7.8
CWE
787 119
Advisory Published
Updated

CVE-2022-48181: Buffer Overflow

First published: Mon Jun 05 2023(Updated: )

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

Credit: psirt@lenovo.com

Affected SoftwareAffected VersionHow to fix
Lenovo Ideacentre C5-14imb05 Firmware<o4hkt3aa
Lenovo Ideacentre C5-14imb05
Lenovo Ideacentre 3 07ach7 Firmware<m4mkt12a
Lenovo Ideacentre 3 07ach7
Lenovo Ideacentre 3 07iab7 Firmware<m49kt21a
Lenovo Ideacentre 3 07iab7
Lenovo Ideacentre 3-07ada05 Firmware<o4fkt35a
Lenovo Ideacentre 3-07ada05
Lenovo Ideacentre 3-07ada05 Firmware<m4mkt12a
Lenovo Ideacentre 3-07imb05 Firmware<m2vkt1ea
Lenovo Ideacentre 3-07imb05
Lenovo Ideacentre 5 14iab7 Firmware<m42kt42a
Lenovo Ideacentre 5 14iab7
Lenovo Ideacentre 5-14acn6 Firmware<o5ekt24a
Lenovo Ideacentre 5-14acn6
Lenovo Ideacentre 5-14are05 Firmware<o4zkt2aa
Lenovo Ideacentre 5-14are05
Lenovo Ideacentre 5-14imb05 Firmware<o4hkt3aa
Lenovo Ideacentre 5-14imb05
Lenovo Ideacentre 5-14iob6 Firmware<m3gkt3aa
Lenovo Ideacentre 5-14iob6
Lenovo Ideacentre Aio 3 21itl7 Firmware<o5akt33
Lenovo Ideacentre Aio 3 21itl7
Lenovo Ideacentre Aio 3 22iap7 Firmware<o5nkt32a
Lenovo Ideacentre Aio 3 22iap7
Lenovo Ideacentre Aio 3 24iap7 Firmware<o5nkt32a
Lenovo Ideacentre Aio 3 24iap7
Lenovo Ideacentre Aio 3 27iap7 Firmware<o5nkt32a
Lenovo Ideacentre Aio 3 27iap7
Lenovo Ideacentre Aio 3-22imb05 Firmware<o5nkt32a
Lenovo Ideacentre Aio 3-22imb05
Lenovo Ideacentre Aio 3-22itl6 Firmware<o5akt33
Lenovo Ideacentre Aio 3-22itl6
Lenovo Ideacentre Aio 3-24alc6 Firmware<o5bkt25a
Lenovo Ideacentre Aio 3-24alc6
Lenovo Ideacentre Aio 3-24imb05 Firmware<o5nkt32a
Lenovo Ideacentre Aio 3-24imb05
Lenovo Ideacentre Aio 3-24itl6 Firmware<o5akt33
Lenovo Ideacentre Aio 3-24itl6
Lenovo Ideacentre Aio 3-27alc6 Firmware<o5bkt25a
Lenovo Ideacentre Aio 3-27alc6
Lenovo Ideacentre Aio 3-27imb05 Firmware<o5nkt32a
Lenovo Ideacentre Aio 3-27imb05
Lenovo Ideacentre Aio 3-27itl6 Firmware<o5akt33
Lenovo Ideacentre Aio 3-27itl6
Lenovo Ideacentre Aio 5 24iah7 Firmware<o5rkt39a
Lenovo Ideacentre Aio 5 24iah7
Lenovo Ideacentre Aio 5 27iah7 Firmware<o5rkt39a
Lenovo Ideacentre Aio 5 27iah7
Lenovo Ideacentre Creator 5-14iob6 Firmware<m3gkt3aa
Lenovo Ideacentre Creator 5-14iob6
Lenovo Ideacentre G5-14amr05 Firmware<o4zkt2aa
Lenovo Ideacentre G5-14amr05
Lenovo Ideacentre G5-14imb05 Firmware<o4hkt3aa
Lenovo Ideacentre G5-14imb05
Lenovo Ideacentre Gaming 5 17acn7 Firmware<o5ekt24a
Lenovo Ideacentre Gaming 5 17acn7
Lenovo Ideacentre Gaming 5 17iab7 Firmware<m42kt42a
Lenovo Ideacentre Gaming 5 17iab7
Lenovo Ideacentre Gaming 5-14acn6 Firmware<o5ekt24a
Lenovo Ideacentre Gaming 5-14acn6
Lenovo Ideacentre Gaming 5-14iob6 Firmware<m3gkt3aa
Lenovo Ideacentre Gaming 5-14iob6
Lenovo Ideacentre Mini 5 01iaq7 Firmware<o53kt0ea
Lenovo Ideacentre Mini 5 01iaq7
Lenovo Ideacentre Mini 5-01imh05 Firmware<o4ekt19a
