Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-48181

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 6.7, requiring local system access to exploit with relatively low complexity without requiring user interaction . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 228 products from lenovo, from lenovo, from lenovo and 225 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2023-06-05T22:15:11.383

Last Modified

2024-11-21T07:32:55.820

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

Weaknesses

Type: Secondary
CWE-787
Type: Primary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	lenovo	ideacentre_c5-14imb05_firmware	< o4hkt3aa	Yes
Hardware	lenovo	ideacentre_c5-14imb05	-	No
Operating System	lenovo	ideacentre_3_07ach7_firmware	< m4mkt12a	Yes
Hardware	lenovo	ideacentre_3_07ach7	-	No
Operating System	lenovo	ideacentre_3_07iab7_firmware	< m49kt21a	Yes
Hardware	lenovo	ideacentre_3_07iab7	-	No
Operating System	lenovo	ideacentre_3-07ada05_firmware	< o4fkt35a	Yes
Hardware	lenovo	ideacentre_3-07ada05	-	No
Operating System	lenovo	ideacentre_3-07ada05_firmware	< m4mkt12a	Yes
Hardware	lenovo	ideacentre_3-07ada05	-	No
Operating System	lenovo	ideacentre_3-07imb05_firmware	< m2vkt1ea	Yes
Hardware	lenovo	ideacentre_3-07imb05	-	No
Operating System	lenovo	ideacentre_5_14iab7_firmware	< m42kt42a	Yes
Hardware	lenovo	ideacentre_5_14iab7	-	No
Operating System	lenovo	ideacentre_5-14acn6_firmware	< o5ekt24a	Yes
Hardware	lenovo	ideacentre_5-14acn6	-	No
Operating System	lenovo	ideacentre_5-14are05_firmware	< o4zkt2aa	Yes
Hardware	lenovo	ideacentre_5-14are05	-	No
Operating System	lenovo	ideacentre_5-14imb05_firmware	< o4hkt3aa	Yes
Hardware	lenovo	ideacentre_5-14imb05	-	No
Operating System	lenovo	ideacentre_5-14iob6_firmware	< m3gkt3aa	Yes
Hardware	lenovo	ideacentre_5-14iob6	-	No
Operating System	lenovo	ideacentre_aio_3_21itl7_firmware	< o5akt33	Yes
Hardware	lenovo	ideacentre_aio_3_21itl7	-	No
Operating System	lenovo	ideacentre_aio_3_22iap7_firmware	< o5nkt32a	Yes
Hardware	lenovo	ideacentre_aio_3_22iap7	-	No
Operating System	lenovo	ideacentre_aio_3_24iap7_firmware	< o5nkt32a	Yes
Hardware	lenovo	ideacentre_aio_3_24iap7	-	No
Operating System	lenovo	ideacentre_aio_3_27iap7_firmware	< o5nkt32a	Yes
Hardware	lenovo	ideacentre_aio_3_27iap7	-	No
Operating System	lenovo	ideacentre_aio_3-22imb05_firmware	< o5nkt32a	Yes
Hardware	lenovo	ideacentre_aio_3-22imb05	-	No
Operating System	lenovo	ideacentre_aio_3-22itl6_firmware	< o5akt33	Yes
Hardware	lenovo	ideacentre_aio_3-22itl6	-	No
Operating System	lenovo	ideacentre_aio_3-24alc6_firmware	< o5bkt25a	Yes
Hardware	lenovo	ideacentre_aio_3-24alc6	-	No
Operating System	lenovo	ideacentre_aio_3-24imb05_firmware	< o5nkt32a	Yes
Hardware	lenovo	ideacentre_aio_3-24imb05	-	No
Operating System	lenovo	ideacentre_aio_3-24itl6_firmware	< o5akt33	Yes
Hardware	lenovo	ideacentre_aio_3-24itl6	-	No
