CVE-2022-1892: Buffer Overflow
Published Jan 23, 2023
·Updated
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Affected Software
140 affected components
Lenovo 100e 2nd Gen Firmware<frcn23ww
Lenovo 100e 2nd Gen
Lenovo 100w Gen 3 Firmware<gacn38ww
Lenovo 100w Gen 3
Lenovo 13w Yoga Firmware<jacn31ww
Lenovo 13w Yoga
Lenovo 14w Gen 2 Firmware<h0cn21ww
Lenovo 14w Gen 2
Lenovo 300e 2nd Gen Firmware<frcn23ww
Lenovo 300e 2nd Gen
Lenovo 300w Gen 3 Firmware<gacn38ww
Lenovo 300w Gen 3
Lenovo 500w Gen 3 Firmware<g6cn40ww
Lenovo 500w Gen 3
Lenovo 730s-13iml Firmware<brcn20ww
Lenovo 730s-13iml
Lenovo Flex 3-11ada05 Firmware<fpcn26ww
Lenovo Flex 3-11ada05
Lenovo Flex 5-14alc05 Firmware<gjcn27ww
Lenovo Flex 5-14alc05
Lenovo Flex 5-14are05 Firmware<eecn39ww
Lenovo Flex 5-14are05
Lenovo Flex 5-14iil05 Firmware<eecn40ww
Lenovo Flex 5-14iil05
Lenovo Flex 5-14itl05 Firmware<fxcn38ww
Lenovo Flex 5-14itl05
Lenovo Flex 5-15alc05 Firmware<gjcn27ww
Lenovo Flex 5-15alc05
Lenovo Flex 5-15iil05 Firmware<eccn40ww
Lenovo Flex 5-15iil05
Lenovo Flex 5-15itl05 Firmware<fxcn38ww
Lenovo Flex 5-15itl05
Lenovo Ideapad 1-11ada05 Firmware<fqcn26ww
Lenovo Ideapad 1-11ada05
Lenovo Ideapad 1-11igl05 Firmware<dwcn24ww
Lenovo Ideapad 1-11igl05
Lenovo Ideapad 1-14ada05 Firmware<fqcn26ww
Lenovo Ideapad 1-14ada05
Lenovo Ideapad 1-14igl05 Firmware<dwcn24ww
Lenovo Ideapad 1-14igl05
Lenovo Ideapad 3-15ada05 Firmware<e8cn36ww
Lenovo Ideapad 3-15ada05
Lenovo Ideapad 3-14ada05 Firmware<e8cn36ww
Lenovo Ideapad 3-14ada05
Lenovo Ideapad 3-14ada6 Firmware<hbcn24ww
Lenovo Ideapad 3-14ada6
Lenovo Ideapad 3-14alc6 Firmware<glcn48ww
Lenovo Ideapad 3-14alc6
Lenovo Ideapad 3-15ada6 Firmware<hbcn24ww
Lenovo Ideapad 3-15ada6
Lenovo Ideapad 3-15alc6 Firmware<glcn48ww
Lenovo Ideapad 3-15alc6
Lenovo Ideapad 3-17alc6 Firmware<e8cn36ww
Lenovo Ideapad 3-17alc6
Lenovo Ideapad 3-17ada05 Firmware<hbcn24ww
Lenovo Ideapad 3-17ada05
Lenovo Ideapad 3-17ada6 Firmware<glcn48ww
Lenovo Ideapad 3-17ada6
Lenovo Ideapad 5 15aba7 Firmware<kacn14ww
Lenovo Ideapad 5 15aba7
Lenovo Ideapad Flex 5 14alc7 Firmware<jccn29ww
Lenovo Ideapad Flex 5 14alc7
Lenovo Ideapad Flex 5 16alc7 Firmware<jccn29ww
Lenovo Ideapad Flex 5 16alc7
Lenovo Legion S7-15imh5 Firmware<hacn37ww
Lenovo Legion S7-15imh5
Lenovo Legion S7-15ach6 Firmware<g1cn27ww
Lenovo Legion S7-15ach6
Lenovo Legion S7-15arh5 Firmware<fdcn40ww
Lenovo Legion S7-15arh5
Lenovo S145-14api Firmware<bucn33ww
Lenovo S145-14api
Lenovo S145-14ast Firmware<aycn28ww
Lenovo S145-14ast
Lenovo S145-15api Firmware<bucn33ww
Lenovo S145-15api
Lenovo S145-15ast Firmware<aycn28ww
Lenovo S145-15ast
Lenovo S540-13api Firmware<cxcn36ww
Lenovo S540-13api
Lenovo Ideapad S940-14iil Firmware<bqcn34ww
Lenovo Ideapad S940-14iil
Lenovo Yoga S940-14iil Firmware<bqcn34ww
Lenovo Yoga S940-14iil
Lenovo Ideapad Slim 1-14ast-05 Firmware<cwcn25ww
Lenovo Ideapad Slim 1-14ast-05