Lenovo Ideacentre Mini 5-01imh05
Lenovo Legion C530-19icb Firmware<o4bkt22a
Lenovo Legion C530-19icb
Lenovo Legion R5-28imb05 Firmware<o4nkt1da
Lenovo Legion R5-28imb05
Lenovo Legion T5-26amr5 Firmware<o4mkt2da
Lenovo Legion T5-26amr5
Lenovo Legion T5-26iob6 Firmware<o54kt22a
Lenovo Legion T5-26iob6
Lenovo Legion T5-28icb05 Firmware<o4bkt22a
Lenovo Legion T5-28icb05
Lenovo Legion T5-28imb05 Firmware<o4nkt1da
Lenovo Legion T5-28imb05
Lenovo Legion T530-28icb Firmware<o4bkt22a
Lenovo Legion T530-28icb
Lenovo Legion T7-34iaz7 Firmware<o5hkt2aa
Lenovo Legion T7-34iaz7
Lenovo Legion T7-34imz5 Firmware<o4lkt20a
Lenovo Legion T7-34imz5
Lenovo Legion T7-34imz5 Firmware<o5fkt15a
Lenovo Lenovo Legion T5 26iab7 Firmware<o5lkt29a
Lenovo Lenovo Legion T5 26iab7
Lenovo Thinkcentre M600 Firmware<m00kt68a
Lenovo Thinkcentre M600
Lenovo Thinkcentre M60e Tiny Firmware<m3skt25a
Lenovo Thinkcentre M60e Tiny
Lenovo Thinkcentre M625q Firmware<m1wkt50a
Lenovo Thinkcentre M625q
Lenovo Thinkcentre M70c Firmware<m2vkt1ea
Lenovo Thinkcentre M70c
Lenovo Thinkcentre M70q Firmware<m2wkt59a
Lenovo Thinkcentre M70q
Lenovo Thinkcentre M70q Gen 2 Firmware<m3jkt37a
Lenovo Thinkcentre M70q Gen 2
Lenovo Thinkcentre M70q Gen 3 Firmware<m43kt1ba
Lenovo Thinkcentre M70q Gen 3
Lenovo Thinkcentre M70s Firmware<m2tkt52a
Lenovo Thinkcentre M70s
Lenovo Thinkcentre M70s Gen 3 Firmware<m41kt3da
Lenovo Thinkcentre M70s Gen 3
Lenovo Thinkcentre M70t Firmware<m2tkt52a
Lenovo Thinkcentre M70t
Lenovo Thinkcentre M70t Gen 3 Firmware<m41kt3da
Lenovo Thinkcentre M70t Gen 3
Lenovo Thinkcentre M720e Firmware<m1zkt40a
Lenovo Thinkcentre M720e
Lenovo Thinkcentre M720q Firmware<m1ukt70a
Lenovo Thinkcentre M720q
Lenovo Thinkcentre M720s Firmware<m1ukt70a
Lenovo Thinkcentre M720s
Lenovo Thinkcentre M720t Firmware<m1ukt70a
Lenovo Thinkcentre M720t
Lenovo Thinkcentre M725s Firmware<m25kt63a
Lenovo Thinkcentre M725s
Lenovo Thinkcentre M75n Firmware<m33kt27a
Lenovo Thinkcentre M75n
Lenovo Thinkcentre M75s Gen 2 Firmware<m46kt30a
Lenovo Thinkcentre M75s Gen 2
Lenovo Thinkcentre M75s Gen 2 Firmware<m3bkt2fa
Lenovo Thinkcentre M75s Gen 2 Firmware<m3akt4ca
Lenovo Thinkcentre M75s-1 Firmware<m2ckt4fa
Lenovo Thinkcentre M75s-1
Lenovo Thinkcentre M75t Gen 2 Firmware<m46kt30a
Lenovo Thinkcentre M75t Gen 2
Lenovo Thinkcentre M75t Gen 2 Firmware<m3bkt2fa
Lenovo Thinkcentre M75t Gen 2 Firmware<m3akt4ca
Lenovo Thinkcentre M80q Firmware<m2wkt59a
Lenovo Thinkcentre M80q
Lenovo Thinkcentre M80q Gen 3 Firmware<m4gkt23a
Lenovo Thinkcentre M80q Gen 3
Lenovo Thinkcentre M80s Firmware<m2tkt52a
Lenovo Thinkcentre M80s
Lenovo Thinkcentre M80s Gen 3 Firmware<m40kt3da
Lenovo Thinkcentre M80s Gen 3
Lenovo Thinkcentre M80t Firmware<m2tkt52a
Lenovo Thinkcentre M80t
Lenovo Thinkcentre M80t Gen 3 Firmware<m40kt3da
Lenovo Thinkcentre M80t Gen 3
Lenovo Thinkcentre M90a Firmware<m2rkt56a
Lenovo Thinkcentre M90a