Operating System	lenovo	ideacentre_aio_3-27alc6_firmware	< o5bkt25a	Yes
Hardware	lenovo	ideacentre_aio_3-27alc6	-	No
Operating System	lenovo	ideacentre_aio_3-27imb05_firmware	< o5nkt32a	Yes
Hardware	lenovo	ideacentre_aio_3-27imb05	-	No
Operating System	lenovo	ideacentre_aio_3-27itl6_firmware	< o5akt33	Yes
Hardware	lenovo	ideacentre_aio_3-27itl6	-	No
Operating System	lenovo	ideacentre_aio_5_24iah7_firmware	< o5rkt39a	Yes
Hardware	lenovo	ideacentre_aio_5_24iah7	-	No
Operating System	lenovo	ideacentre_aio_5_27iah7_firmware	< o5rkt39a	Yes
Hardware	lenovo	ideacentre_aio_5_27iah7	-	No
Operating System	lenovo	ideacentre_creator_5-14iob6_firmware	< m3gkt3aa	Yes
Hardware	lenovo	ideacentre_creator_5-14iob6	-	No
Operating System	lenovo	ideacentre_g5-14amr05_firmware	< o4zkt2aa	Yes
Hardware	lenovo	ideacentre_g5-14amr05	-	No
Operating System	lenovo	ideacentre_g5-14imb05_firmware	< o4hkt3aa	Yes
Hardware	lenovo	ideacentre_g5-14imb05	-	No
Operating System	lenovo	ideacentre_gaming_5_17acn7_firmware	< o5ekt24a	Yes
Hardware	lenovo	ideacentre_gaming_5_17acn7	-	No
Operating System	lenovo	ideacentre_gaming_5_17iab7_firmware	< m42kt42a	Yes
Hardware	lenovo	ideacentre_gaming_5_17iab7	-	No
Operating System	lenovo	ideacentre_gaming_5-14acn6_firmware	< o5ekt24a	Yes
Hardware	lenovo	ideacentre_gaming_5-14acn6	-	No
Operating System	lenovo	ideacentre_gaming_5-14iob6_firmware	< m3gkt3aa	Yes
Hardware	lenovo	ideacentre_gaming_5-14iob6	-	No
Operating System	lenovo	ideacentre_mini_5_01iaq7_firmware	< o53kt0ea	Yes
Hardware	lenovo	ideacentre_mini_5_01iaq7	-	No
Operating System	lenovo	ideacentre_mini_5-01imh05_firmware	< o4ekt19a	Yes
Hardware	lenovo	ideacentre_mini_5-01imh05	-	No
Operating System	lenovo	legion_c530-19icb_firmware	< o4bkt22a	Yes
Hardware	lenovo	legion_c530-19icb	-	No
Operating System	lenovo	legion_r5-28imb05_firmware	< o4nkt1da	Yes
Hardware	lenovo	legion_r5-28imb05	-	No
Operating System	lenovo	legion_t5-26amr5_firmware	< o4mkt2da	Yes
Hardware	lenovo	legion_t5-26amr5	-	No
Operating System	lenovo	legion_t5-26iob6_firmware	< o54kt22a	Yes
Hardware	lenovo	legion_t5-26iob6	-	No
Operating System	lenovo	legion_t5-28icb05_firmware	< o4bkt22a	Yes
Hardware	lenovo	legion_t5-28icb05	-	No
Operating System	lenovo	legion_t5-28imb05_firmware	< o4nkt1da	Yes
Hardware	lenovo	legion_t5-28imb05	-	No
Operating System	lenovo	legion_t530-28icb_firmware	< o4bkt22a	Yes
Hardware	lenovo	legion_t530-28icb	-	No
Operating System	lenovo	legion_t7-34iaz7_firmware	< o5hkt2aa	Yes
Hardware	lenovo	legion_t7-34iaz7	-	No
Operating System	lenovo	legion_t7-34imz5_firmware	< o4lkt20a	Yes
Hardware	lenovo	legion_t7-34imz5	-	No
Operating System	lenovo	legion_t7-34imz5_firmware	< o5fkt15a	Yes
Hardware	lenovo	legion_t7-34imz5	-	No
Operating System	lenovo	lenovo_legion_t5_26iab7_firmware	< o5lkt29a	Yes
Hardware	lenovo	lenovo_legion_t5_26iab7	-	No
Operating System	lenovo	thinkcentre_m600_firmware	< m00kt68a	Yes
