medium6.7
CVE-2022-1892
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Impact
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | 100e 2nd Gen Firmware | before frcn23ww |
| Lenovo | 100w Gen 3 Firmware | before gacn38ww |
| Lenovo | 13w Yoga Firmware | before jacn31ww |
| Lenovo | 14w Gen 2 Firmware | before h0cn21ww |
| Lenovo | 300e 2nd Gen Firmware | before frcn23ww |
| Lenovo | 300w Gen 3 Firmware | before gacn38ww |
| Lenovo | 500w Gen 3 Firmware | before g6cn40ww |
| Lenovo | 730s-13iml Firmware | before brcn20ww |
| Lenovo | Flex 3-11ada05 Firmware | before fpcn26ww |
| Lenovo | Flex 5-14alc05 Firmware | before gjcn27ww |
| Lenovo | Flex 5-14are05 Firmware | before eecn39ww |
| Lenovo | Flex 5-14iil05 Firmware | before eecn40ww |