CVE-2022-3742: Medium severity lenovo ideapad 1 14iau7 firmware vulnerability
Published Aug 23, 2023
·Updated
A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper buffer validation.
Affected Software
174 affected components
Lenovo Ideapad 1 14iau7 Firmware<jkcn34ww
Lenovo Ideapad 1 14iau7
Lenovo Ideapad 1 14igl7 Firmware<kkcn15ww
Lenovo Ideapad 1 14igl7
Lenovo Ideapad 1 15iau7 Firmware<jkcn34ww
Lenovo Ideapad 1 15iau7
Lenovo Ideapad 1 15igl7 Firmware<kkcn15ww
Lenovo Ideapad 1 15igl7
Lenovo Ideapad 1-14ijl7 Firmware<htcn31ww
Lenovo Ideapad 1-14ijl7
Lenovo Ideapad 1-15ijl7 Firmware<htcn31ww
Lenovo Ideapad 1-15ijl7
Lenovo Ideapad 3 14iau7 Firmware<jkcn34ww
Lenovo Ideapad 3 14iau7
Lenovo Ideapad 3 15iau7 Firmware<jkcn34ww
Lenovo Ideapad 3 15iau7
Lenovo Ideapad 3 17iau7 Firmware<jkcn34ww
Lenovo Ideapad 3 17iau7
Lenovo Ideapad 3-15igl05 Firmware<dvcn28ww
Lenovo Ideapad 3-15igl05
Lenovo Ideapad 3-17iil05 Firmware<emcn56ww
Lenovo Ideapad 3-17iil05
Lenovo Ideapad 3-17itl6 Firmware<ggcn51ww
Lenovo Ideapad 3-17itl6
Lenovo Ideapad 5 15ial7 Firmware<jbcn27ww
Lenovo Ideapad 5 15ial7
Lenovo Ideapad 5-15itl05 Firmware<fhcn70ww
Lenovo Ideapad 5-15itl05
Lenovo L3-15iml05 Firmware<ejcn30ww
Lenovo L3-15iml05
Lenovo L3-15itl6 Firmware<gfcn29ww
Lenovo L3-15itl6
Lenovo Legion 5 15iah7 Firmware<j2cn49ww
Lenovo Legion 5 15iah7
Lenovo Legion 5 15iah7h Firmware<j2cn49ww
Lenovo Legion 5 15iah7h
Lenovo Legion 5 Pro 16iah7 Firmware<j2cn49ww
Lenovo Legion 5 Pro 16iah7
Lenovo Legion 5 Pro 16iah7h Firmware<j2cn49ww
Lenovo Legion 5 Pro 16iah7h
Lenovo Legion 5 Pro-16ith6 Firmware<h1cn52ww
Lenovo Legion 5 Pro-16ith6
Lenovo Legion 5 Pro-16ith6h Firmware<h1cn52ww
Lenovo Legion 5 Pro-16ith6h
Lenovo Legion 5-15imh05 Firmware<efcn58ww
Lenovo Legion 5-15imh05
Lenovo Legion 5-15imh05h Firmware<efcn58ww
Lenovo Legion 5-15imh05h
Lenovo Legion 5-15imh6 Firmware<g8cn22ww
Lenovo Legion 5-15imh6
Lenovo Legion 5-15ith6 Firmware<h1cn52ww
Lenovo Legion 5-15ith6
Lenovo Legion 5-15ith6h Firmware<h1cn52ww
Lenovo Legion 5-15ith6h
Lenovo Legion 5-17imh05 Firmware<efcn58ww
Lenovo Legion 5-17imh05
Lenovo Legion 5-17imh05h Firmware<efcn58ww
Lenovo Legion 5-17imh05h
Lenovo Legion 5-17ith6 Firmware<h1cn52ww
Lenovo Legion 5-17ith6
Lenovo Legion 5-17ith6h Firmware<h1cn52ww
Lenovo Legion 5-17ith6h
Lenovo Legion 5p-15imh05 Firmware<efcn58ww
Lenovo Legion 5p-15imh05
Lenovo Legion 5p-15imh05h Firmware<efcn58ww
Lenovo Legion 5p-15imh05h
Lenovo Legion 7 16iax7 Firmware<k1cn40ww
Lenovo Legion 7 16iax7
Lenovo Legion 7-16ithg6 Firmware<h1cn52ww
Lenovo Legion 7-16ithg6
Lenovo S14 G2 Itl Firmware<ggcn51ww
Lenovo S14 G2 Itl
Lenovo S14 G3 Iap Firmware<jkcn34ww
Lenovo S14 G3 Iap
Lenovo Slim 7 14iap7 Firmware<jhcn28ww
Lenovo Slim 7 14iap7
Lenovo Slim 7 Carbon 13iap7 Firmware<k2cn34ww
Lenovo Slim 7 Carbon 13iap7
Lenovo Slim 7 Prox 14iah7 Firmware<hmcn41ww
Lenovo Slim 7 Prox 14iah7
Lenovo Slim 9 14iap7 Firmware<j3cn49ww
Lenovo Slim 9 14iap7
Lenovo Thinkbook 15p Imh Firmware<f6cn26ww
Lenovo Thinkbook 15p Imh
Lenovo V14 G2 Ijl Firmware<htcn31ww
Lenovo V14 G2 Ijl
Lenovo V14 G3 Iap Firmware<jkcn34ww
Lenovo V14 G3 Iap
Lenovo V15 G2 Ijl Firmware<htcn31ww
Lenovo V15 G2 Ijl
Lenovo V15 G3 Iap Firmware<jkcn34ww
Lenovo V15 G3 Iap
Lenovo V17 G3 Iap Firmware<jkcn34ww
Lenovo V17 G3 Iap
Lenovo S540-13itl Firmware<fzcn26ww
Lenovo S540-13itl
Lenovo Slim 7 Pro-14ihu5 Firmware<fjcn74ww
Lenovo Slim 7 Pro-14ihu5
Lenovo Slim 9-14itl05 Firmware<escn56ww
Lenovo Slim 9-14itl05
