4A9C-93D3-A3F7735C161C" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m720s:-:*:*:*:*:*:*:*", "matchCriteriaId": "3C245AA0-A5AA-4375-B781-23159D4F69B3" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m720t_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m1ukt70a", "matchCriteriaId": "5DD698A4-11C9-4913-9FF1-074ED0DED491" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m720t:-:*:*:*:*:*:*:*", "matchCriteriaId": "CAC3DBF5-3CE2-48BE-82E2-F52A776E68E6" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m725s_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m25kt63a", "matchCriteriaId": "2F1438E6-791A-45E6-A5BB-4DDA151C2465" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m725s:-:*:*:*:*:*:*:*", "matchCriteriaId": "4298C6F6-191F-427B-8827-9C6580FBC657" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m75s_gen_2_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m46kt30a", "matchCriteriaId": "8A45A119-4388-44FA-840C-F51FB91480A3" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m75s_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "04B34D9E-9504-4CEF-8056-01C6BAEAB8CF" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m75s_gen_2_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m3bkt30a", "matchCriteriaId": "20437C26-886C-45DD-B010-250F0CE6F83F" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m75s_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "04B34D9E-9504-4CEF-8056-01C6BAEAB8CF" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m75t_gen_2_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m46kt30a", "matchCriteriaId": "93DFDC44-81C6-484D-8D71-520625A7AA26" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m75t_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "2102F1DF-7A45-4080-B52A-3D51028FE82A" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m75t_gen_2_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m3akt4ca", "matchCriteriaId": "B955072B-C1F4-47B6-A50E-F929EA3A3F1C" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m75t_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "2102F1DF-7A45-4080-B52A-3D51028FE82A" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m920q_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m1ukt70a", "matchCriteriaId": "DACE230A-FDC0-420E-B977-AFA4C1A8E211" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m920q:-:*:*:*:*:*:*:*", "matchCriteriaId": "18964E52-51F6-4C64-A471-A09FB2E7A4C1" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m920s_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m1ukt70a", "matchCriteriaId": "A7F29A7E-E699-454C-A8B0-142A9324BA96" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m920s:-:*:*:*:*:*:*:*", "matchCriteriaId": "86CEA502-29BC-4F04-AF51-53B8CE39D1DB" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m920t_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m1ukt70a", "matchCriteriaId": "D83D0761-E412-41FF-ACE7-BC29BB864DDB" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m920t:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA136174-6A29-4DD8-BF2F-BEC629ED216B" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m920x_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m1ukt70a", "matchCriteriaId": "D31A1B33-F4F7-4E37-BA1E-AC2D9B93A8C3" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m920x:-:*:*:*:*:*:*:*", "matchCriteriaId": "9DDEC1BD-4511-4231-9502-A65FFFA35116" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkcentre_m920z_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m1mkt55a", "matchCriteriaId": "9F9F4005-02A1-490E-A7A5-E2ABEAE37DEB" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkcentre_m920z:-:*:*:*:*:*:*:*", "matchCriteriaId": "2E07299B-26F5-438D-A522-20FAFC970E47" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:ideacentre_510s-07icb_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m22kt48a", "matchCriteriaId": "4D6036BB-4E44-4A4D-81B0-25F32A21C25B" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:ideacentre_510s-07icb:-:*:*:*:*:*:*:*", "matchCriteriaId": "501B5AB2-483A-42D6-97B6-C47413232811" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:ideacentre_510s-07icb_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m22kt49a", "matchCriteriaId": "811228D4-5CB0-4F81-8D7A-B851046C5AB7" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:ideacentre_510s-07icb:-:*:*:*:*:*:*:*", "matchCriteriaId": "501B5AB2-483A-42D6-97B6-C47413232811" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:ideacentre_510s-07ick_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m30kt28a", "matchCriteriaId": "52C05B9F-72A7-4913-9DD7-65F2373340ED" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:ideacentre_510s-07ick:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2BC5F0E-9AD4-4E73-B6A9-0A927C22DB14" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:ideacentre_510s-07ick_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m1zkt40a", "matchCriteriaId": "2C3563D2-7F31-4E73-A599-41357F60952F" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:ideacentre_510s-07ick:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2BC5F0E-9AD4-4E73-B6A9-0A927C22DB14" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:ideacentre_720-18apr_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m25kt63a", "matchCriteriaId": "35DB207A-0A44-48D2-A079-DF016C8D222E" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:ideacentre_720-18apr:-:*:*:*:*:*:*:*", "matchCriteriaId": "D468EDDA-AE71-451E-9CE2-91C4F62C66DE" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:v30a-22itl_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "o5akt33", "matchCriteriaId": "F2ABC33C-DAA2-4831-AC8C-8FCD774D303A" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:v30a-22itl:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5515B1D-5869-4BCD-912E-DA3ADCA08896" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:v30a-24itl_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "o5akt33", "matchCriteriaId": "E257CC87-E4FC-4026-8518-2BAE82BF2AA3" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:v30a-24itl:-:*:*:*:*:*:*:*", "matchCriteriaId": "F2A8C95F-1C20-4FA4-8584-F93E9877F84C" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:v530s-07icb_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m22kt49a", "matchCriteriaId": "8FD5F91D-45CB-4CE0-8E71-053936449C1B" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:v530s-07icb:-:*:*:*:*:*:*:*", "matchCriteriaId": "DC1F8C3B-CA56-49C3-9089-24857ACF65FC" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:v530s-07icr_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m1zkt40a", "matchCriteriaId": "75A41BA8-D940-4A9B-801A-80FA1C5C84A0" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:v530s-07icr:-:*:*:*:*:*:*:*", "matchCriteriaId": "2846C59E-89B6-478E-8406-5BC09326E3B8" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkstation_p330_tiny_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "m1ukt70a", "matchCriteriaId": "02FCA682-FD95-4641-8FC7-2B65A3740DB6" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkstation_p330_tiny:-:*:*:*:*:*:*:*", "matchCriteriaId": "4FCC5B38-D665-43E6-A4FB-0A9D464E1406" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkstation_p360_ultra_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "s0fkt27a", "matchCriteriaId": "8DC490D6-72FF-4328-97AA-1C78F951AFE0" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkstation_p360_ultra:-:*:*:*:*:*:*:*", "matchCriteriaId": "2C496049-4FB1-4F42-8F28-FEE66B3B3D56" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkstation_p520_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "s03kt58a", "matchCriteriaId": "0ABAD5C6-D995-482C-B9BE-9584DD358958" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkstation_p520:-:*:*:*:*:*:*:*", "matchCriteriaId": "6840BC60-44C3-4EA8-96D3-E93796C15310" } ] } ] }, { "operator": "AND", "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:lenovo:thinkstation_p520c_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "s03kt58a", "matchCriteriaId": "5448FEB7-0357-4CA7-8D4F-81028F3F6938" } ] }, { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": false, "criteria": "cpe:2.3:h:lenovo:thinkstation_p520c:-:*:*:*:*:*:*:*", "matchCriteriaId": "0431D83D-1AC8-4EDE-8568-8695F8E68C35" } ] } ] } ], "references": [ { "url": "https://support.lenovo.com/us/en/product_security/LEN-124495", "source": "psirt@lenovo.com", "tags": [ "Vendor Advisory" ] }, { "url": "https://support.lenovo.com/us/en/product_security/LEN-124495", "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ] } ] }