CVE-2022-3742
Medium
Description
A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper buffer validation.
SeverityMedium
CVSS6.7
Exploit probability—
ProductLenovo Ideapad 1 14iau7 Firmware
PublishedAug 23, 2023
First seenAug 23, 2023
Weakness typeCWE-120CWE-120
How to fix
Update
- lenovo ideapad_1_14iau7_firmwarejkcn34ww or later
- lenovo ideapad_1_14igl7_firmwarekkcn15ww or later
- lenovo ideapad_1_15iau7_firmwarejkcn34ww or later
- lenovo ideapad_1_15igl7_firmwarekkcn15ww or later
- lenovo ideapad_1-14ijl7_firmwarehtcn31ww or later
- lenovo ideapad_1-15ijl7_firmwarehtcn31ww or later
- lenovo ideapad_3_14iau7_firmwarejkcn34ww or later
- lenovo ideapad_3_15iau7_firmwarejkcn34ww or later
- lenovo ideapad_3_17iau7_firmwarejkcn34ww or later
- lenovo ideapad_3-15igl05_firmwaredvcn28ww or later
- lenovo ideapad_3-17iil05_firmwareemcn56ww or later
- lenovo ideapad_3-17itl6_firmwareggcn51ww or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo ideapad_1_14iau7_firmware | v < jkcn34ww | jkcn34ww |
| lenovo ideapad_1_14igl7_firmware | v < kkcn15ww | kkcn15ww |
| lenovo ideapad_1_15iau7_firmware | v < jkcn34ww | jkcn34ww |
| lenovo ideapad_1_15igl7_firmware | v < kkcn15ww | kkcn15ww |
| lenovo ideapad_1-14ijl7_firmware | v < htcn31ww | htcn31ww |
| lenovo ideapad_1-15ijl7_firmware | v < htcn31ww | htcn31ww |
| lenovo ideapad_3_14iau7_firmware | v < jkcn34ww | jkcn34ww |
| lenovo ideapad_3_15iau7_firmware | v < jkcn34ww | jkcn34ww |
| lenovo ideapad_3_17iau7_firmware | v < jkcn34ww | jkcn34ww |
| lenovo ideapad_3-15igl05_firmware | v < dvcn28ww | dvcn28ww |
| lenovo ideapad_3-17iil05_firmware | v < emcn56ww | emcn56ww |
| lenovo ideapad_3-17itl6_firmware | v < ggcn51ww | ggcn51ww |
| lenovo ideapad_5_15ial7_firmware | v < jbcn27ww | jbcn27ww |
| lenovo ideapad_5-15itl05_firmware | v < fhcn70ww | fhcn70ww |
| lenovo l3-15iml05_firmware | v < ejcn30ww | ejcn30ww |
| lenovo l3-15itl6_firmware | v < gfcn29ww | gfcn29ww |
| lenovo legion_5_15iah7_firmware | v < j2cn49ww | j2cn49ww |
| lenovo legion_5_15iah7h_firmware | v < j2cn49ww | j2cn49ww |
| lenovo legion_5_pro_16iah7_firmware | v < j2cn49ww | j2cn49ww |
| lenovo legion_5_pro_16iah7h_firmware | v < j2cn49ww | j2cn49ww |
| lenovo legion_5_pro-16ith6_firmware | v < h1cn52ww | h1cn52ww |
| lenovo legion_5_pro-16ith6h_firmware | v < h1cn52ww | h1cn52ww |
| lenovo legion_5-15imh05_firmware | v < efcn58ww | efcn58ww |
| lenovo legion_5-15imh05h_firmware | v < efcn58ww | efcn58ww |
| lenovo legion_5-15imh6_firmware | v < g8cn22ww | g8cn22ww |
| lenovo legion_5-15ith6_firmware | v < h1cn52ww | h1cn52ww |
| lenovo legion_5-15ith6h_firmware | v < h1cn52ww | h1cn52ww |
| lenovo legion_5-17imh05_firmware | v < efcn58ww | efcn58ww |
| lenovo legion_5-17imh05h_firmware | v < efcn58ww | efcn58ww |
| lenovo legion_5-17ith6_firmware | v < h1cn52ww | h1cn52ww |
| lenovo legion_5-17ith6h_firmware | v < h1cn52ww | h1cn52ww |
| lenovo legion_5p-15imh05_firmware | v < efcn58ww | efcn58ww |
| lenovo legion_5p-15imh05h_firmware | v < efcn58ww | efcn58ww |
| lenovo legion_7_16iax7_firmware | v < k1cn40ww | k1cn40ww |
| lenovo legion_7-16ithg6_firmware | v < h1cn52ww | h1cn52ww |
| lenovo s14_g2_itl_firmware | v < ggcn51ww | ggcn51ww |
