medium6.7
CVE-2022-48181
An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their pri…
Impact
An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Ideacentre C5-14imb05 Firmware | before o4hkt3aa |
| Lenovo | Ideacentre 3 07ach7 Firmware | before m4mkt12a |
| Lenovo | Ideacentre 3 07iab7 Firmware | before m49kt21a |
| Lenovo | Ideacentre 3-07ada05 Firmware | before o4fkt35a before m4mkt12a |
| Lenovo | Ideacentre 3-07imb05 Firmware | before m2vkt1ea |
| Lenovo | Ideacentre 5 14iab7 Firmware | before m42kt42a |
| Lenovo | Ideacentre 5-14acn6 Firmware | before o5ekt24a |
| Lenovo | Ideacentre 5-14are05 Firmware | before o4zkt2aa |
| Lenovo | Ideacentre 5-14imb05 Firmware | before o4hkt3aa |
| Lenovo | Ideacentre 5-14iob6 Firmware | before m3gkt3aa |
| Lenovo | Ideacentre Aio 3 21itl7 Firmware | before o5akt33 |
| Lenovo | Ideacentre Aio 3 22iap7 Firmware | before o5nkt32a |