CVE-2022-1892
Medium
Description
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
SeverityMedium
CVSS6.7
Exploit probability—
ProductLenovo 100e 2nd Gen Firmware
PublishedJan 26, 2023
First seenJan 26, 2023
Weakness typeCWE-122CWE-122
How to fix
Update
- lenovo 100e_2nd_gen_firmwarefrcn23ww or later
- lenovo 100w_gen_3_firmwaregacn38ww or later
- lenovo 13w_yoga_firmwarejacn31ww or later
- lenovo 14w_gen_2_firmwareh0cn21ww or later
- lenovo 300e_2nd_gen_firmwarefrcn23ww or later
- lenovo 300w_gen_3_firmwaregacn38ww or later
- lenovo 500w_gen_3_firmwareg6cn40ww or later
- lenovo 730s-13iml_firmwarebrcn20ww or later
- lenovo flex_3-11ada05_firmwarefpcn26ww or later
- lenovo flex_5-14alc05_firmwaregjcn27ww or later
- lenovo flex_5-14are05_firmwareeecn39ww or later
- lenovo flex_5-14iil05_firmwareeecn40ww or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo 100e_2nd_gen_firmware | v < frcn23ww | frcn23ww |
| lenovo 100w_gen_3_firmware | v < gacn38ww | gacn38ww |
| lenovo 13w_yoga_firmware | v < jacn31ww | jacn31ww |
| lenovo 14w_gen_2_firmware | v < h0cn21ww | h0cn21ww |
| lenovo 300e_2nd_gen_firmware | v < frcn23ww | frcn23ww |
| lenovo 300w_gen_3_firmware | v < gacn38ww | gacn38ww |
| lenovo 500w_gen_3_firmware | v < g6cn40ww | g6cn40ww |
| lenovo 730s-13iml_firmware | v < brcn20ww | brcn20ww |
| lenovo flex_3-11ada05_firmware | v < fpcn26ww | fpcn26ww |
| lenovo flex_5-14alc05_firmware | v < gjcn27ww | gjcn27ww |
| lenovo flex_5-14are05_firmware | v < eecn39ww | eecn39ww |
| lenovo flex_5-14iil05_firmware | v < eecn40ww | eecn40ww |
| lenovo flex_5-14itl05_firmware | v < fxcn38ww | fxcn38ww |
| lenovo flex_5-15alc05_firmware | v < gjcn27ww | gjcn27ww |
| lenovo flex_5-15iil05_firmware | v < eccn40ww | eccn40ww |
| lenovo flex_5-15itl05_firmware | v < fxcn38ww | fxcn38ww |
| lenovo ideapad_1-11ada05_firmware | v < fqcn26ww | fqcn26ww |
| lenovo ideapad_1-11igl05_firmware | v < dwcn24ww | dwcn24ww |
| lenovo ideapad_1-14ada05_firmware | v < fqcn26ww | fqcn26ww |
| lenovo ideapad_1-14igl05_firmware | v < dwcn24ww | dwcn24ww |
| lenovo ideapad_3-15ada05_firmware | v < e8cn36ww | e8cn36ww |
| lenovo ideapad_3-14ada05_firmware | v < e8cn36ww | e8cn36ww |
| lenovo ideapad_3-14ada6_firmware | v < hbcn24ww | hbcn24ww |
| lenovo ideapad_3-14alc6_firmware | v < glcn48ww | glcn48ww |
| lenovo ideapad_3-15ada6_firmware | v < hbcn24ww | hbcn24ww |
| lenovo ideapad_3-15alc6_firmware | v < glcn48ww | glcn48ww |
| lenovo ideapad_3-17alc6_firmware | v < e8cn36ww | e8cn36ww |
| lenovo ideapad_3-17ada05_firmware | v < hbcn24ww | hbcn24ww |
| lenovo ideapad_3-17ada6_firmware | v < glcn48ww | glcn48ww |
