CVE-2022-48181
Medium
Description
An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.
SeverityMedium
CVSS6.7
Exploit probability—
ProductLenovo Ideacentre C5-14imb05 Firmware
PublishedJun 5, 2023
First seenJun 5, 2023
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- lenovo ideacentre_c5-14imb05_firmwareo4hkt3aa or later
- lenovo ideacentre_3_07ach7_firmwarem4mkt12a or later
- lenovo ideacentre_3_07iab7_firmwarem49kt21a or later
- lenovo ideacentre_3-07ada05_firmwareo4fkt35a, m4mkt12a or later
- lenovo ideacentre_3-07imb05_firmwarem2vkt1ea or later
- lenovo ideacentre_5_14iab7_firmwarem42kt42a or later
- lenovo ideacentre_5-14acn6_firmwareo5ekt24a or later
- lenovo ideacentre_5-14are05_firmwareo4zkt2aa or later
- lenovo ideacentre_5-14imb05_firmwareo4hkt3aa or later
- lenovo ideacentre_5-14iob6_firmwarem3gkt3aa or later
- lenovo ideacentre_aio_3_21itl7_firmwareo5akt33 or later
- lenovo ideacentre_aio_3_22iap7_firmwareo5nkt32a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo ideacentre_c5-14imb05_firmware | v < o4hkt3aa | o4hkt3aa |
| lenovo ideacentre_3_07ach7_firmware | v < m4mkt12a | m4mkt12a |
| lenovo ideacentre_3_07iab7_firmware | v < m49kt21a | m49kt21a |
| lenovo ideacentre_3-07ada05_firmware | v < o4fkt35a, v < m4mkt12a | o4fkt35a, m4mkt12a |
| lenovo ideacentre_3-07imb05_firmware | v < m2vkt1ea | m2vkt1ea |
| lenovo ideacentre_5_14iab7_firmware | v < m42kt42a | m42kt42a |
| lenovo ideacentre_5-14acn6_firmware | v < o5ekt24a | o5ekt24a |
| lenovo ideacentre_5-14are05_firmware | v < o4zkt2aa | o4zkt2aa |
| lenovo ideacentre_5-14imb05_firmware | v < o4hkt3aa | o4hkt3aa |
| lenovo ideacentre_5-14iob6_firmware | v < m3gkt3aa | m3gkt3aa |
| lenovo ideacentre_aio_3_21itl7_firmware | v < o5akt33 | o5akt33 |
| lenovo ideacentre_aio_3_22iap7_firmware | v < o5nkt32a | o5nkt32a |
| lenovo ideacentre_aio_3_24iap7_firmware | v < o5nkt32a | o5nkt32a |
| lenovo ideacentre_aio_3_27iap7_firmware | v < o5nkt32a | o5nkt32a |
| lenovo ideacentre_aio_3-22imb05_firmware | v < o5nkt32a | o5nkt32a |
| lenovo ideacentre_aio_3-22itl6_firmware | v < o5akt33 | o5akt33 |
| lenovo ideacentre_aio_3-24alc6_firmware | v < o5bkt25a | o5bkt25a |
| lenovo ideacentre_aio_3-24imb05_firmware | v < o5nkt32a | o5nkt32a |
| lenovo ideacentre_aio_3-24itl6_firmware | v < o5akt33 | o5akt33 |
| lenovo ideacentre_aio_3-27alc6_firmware | v < o5bkt25a | o5bkt25a |
| lenovo ideacentre_aio_3-27imb05_firmware | v < o5nkt32a | o5nkt32a |
| lenovo ideacentre_aio_3-27itl6_firmware | v < o5akt33 | o5akt33 |
| lenovo ideacentre_aio_5_24iah7_firmware | v < o5rkt39a | o5rkt39a |
| lenovo ideacentre_aio_5_27iah7_firmware | v < o5rkt39a | o5rkt39a |
| lenovo ideacentre_creator_5-14iob6_firmware | v < m3gkt3aa | m3gkt3aa |
| lenovo ideacentre_g5-14amr05_firmware | v < o4zkt2aa | o4zkt2aa |
| lenovo ideacentre_g5-14imb05_firmware | v < o4hkt3aa | o4hkt3aa |
| lenovo ideacentre_gaming_5_17acn7_firmware | v < o5ekt24a | o5ekt24a |