Hardware	lenovo	thinkcentre_m600	-	No
Operating System	lenovo	thinkcentre_m60e_tiny_firmware	< m3skt25a	Yes
Hardware	lenovo	thinkcentre_m60e_tiny	-	No
Operating System	lenovo	thinkcentre_m625q_firmware	< m1wkt50a	Yes
Hardware	lenovo	thinkcentre_m625q	-	No
Operating System	lenovo	thinkcentre_m70c_firmware	< m2vkt1ea	Yes
Hardware	lenovo	thinkcentre_m70c	-	No
Operating System	lenovo	thinkcentre_m70q_firmware	< m2wkt59a	Yes
Hardware	lenovo	thinkcentre_m70q	-	No
Operating System	lenovo	thinkcentre_m70q_gen_2_firmware	< m3jkt37a	Yes
Hardware	lenovo	thinkcentre_m70q_gen_2	-	No
Operating System	lenovo	thinkcentre_m70q_gen_3_firmware	< m43kt1ba	Yes
Hardware	lenovo	thinkcentre_m70q_gen_3	-	No
Operating System	lenovo	thinkcentre_m70s_firmware	< m2tkt52a	Yes
Hardware	lenovo	thinkcentre_m70s	-	No
Operating System	lenovo	thinkcentre_m70s_gen_3_firmware	< m41kt3da	Yes
Hardware	lenovo	thinkcentre_m70s_gen_3	-	No
Operating System	lenovo	thinkcentre_m70t_firmware	< m2tkt52a	Yes
Hardware	lenovo	thinkcentre_m70t	-	No
Operating System	lenovo	thinkcentre_m70t_gen_3_firmware	< m41kt3da	Yes
Hardware	lenovo	thinkcentre_m70t_gen_3	-	No
Operating System	lenovo	thinkcentre_m720e_firmware	< m1zkt40a	Yes
Hardware	lenovo	thinkcentre_m720e	-	No
Operating System	lenovo	thinkcentre_m720q_firmware	< m1ukt70a	Yes
Hardware	lenovo	thinkcentre_m720q	-	No
Operating System	lenovo	thinkcentre_m720s_firmware	< m1ukt70a	Yes
Hardware	lenovo	thinkcentre_m720s	-	No
Operating System	lenovo	thinkcentre_m720t_firmware	< m1ukt70a	Yes
Hardware	lenovo	thinkcentre_m720t	-	No
Operating System	lenovo	thinkcentre_m725s_firmware	< m25kt63a	Yes
Hardware	lenovo	thinkcentre_m725s	-	No
Operating System	lenovo	thinkcentre_m75n_firmware	< m33kt27a	Yes
Hardware	lenovo	thinkcentre_m75n	-	No
Operating System	lenovo	thinkcentre_m75s_gen_2_firmware	< m46kt30a	Yes
Hardware	lenovo	thinkcentre_m75s_gen_2	-	No
Operating System	lenovo	thinkcentre_m75s_gen_2_firmware	< m3bkt2fa	Yes
Hardware	lenovo	thinkcentre_m75s_gen_2	-	No
Operating System	lenovo	thinkcentre_m75s_gen_2_firmware	< m3akt4ca	Yes
Hardware	lenovo	thinkcentre_m75s_gen_2	-	No
Operating System	lenovo	thinkcentre_m75s-1_firmware	< m2ckt4fa	Yes
Hardware	lenovo	thinkcentre_m75s-1	-	No
Operating System	lenovo	thinkcentre_m75t_gen_2_firmware	< m46kt30a	Yes
Hardware	lenovo	thinkcentre_m75t_gen_2	-	No
Operating System	lenovo	thinkcentre_m75t_gen_2_firmware	< m3bkt2fa	Yes
Hardware	lenovo	thinkcentre_m75t_gen_2	-	No
Operating System	lenovo	thinkcentre_m75t_gen_2_firmware	< m3akt4ca	Yes
Hardware	lenovo	thinkcentre_m75t_gen_2	-	No
Operating System	lenovo	thinkcentre_m80q_firmware	< m2wkt59a	Yes
Hardware	lenovo	thinkcentre_m80q	-	No
Operating System	lenovo	thinkcentre_m80q_gen_3_firmware	< m4gkt23a	Yes
Hardware	lenovo	thinkcentre_m80q_gen_3	-	No
Operating System	lenovo	thinkcentre_m80s_firmware	< m2tkt52a	Yes
Hardware	lenovo	thinkcentre_m80s	-	No