| lenovo s14_g3_iap_firmware | v < jkcn34ww | jkcn34ww |
| lenovo slim_7_14iap7_firmware | v < jhcn28ww | jhcn28ww |
| lenovo slim_7_carbon_13iap7_firmware | v < k2cn34ww | k2cn34ww |
| lenovo slim_7_prox_14iah7_firmware | v < hmcn41ww | hmcn41ww |
| lenovo slim_9_14iap7_firmware | v < j3cn49ww | j3cn49ww |
| lenovo thinkbook_15p_imh_firmware | v < f6cn26ww | f6cn26ww |
| lenovo v14_g2_ijl_firmware | v < htcn31ww | htcn31ww |
| lenovo v14_g3_iap_firmware | v < jkcn34ww | jkcn34ww |
| lenovo v15_g2_ijl_firmware | v < htcn31ww | htcn31ww |
| lenovo v15_g3_iap_firmware | v < jkcn34ww | jkcn34ww |
| lenovo v17_g3_iap_firmware | v < jkcn34ww | jkcn34ww |
| lenovo s540-13itl_firmware | v < fzcn26ww | fzcn26ww |
| lenovo slim_7_pro-14ihu5_firmware | v < fjcn74ww | fjcn74ww |
| lenovo slim_9-14itl05_firmware | v < escn56ww | escn56ww |
| lenovo thinkbook_15p_g2_ith_firmware | v < hjcn32ww | hjcn32ww |
| lenovo v14_g1-iml_firmware | v < dxcn44ww | dxcn44ww |
| lenovo v14_g2-itl_firmware | v < ggcn51ww | ggcn51ww |
| lenovo v14-igl_firmware | v < dvcn28ww | dvcn28ww |
| lenovo v15_g1-iml_firmware | v < dxcn44ww | dxcn44ww |
| lenovo v15_g2-itl_firmware | v < ggcn51ww | ggcn51ww |
| lenovo v15-igl_firmware | v < dvcn28ww | dvcn28ww |
| lenovo v17_g2-itl_firmware | v < ggcn51ww | ggcn51ww |
| lenovo v17-iil_firmware | v < emcn56ww | emcn56ww |
| lenovo yoga_7_14ial7_firmware | v < j1cn35ww | j1cn35ww |
| lenovo yoga_7_16iah7_firmware | v < j1cn35ww | j1cn35ww |
| lenovo yoga_7_16iap7_firmware | v < j1cn35ww | j1cn35ww |
| lenovo yoga_7-14itl5_firmware | v < f5cn59ww | f5cn59ww |
| lenovo yoga_7-15itl5_firmware | v < f5cn59ww | f5cn59ww |
| lenovo yoga_9_14iap7_firmware | v < hncn42ww | hncn42ww |
| lenovo yoga_slim_7_carbon_13iap7_firmware | v < k2cn34ww | k2cn34ww |
| lenovo yoga_slim_7_pro_14iah7_firmware | v < krcn14ww | krcn14ww |
| lenovo yoga_slim_7_pro_14iap7_firmware | v < jhcn28ww | jhcn28ww |
| lenovo yoga_slim_7_pro-14ihu5_firmware | v < fjcn74ww | fjcn74ww |
| lenovo yoga_slim_7_pro-14ihu5_o_firmware | v < fjcn74ww | fjcn74ww |
| lenovo yoga_slim_7_pro-14itl5_firmware | v < fjcn74ww | fjcn74ww |
| lenovo yoga_slim_7_prox_14iah7_firmware | v < hmcn41ww | hmcn41ww |
| lenovo yoga_slim_9_14iap7_firmware | v < j3cn49ww | j3cn49ww |
| lenovo yoga_slim_9-14itl05_firmware | v < escn56ww | escn56ww |
| lenovo ideapad_3-14igl05_firmware | v < dvcn28ww | dvcn28ww |
| lenovo ideapad_3-14iil05_firmware | v < emcn56ww | emcn56ww |
| lenovo ideapad_3-14iml05_firmware | v < dxcn44ww | dxcn44ww |
| lenovo ideapad_3-14itl05_firmware | v < gccn32ww | gccn32ww |
| lenovo ideapad_3-14itl6_firmware | v < ggcn51ww | ggcn51ww |
| lenovo ideapad_3-15iil05_firmware | v < emcn56ww | emcn56ww |
| lenovo ideapad_3-15iml05_firmware | v < dxcn44ww | dxcn44ww |
| lenovo ideapad_3-15itl05_firmware | v < gccn32ww | gccn32ww |
| lenovo ideapad_3-15itl6_firmware | v < ggcn51ww | ggcn51ww |
| lenovo ideapad_3-17iml05_firmware | v < dxcn44ww | dxcn44ww |
| lenovo ideapad_5-15iil05_firmware | v < dpcn58ww | dpcn58ww |
| lenovo ideapad_creator_5-15imh05_firmware | v < egcn40ww | egcn40ww |
| lenovo ideapad_gaming_3-15imh05_firmware | v < egcn40ww | egcn40ww |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.