| lenovo ideacentre_gaming_5_17iab7_firmware | v < m42kt42a | m42kt42a |
| lenovo ideacentre_gaming_5-14acn6_firmware | v < o5ekt24a | o5ekt24a |
| lenovo ideacentre_gaming_5-14iob6_firmware | v < m3gkt3aa | m3gkt3aa |
| lenovo ideacentre_mini_5_01iaq7_firmware | v < o53kt0ea | o53kt0ea |
| lenovo ideacentre_mini_5-01imh05_firmware | v < o4ekt19a | o4ekt19a |
| lenovo legion_c530-19icb_firmware | v < o4bkt22a | o4bkt22a |
| lenovo legion_r5-28imb05_firmware | v < o4nkt1da | o4nkt1da |
| lenovo legion_t5-26amr5_firmware | v < o4mkt2da | o4mkt2da |
| lenovo legion_t5-26iob6_firmware | v < o54kt22a | o54kt22a |
| lenovo legion_t5-28icb05_firmware | v < o4bkt22a | o4bkt22a |
| lenovo legion_t5-28imb05_firmware | v < o4nkt1da | o4nkt1da |
| lenovo legion_t530-28icb_firmware | v < o4bkt22a | o4bkt22a |
| lenovo legion_t7-34iaz7_firmware | v < o5hkt2aa | o5hkt2aa |
| lenovo legion_t7-34imz5_firmware | v < o4lkt20a, v < o5fkt15a | o4lkt20a, o5fkt15a |
| lenovo lenovo_legion_t5_26iab7_firmware | v < o5lkt29a | o5lkt29a |
| lenovo thinkcentre_m600_firmware | v < m00kt68a | m00kt68a |
| lenovo thinkcentre_m60e_tiny_firmware | v < m3skt25a | m3skt25a |
| lenovo thinkcentre_m625q_firmware | v < m1wkt50a | m1wkt50a |
| lenovo thinkcentre_m70c_firmware | v < m2vkt1ea | m2vkt1ea |
| lenovo thinkcentre_m70q_firmware | v < m2wkt59a | m2wkt59a |
| lenovo thinkcentre_m70q_gen_2_firmware | v < m3jkt37a | m3jkt37a |
| lenovo thinkcentre_m70q_gen_3_firmware | v < m43kt1ba | m43kt1ba |
| lenovo thinkcentre_m70s_firmware | v < m2tkt52a | m2tkt52a |
| lenovo thinkcentre_m70s_gen_3_firmware | v < m41kt3da | m41kt3da |
| lenovo thinkcentre_m70t_firmware | v < m2tkt52a | m2tkt52a |
| lenovo thinkcentre_m70t_gen_3_firmware | v < m41kt3da | m41kt3da |
| lenovo thinkcentre_m720e_firmware | v < m1zkt40a | m1zkt40a |
| lenovo thinkcentre_m720q_firmware | v < m1ukt70a | m1ukt70a |
| lenovo thinkcentre_m720s_firmware | v < m1ukt70a | m1ukt70a |
| lenovo thinkcentre_m720t_firmware | v < m1ukt70a | m1ukt70a |
| lenovo thinkcentre_m725s_firmware | v < m25kt63a | m25kt63a |
| lenovo thinkcentre_m75n_firmware | v < m33kt27a | m33kt27a |
| lenovo thinkcentre_m75s_gen_2_firmware | v < m46kt30a, v < m3bkt2fa, v < m3akt4ca | m46kt30a, m3bkt2fa, m3akt4ca |
| lenovo thinkcentre_m75s-1_firmware | v < m2ckt4fa | m2ckt4fa |
| lenovo thinkcentre_m75t_gen_2_firmware | v < m46kt30a, v < m3bkt2fa, v < m3akt4ca | m46kt30a, m3bkt2fa, m3akt4ca |
| lenovo thinkcentre_m80q_firmware | v < m2wkt59a | m2wkt59a |
| lenovo thinkcentre_m80q_gen_3_firmware | v < m4gkt23a | m4gkt23a |
| lenovo thinkcentre_m80s_firmware | v < m2tkt52a | m2tkt52a |
| lenovo thinkcentre_m80s_gen_3_firmware | v < m40kt3da | m40kt3da |
| lenovo thinkcentre_m80t_firmware | v < m2tkt52a | m2tkt52a |
| lenovo thinkcentre_m80t_gen_3_firmware | v < m40kt3da | m40kt3da |
| lenovo thinkcentre_m90a_firmware | v < m2rkt56a | m2rkt56a |
| lenovo thinkcentre_m90a_gen_2_firmware | v < m3lkt28a | m3lkt28a |