Operating System	lenovo	thinkcentre_m80s_gen_3_firmware	< m40kt3da	Yes
Hardware	lenovo	thinkcentre_m80s_gen_3	-	No
Operating System	lenovo	thinkcentre_m80t_firmware	< m2tkt52a	Yes
Hardware	lenovo	thinkcentre_m80t	-	No
Operating System	lenovo	thinkcentre_m80t_gen_3_firmware	< m40kt3da	Yes
Hardware	lenovo	thinkcentre_m80t_gen_3	-	No
Operating System	lenovo	thinkcentre_m90a_firmware	< m2rkt56a	Yes
Hardware	lenovo	thinkcentre_m90a	-	No
Operating System	lenovo	thinkcentre_m90a_gen_2_firmware	< m3lkt28a	Yes
Hardware	lenovo	thinkcentre_m90a_gen_2	-	No
Operating System	lenovo	thinkcentre_m90a_gen_3_firmware	< m4ikt19a	Yes
Hardware	lenovo	thinkcentre_m90a_gen_3	-	No
Operating System	lenovo	thinkcentre_m90a_pro_gen_3_firmware	< m4hkt19a	Yes
Hardware	lenovo	thinkcentre_m90a_pro_gen_3	-	No
Operating System	lenovo	thinkcentre_m90q_gen_2_firmware	< m3jkt37a	Yes
Hardware	lenovo	thinkcentre_m90q_gen_2	-	No
Operating System	lenovo	thinkcentre_m90q_gen_3_firmware	< m4gkt23a	Yes
Hardware	lenovo	thinkcentre_m90q_gen_3	-	No
Operating System	lenovo	thinkcentre_m90q_tiny_firmware	< m2wkt59a	Yes
Hardware	lenovo	thinkcentre_m90q_tiny	-	No
Operating System	lenovo	thinkcentre_m90s_firmware	< m2tkt52a	Yes
Hardware	lenovo	thinkcentre_m90s	-	No
Operating System	lenovo	thinkcentre_m90s_gen_3_firmware	< m40kt3da	Yes
Hardware	lenovo	thinkcentre_m90s_gen_3	-	No
Operating System	lenovo	thinkcentre_m90t_firmware	< m2tkt52a	Yes
Hardware	lenovo	thinkcentre_m90t	-	No
Operating System	lenovo	thinkcentre_m90t_gen_3_firmware	< m40kt3da	Yes
Hardware	lenovo	thinkcentre_m90t_gen_3	-	No
Operating System	lenovo	thinkcentre_m920q_firmware	< m1ukt70a	Yes
Hardware	lenovo	thinkcentre_m920q	-	No
Operating System	lenovo	thinkcentre_m920s_firmware	< m1ukt70a	Yes
Hardware	lenovo	thinkcentre_m920s	-	No
Operating System	lenovo	thinkcentre_m920t_firmware	< m1ukt70a	Yes
Hardware	lenovo	thinkcentre_m920t	-	No
Operating System	lenovo	thinkcentre_m920x_firmware	< m1ukt70a	Yes
Hardware	lenovo	thinkcentre_m920x	-	No
Operating System	lenovo	thinkcentre_m920z_firmware	< m1mkt55a	Yes
Hardware	lenovo	thinkcentre_m920z	-	No
Operating System	lenovo	thinkcentre_neo_30a_22_gen_3_firmware	< o5nkt32a	Yes
Hardware	lenovo	thinkcentre_neo_30a_22_gen_3	-	No
Operating System	lenovo	thinkcentre_neo_30a_24_gen_3_firmware	< o5nkt32a	Yes
Hardware	lenovo	thinkcentre_neo_30a_24_gen_3	-	No
Operating System	lenovo	thinkcentre_neo_30a_27_gen_3_firmware	< o5nkt32a	Yes
Hardware	lenovo	thinkcentre_neo_30a_27_gen_3	-	No
Operating System	lenovo	thinkcentre_neo_50s_gen_3_firmware	< m49kt21a	Yes
Hardware	lenovo	thinkcentre_neo_50s_gen_3	-	No
Operating System	lenovo	thinkcentre_neo_50t_gen_3_firmware	< m42kt42a	Yes
Hardware	lenovo	thinkcentre_neo_50t_gen_3	-	No
Operating System	lenovo	thinkcentre_neo_70t_gen_3_firmware	< m40kt3da	Yes
Hardware	lenovo	thinkcentre_neo_70t_gen_3	-	No
