medium6.7
CVE-2022-48188
A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to el…
Impact
A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Ideacentre Aio 3 21itl7 Firmware | before o5akt33 |
| Lenovo | Ideacentre Aio 3-22itl6 Firmware | before o5akt33 |
| Lenovo | Ideacentre Aio 3-24itl6 Firmware | before o5akt33 |
| Lenovo | Ideacentre Aio 3-27itl6 Firmware | before o5akt33 |
| Lenovo | Thinkcentre M720e Firmware | before m1zkt40a |
| Lenovo | Thinkcentre M720q Firmware | before m1ukt70a |
| Lenovo | Thinkcentre M720s Firmware | before m1ukt70a |
| Lenovo | Thinkcentre M720t Firmware | before m1ukt70a |
| Lenovo | Thinkcentre M725s Firmware | before m25kt63a |
| Lenovo | Thinkcentre M75s Gen 2 Firmware | before m46kt30a before m3bkt30a |
| Lenovo | Thinkcentre M75t Gen 2 Firmware | before m46kt30a before m3akt4ca |
| Lenovo | Thinkcentre M920q Firmware | before m1ukt70a |