| lenovo thinkcentre_m90a_gen_3_firmware | v < m4ikt19a | m4ikt19a |
| lenovo thinkcentre_m90a_pro_gen_3_firmware | v < m4hkt19a | m4hkt19a |
| lenovo thinkcentre_m90q_gen_2_firmware | v < m3jkt37a | m3jkt37a |
| lenovo thinkcentre_m90q_gen_3_firmware | v < m4gkt23a | m4gkt23a |
| lenovo thinkcentre_m90q_tiny_firmware | v < m2wkt59a | m2wkt59a |
| lenovo thinkcentre_m90s_firmware | v < m2tkt52a | m2tkt52a |
| lenovo thinkcentre_m90s_gen_3_firmware | v < m40kt3da | m40kt3da |
| lenovo thinkcentre_m90t_firmware | v < m2tkt52a | m2tkt52a |
| lenovo thinkcentre_m90t_gen_3_firmware | v < m40kt3da | m40kt3da |
| lenovo thinkcentre_m920q_firmware | v < m1ukt70a | m1ukt70a |
| lenovo thinkcentre_m920s_firmware | v < m1ukt70a | m1ukt70a |
| lenovo thinkcentre_m920t_firmware | v < m1ukt70a | m1ukt70a |
| lenovo thinkcentre_m920x_firmware | v < m1ukt70a | m1ukt70a |
| lenovo thinkcentre_m920z_firmware | v < m1mkt55a | m1mkt55a |
| lenovo thinkcentre_neo_30a_22_gen_3_firmware | v < o5nkt32a | o5nkt32a |
| lenovo thinkcentre_neo_30a_24_gen_3_firmware | v < o5nkt32a | o5nkt32a |
| lenovo thinkcentre_neo_30a_27_gen_3_firmware | v < o5nkt32a | o5nkt32a |
| lenovo thinkcentre_neo_50s_gen_3_firmware | v < m49kt21a | m49kt21a |
| lenovo thinkcentre_neo_50t_gen_3_firmware | v < m42kt42a | m42kt42a |
| lenovo thinkcentre_neo_70t_gen_3_firmware | v < m40kt3da | m40kt3da |
| lenovo thinkcentre_t540-15ama_g_firmware | v < m2ckt4fa | m2ckt4fa |
| lenovo ideacentre_510s-07icb_firmware | v < m22kt49a | m22kt49a |
| lenovo ideacentre_510s-07ick_firmware | v < m30kt28a, v < m1zkt40a | m30kt28a, m1zkt40a |
| lenovo ideacentre_720-18apr_firmware | v < m25kt63a | m25kt63a |
| lenovo v30a-22itl_firmware | v < o5akt33 | o5akt33 |
| lenovo v30a-24itl_firmware | v < o5akt33 | o5akt33 |
| lenovo v35s-07ada_firmware | v < m4mkt12a | m4mkt12a |
| lenovo v50s-07imb_firmware | v < m2vkt1ea | m2vkt1ea |
| lenovo v50t-13imb_firmware | v < o4hkt3aa | o4hkt3aa |
| lenovo v50t-13iob_g2_firmware | v < m3gkt3aa | m3gkt3aa |
| lenovo v530s-07icb_firmware | v < m22kt49a | m22kt49a |
| lenovo v530s-07icr_firmware | v < m1zkt40a | m1zkt40a |
| lenovo v55t_gen_2_13acn_firmware | v < o5jkt23a | o5jkt23a |
| lenovo thinkstation_p320_firmware | v < s06kt63a | s06kt63a |
| lenovo thinkstation_p330_tiny_firmware | v < m1ukt70a | m1ukt70a |
| lenovo thinkstation_p330_firmware | v < m1vkt6fa | m1vkt6fa |
| lenovo thinkstation_p330_gen_2_firmware | v < m1vkt6fa | m1vkt6fa |
| lenovo thinkstation_p340_tiny_firmware | v < m2wkt59a | m2wkt59a |
| lenovo thinkstation_p340_firmware | v < s08kt53a | s08kt53a |
| lenovo thinkstation_p350_tiny_firmware | v < m3jkt37a | m3jkt37a |
| lenovo thinkstation_p350_firmware | v < s0akt39a | s0akt39a |
| lenovo thinkstation_p360_tiny_firmware | v < m4gkt23a | m4gkt23a |
| lenovo thinkstation_p360_firmware | v < s0ekt40a, v < s0ekt43a | s0ekt40a, s0ekt43a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.