Operating System	lenovo	thinkcentre_t540-15ama_g_firmware	< m2ckt4fa	Yes
Hardware	lenovo	thinkcentre_t540-15ama_g	-	No
Operating System	lenovo	ideacentre_510s-07icb_firmware	< m22kt49a	Yes
Hardware	lenovo	ideacentre_510s-07icb	-	No
Operating System	lenovo	ideacentre_510s-07ick_firmware	< m30kt28a	Yes
Hardware	lenovo	ideacentre_510s-07ick	-	No
Operating System	lenovo	ideacentre_510s-07ick_firmware	< m1zkt40a	Yes
Hardware	lenovo	ideacentre_510s-07ick	-	No
Operating System	lenovo	ideacentre_720-18apr_firmware	< m25kt63a	Yes
Hardware	lenovo	ideacentre_720-18apr	-	No
Operating System	lenovo	v30a-22itl_firmware	< o5akt33	Yes
Hardware	lenovo	v30a-22itl	-	No
Operating System	lenovo	v30a-24itl_firmware	< o5akt33	Yes
Hardware	lenovo	v30a-24itl	-	No
Operating System	lenovo	v35s-07ada_firmware	< m4mkt12a	Yes
Hardware	lenovo	v35s-07ada	-	No
Operating System	lenovo	v50s-07imb_firmware	< m2vkt1ea	Yes
Hardware	lenovo	v50s-07imb	-	No
Operating System	lenovo	v50t-13imb_firmware	< o4hkt3aa	Yes
Hardware	lenovo	v50t-13imb	-	No
Operating System	lenovo	v50t-13iob_g2_firmware	< m3gkt3aa	Yes
Hardware	lenovo	v50t-13iob_g2	-	No
Operating System	lenovo	v530s-07icb_firmware	< m22kt49a	Yes
Hardware	lenovo	v530s-07icb	-	No
Operating System	lenovo	v530s-07icr_firmware	< m1zkt40a	Yes
Hardware	lenovo	v530s-07icr	-	No
Operating System	lenovo	v55t_gen_2_13acn_firmware	< o5jkt23a	Yes
Hardware	lenovo	v55t_gen_2_13acn	-	No
Operating System	lenovo	thinkstation_p320_firmware	< s06kt63a	Yes
Hardware	lenovo	thinkstation_p320	-	No
Operating System	lenovo	thinkstation_p330_tiny_firmware	< m1ukt70a	Yes
Hardware	lenovo	thinkstation_p330_tiny	-	No
Operating System	lenovo	thinkstation_p330_firmware	< m1vkt6fa	Yes
Hardware	lenovo	thinkstation_p330	-	No
Operating System	lenovo	thinkstation_p330_gen_2_firmware	< m1vkt6fa	Yes
Hardware	lenovo	thinkstation_p330_gen_2	-	No
Operating System	lenovo	thinkstation_p340_tiny_firmware	< m2wkt59a	Yes
Hardware	lenovo	thinkstation_p340_tiny	-	No
Operating System	lenovo	thinkstation_p340_firmware	< s08kt53a	Yes
Hardware	lenovo	thinkstation_p340	-	No
Operating System	lenovo	thinkstation_p350_tiny_firmware	< m3jkt37a	Yes
Hardware	lenovo	thinkstation_p350_tiny	-	No
Operating System	lenovo	thinkstation_p350_firmware	< s0akt39a	Yes
Hardware	lenovo	thinkstation_p350	-	No
Operating System	lenovo	thinkstation_p360_tiny_firmware	< m4gkt23a	Yes
Hardware	lenovo	thinkstation_p360_tiny	-	No
Operating System	lenovo	thinkstation_p360_firmware	< s0ekt40a	Yes
Hardware	lenovo	thinkstation_p360	-	No
Operating System	lenovo	thinkstation_p360_firmware	< s0ekt43a	Yes
Hardware	lenovo	thinkstation_p360	-	No

References

https://support.lenovo.com/us/en/product_security/LEN-124495 Vendor Advisory ([email protected])
https://support.lenovo.com/us/en/product_security/LEN-124495 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For lenovo's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.