Lenovo Thinkbook 15p G2 Ith Firmware<hjcn32ww
Lenovo Thinkbook 15p G2 Ith
Lenovo V14 G1-iml Firmware<dxcn44ww
Lenovo V14 G1-iml
Lenovo V14 G2-itl Firmware<ggcn51ww
Lenovo V14 G2-itl
Lenovo V14-igl Firmware<dvcn28ww
Lenovo V14-igl
Lenovo V15 G1-iml Firmware<dxcn44ww
Lenovo V15 G1-iml
Lenovo V15 G2-itl Firmware<ggcn51ww
Lenovo V15 G2-itl
Lenovo V15-igl Firmware<dvcn28ww
Lenovo V15-igl
Lenovo V17 G2-itl Firmware<ggcn51ww
Lenovo V17 G2-itl
Lenovo V17-iil Firmware<emcn56ww
Lenovo V17-iil
Lenovo Yoga 7 14ial7 Firmware<j1cn35ww
Lenovo Yoga 7 14ial7
Lenovo Yoga 7 16iah7 Firmware<j1cn35ww
Lenovo Yoga 7 16iah7
Lenovo Yoga 7 16iap7 Firmware<j1cn35ww
Lenovo Yoga 7 16iap7
Lenovo Yoga 7-14itl5 Firmware<f5cn59ww
Lenovo Yoga 7-14itl5
Lenovo Yoga 7-15itl5 Firmware<f5cn59ww
Lenovo Yoga 7-15itl5
Lenovo Yoga 9 14iap7 Firmware<hncn42ww
Lenovo Yoga 9 14iap7
Lenovo Yoga Slim 7 Carbon 13iap7 Firmware<k2cn34ww
Lenovo Yoga Slim 7 Carbon 13iap7
Lenovo Yoga Slim 7 Pro 14iah7 Firmware<krcn14ww
Lenovo Yoga Slim 7 Pro 14iah7
Lenovo Yoga Slim 7 Pro 14iap7 Firmware<jhcn28ww
Lenovo Yoga Slim 7 Pro 14iap7
Lenovo Yoga Slim 7 Pro-14ihu5 Firmware<fjcn74ww
Lenovo Yoga Slim 7 Pro-14ihu5
Lenovo Yoga Slim 7 Pro-14ihu5 O Firmware<fjcn74ww
Lenovo Yoga Slim 7 Pro-14ihu5 O
Lenovo Yoga Slim 7 Pro-14itl5 Firmware<fjcn74ww
Lenovo Yoga Slim 7 Pro-14itl5
Lenovo Yoga Slim 7 Prox 14iah7 Firmware<hmcn41ww
Lenovo Yoga Slim 7 Prox 14iah7
Lenovo Yoga Slim 9 14iap7 Firmware<j3cn49ww
Lenovo Yoga Slim 9 14iap7
Lenovo Yoga Slim 9-14itl05 Firmware<escn56ww
Lenovo Yoga Slim 9-14itl05
Lenovo Ideapad 3-14igl05 Firmware<dvcn28ww
Lenovo Ideapad 3-14igl05
Lenovo Ideapad 3-14iil05 Firmware<emcn56ww
Lenovo Ideapad 3-14iil05
Lenovo Ideapad 3-14iml05 Firmware<dxcn44ww
Lenovo Ideapad 3-14iml05
Lenovo Ideapad 3-14itl05 Firmware<gccn32ww
Lenovo Ideapad 3-14itl05
Lenovo Ideapad 3-14itl6 Firmware<ggcn51ww
Lenovo Ideapad 3-14itl6
Lenovo Ideapad 3-15iil05 Firmware<emcn56ww
Lenovo Ideapad 3-15iil05
Lenovo Ideapad 3-15iml05 Firmware<dxcn44ww
Lenovo Ideapad 3-15iml05
Lenovo Ideapad 3-15itl05 Firmware<gccn32ww
Lenovo Ideapad 3-15itl05
Lenovo Ideapad 3-15itl6 Firmware<ggcn51ww
Lenovo Ideapad 3-15itl6
Lenovo Ideapad 3-17iml05 Firmware<dxcn44ww
Lenovo Ideapad 3-17iml05
Lenovo Ideapad 5-15iil05 Firmware<dpcn58ww
Lenovo Ideapad 5-15iil05
Lenovo Ideapad Creator 5-15imh05 Firmware<egcn40ww
Lenovo Ideapad Creator 5-15imh05
Lenovo Ideapad Gaming 3-15imh05 Firmware<egcn40ww
Lenovo Ideapad Gaming 3-15imh05
Remediation
Information
Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-103710.
Event History
Aug 23, 2023
CVE Published
via MITRE·07:42 PM
Data Sourced
via MITRE·07:42 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-3742?
CVE-2022-3742 has been classified as a high severity vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2022-3742?
To fix CVE-2022-3742, users should update the BIOS firmware to the latest version provided by Lenovo.
3
Who is affected by CVE-2022-3742?
CVE-2022-3742 affects specific Lenovo consumer notebook models, including various configurations of the IdeaPad series.
4
What type of vulnerability is CVE-2022-3742?
CVE-2022-3742 is a buffer validation vulnerability that can be exploited by local attackers with elevated privileges.
5
What are the potential consequences of CVE-2022-3742?
If exploited, CVE-2022-3742 could allow an attacker to execute arbitrary code on the affected system, potentially compromising data integrity and confidentiality.