Lenovo Ideapad Slim 1-11ast-05 Firmware<cwcn25ww
Lenovo Ideapad Slim 1-11ast-05
Lenovo Thinkbook 13s G3 Acn Firmware<gmcn29ww
Lenovo Thinkbook 13s G3 Acn
Lenovo Thinkbook 13s G2 Are Firmware<fvcn24ww
Lenovo Thinkbook 13s G2 Are
Lenovo Thinkbook 13s G2 Itl Firmware<f9cn50ww
Lenovo Thinkbook 13s G2 Itl
Lenovo Thinkbook 13s-iml Firmware<cqcn37ww
Lenovo Thinkbook 13s-iml
Lenovo Thinkbook 14-iil Firmware<djcn28ww
Lenovo Thinkbook 14-iil
Lenovo Thinkbook 14-iml Firmware<cjcn38ww
Lenovo Thinkbook 14-iml
Lenovo Thinkbook 14p G2 Ach Firmware<gwcn41ww
Lenovo Thinkbook 14p G2 Ach
Lenovo Thinkbook 14s G2 Itl Firmware<f9cn50ww
Lenovo Thinkbook 14s G2 Itl
Lenovo Thinkbook 14s-iml Firmware<cqcn37ww
Lenovo Thinkbook 14s-iml
Lenovo Thinkbook 15-iil Firmware<djcn28ww
Lenovo Thinkbook 15-iil
Lenovo Thinkbook 15-iml Firmware<cjcn38ww
Lenovo Thinkbook 15-iml
Lenovo Thinkbook 16p G2 Ach Firmware<gxcn42ww
Lenovo Thinkbook 16p G2 Ach
Lenovo V130-15ikb Firmware<8vcn31ww
Lenovo V130-15ikb
Lenovo V14 G2-alc Firmware<glcn48ww
Lenovo V14 G2-alc
Lenovo V14-ada Firmware<e8cn36ww
Lenovo V14-ada
Lenovo V15 G2-alc Firmware<glcn48ww
Lenovo V15 G2-alc
Lenovo V15-ada Firmware<e8cn36ww
Lenovo V15-ada
Lenovo Yoga 9-15imh5 Firmware<epcn28ww
Lenovo Yoga 9-15imh5
Lenovo Yoga C640-13iml Firmware<chcn28ww
Lenovo Yoga C640-13iml
Lenovo Yoga C640-13iml Lte Firmware<chcn28ww
Lenovo Yoga C640-13iml Lte
Lenovo Yoga C940-15irh Firmware<bscn37ww
Lenovo Yoga C940-15irh
Lenovo Yoga S730-13iml Firmware<brcn20ww
Lenovo Yoga S730-13iml
Lenovo Yoga Slim 7 Pro-14ach5 Firmware<gzcn29ww
Lenovo Yoga Slim 7 Pro-14ach5
Lenovo Yoga Slim 7 Pro-14ach5 O Firmware<gzcn29ww
Lenovo Yoga Slim 7 Pro-14ach5 O
Lenovo Yoga Slim 7 Pro-14arh5 Firmware<gzcn24ww
Lenovo Yoga Slim 7 Pro-14arh5
Lenovo Ideapad 5-15alc05 Firmware<h2cn27ww
Lenovo Ideapad 5-15alc05
Remediation
Information
Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-91369
Event History
Jan 23, 2023
CVE Published
via MITRE·03:31 PM
Data Sourced
via MITRE·03:31 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-1892?
CVE-2022-1892 is classified as a high severity vulnerability due to its ability to allow an attacker with local privileges to execute arbitrary code.
2
How do I fix CVE-2022-1892?
To fix CVE-2022-1892, update the affected Lenovo firmware to the latest version as per the manufacturer's security advisory.
3
What products are affected by CVE-2022-1892?
CVE-2022-1892 affects several Lenovo Notebook products, including the 100E 2nd Gen, 100w Gen 3, 13w Yoga Gen 2, and others.
4
Who can exploit CVE-2022-1892?
An attacker with local privileges can exploit CVE-2022-1892 to execute arbitrary code on the affected system.
5
Are there any workarounds for CVE-2022-1892?
Currently, the best workaround for CVE-2022-1892 is to ensure that the system is updated to the latest firmware version.