| lenovo ideapad_5_15aba7_firmware | v < kacn14ww | kacn14ww |
| lenovo ideapad_flex_5_14alc7_firmware | v < jccn29ww | jccn29ww |
| lenovo ideapad_flex_5_16alc7_firmware | v < jccn29ww | jccn29ww |
| lenovo legion_s7-15imh5_firmware | v < hacn37ww | hacn37ww |
| lenovo legion_s7-15ach6_firmware | v < g1cn27ww | g1cn27ww |
| lenovo legion_s7-15arh5_firmware | v < fdcn40ww | fdcn40ww |
| lenovo s145-14api_firmware | v < bucn33ww | bucn33ww |
| lenovo s145-14ast_firmware | v < aycn28ww | aycn28ww |
| lenovo s145-15api_firmware | v < bucn33ww | bucn33ww |
| lenovo s145-15ast_firmware | v < aycn28ww | aycn28ww |
| lenovo s540-13api_firmware | v < cxcn36ww | cxcn36ww |
| lenovo ideapad_s940-14iil_firmware | v < bqcn34ww | bqcn34ww |
| lenovo yoga_s940-14iil_firmware | v < bqcn34ww | bqcn34ww |
| lenovo ideapad_slim_1-14ast-05_firmware | v < cwcn25ww | cwcn25ww |
| lenovo ideapad_slim_1-11ast-05_firmware | v < cwcn25ww | cwcn25ww |
| lenovo thinkbook_13s_g3_acn_firmware | v < gmcn29ww | gmcn29ww |
| lenovo thinkbook_13s_g2_are_firmware | v < fvcn24ww | fvcn24ww |
| lenovo thinkbook_13s_g2_itl_firmware | v < f9cn50ww | f9cn50ww |
| lenovo thinkbook_13s-iml_firmware | v < cqcn37ww | cqcn37ww |
| lenovo thinkbook_14-iil_firmware | v < djcn28ww | djcn28ww |
| lenovo thinkbook_14-iml_firmware | v < cjcn38ww | cjcn38ww |
| lenovo thinkbook_14p_g2_ach_firmware | v < gwcn41ww | gwcn41ww |
| lenovo thinkbook_14s_g2_itl_firmware | v < f9cn50ww | f9cn50ww |
| lenovo thinkbook_14s-iml_firmware | v < cqcn37ww | cqcn37ww |
| lenovo thinkbook_15-iil_firmware | v < djcn28ww | djcn28ww |
| lenovo thinkbook_15-iml_firmware | v < cjcn38ww | cjcn38ww |
| lenovo thinkbook_16p_g2_ach_firmware | v < gxcn42ww | gxcn42ww |
| lenovo v130-15ikb_firmware | v < 8vcn31ww | 8vcn31ww |
| lenovo v14_g2-alc_firmware | v < glcn48ww | glcn48ww |
| lenovo v14-ada_firmware | v < e8cn36ww | e8cn36ww |
| lenovo v15_g2-alc_firmware | v < glcn48ww | glcn48ww |
| lenovo v15-ada_firmware | v < e8cn36ww | e8cn36ww |
| lenovo yoga_9-15imh5_firmware | v < epcn28ww | epcn28ww |
| lenovo yoga_c640-13iml_firmware | v < chcn28ww | chcn28ww |
| lenovo yoga_c640-13iml_lte_firmware | v < chcn28ww | chcn28ww |
| lenovo yoga_c940-15irh_firmware | v < bscn37ww | bscn37ww |
| lenovo yoga_s730-13iml_firmware | v < brcn20ww | brcn20ww |
| lenovo yoga_slim_7_pro-14ach5_firmware | v < gzcn29ww | gzcn29ww |
| lenovo yoga_slim_7_pro-14ach5_o_firmware | v < gzcn29ww | gzcn29ww |
| lenovo yoga_slim_7_pro-14arh5_firmware | v < gzcn24ww | gzcn24ww |
| lenovo ideapad_5-15alc05_firmware | v < h2cn27ww | h2cn27ww |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.