Lenovo Thinkcentre M90a Gen 2 Firmware<m3lkt28a
Lenovo Thinkcentre M90a Gen 2
Lenovo Thinkcentre M90a Gen 3 Firmware<m4ikt19a
Lenovo Thinkcentre M90a Gen 3
Lenovo Thinkcentre M90a Pro Gen 3 Firmware<m4hkt19a
Lenovo Thinkcentre M90a Pro Gen 3
Lenovo Thinkcentre M90q Gen 2 Firmware<m3jkt37a
Lenovo Thinkcentre M90q Gen 2
Lenovo Thinkcentre M90q Gen 3 Firmware<m4gkt23a
Lenovo Thinkcentre M90q Gen 3
Lenovo Thinkcentre M90q Tiny Firmware<m2wkt59a
Lenovo Thinkcentre M90q Tiny
Lenovo Thinkcentre M90s Firmware<m2tkt52a
Lenovo Thinkcentre M90s
Lenovo Thinkcentre M90s Gen 3 Firmware<m40kt3da
Lenovo Thinkcentre M90s Gen 3
Lenovo Thinkcentre M90t Firmware<m2tkt52a
Lenovo Thinkcentre M90t
Lenovo Thinkcentre M90t Gen 3 Firmware<m40kt3da
Lenovo Thinkcentre M90t Gen 3
Lenovo Thinkcentre M920q Firmware<m1ukt70a
Lenovo Thinkcentre M920q
Lenovo Thinkcentre M920s Firmware<m1ukt70a
Lenovo Thinkcentre M920s
Lenovo Thinkcentre M920t Firmware<m1ukt70a
Lenovo Thinkcentre M920t
Lenovo Thinkcentre M920x Firmware<m1ukt70a
Lenovo Thinkcentre M920x
Lenovo Thinkcentre M920z Firmware<m1mkt55a
Lenovo Thinkcentre M920z
Lenovo Thinkcentre Neo 30a 22 Gen 3 Firmware<o5nkt32a
Lenovo Thinkcentre Neo 30a 22 Gen 3
Lenovo Thinkcentre Neo 30a 24 Gen 3 Firmware<o5nkt32a
Lenovo Thinkcentre Neo 30a 24 Gen 3
Lenovo Thinkcentre Neo 30a 27 Gen 3 Firmware<o5nkt32a
Lenovo Thinkcentre Neo 30a 27 Gen 3
Lenovo Thinkcentre Neo 50s Gen 3 Firmware<m49kt21a
Lenovo Thinkcentre Neo 50s Gen 3
Lenovo Thinkcentre Neo 50t Gen 3 Firmware<m42kt42a
Lenovo Thinkcentre Neo 50t Gen 3
Lenovo Thinkcentre Neo 70t Gen 3 Firmware<m40kt3da
Lenovo Thinkcentre Neo 70t Gen 3
Lenovo Thinkcentre T540-15ama G Firmware<m2ckt4fa
Lenovo Thinkcentre T540-15ama G
Lenovo Ideacentre 510s-07icb Firmware<m22kt49a
Lenovo Ideacentre 510s-07icb
Lenovo Ideacentre 510s-07ick Firmware<m30kt28a
Lenovo Ideacentre 510s-07ick
Lenovo Ideacentre 510s-07ick Firmware<m1zkt40a
Lenovo Ideacentre 720-18apr Firmware<m25kt63a
Lenovo Ideacentre 720-18apr
Lenovo V30a-22itl Firmware<o5akt33
Lenovo V30a-22itl
Lenovo V30a-24itl Firmware<o5akt33
Lenovo V30a-24itl
Lenovo V35s-07ada Firmware<m4mkt12a
Lenovo V35s-07ada
Lenovo V50s-07imb Firmware<m2vkt1ea
Lenovo V50s-07imb
Lenovo V50t-13imb Firmware<o4hkt3aa
Lenovo V50t-13imb
Lenovo V50t-13iob G2 Firmware<m3gkt3aa
Lenovo V50t-13iob G2
Lenovo V530s-07icb Firmware<m22kt49a
Lenovo V530s-07icb
Lenovo V530s-07icr Firmware<m1zkt40a
Lenovo V530s-07icr
Lenovo V55t Gen 2 13acn Firmware<o5jkt23a
Lenovo V55t Gen 2 13acn
Lenovo Thinkstation P320 Firmware<s06kt63a
Lenovo Thinkstation P320
Lenovo Thinkstation P330 Tiny Firmware<m1ukt70a
Lenovo Thinkstation P330 Tiny
Lenovo Thinkstation P330 Firmware<m1vkt6fa
Lenovo Thinkstation P330
Lenovo Thinkstation P330 Gen 2 Firmware<m1vkt6fa
Lenovo Thinkstation P330 Gen 2
Lenovo Thinkstation P340 Tiny Firmware<m2wkt59a
Lenovo Thinkstation P340 Tiny
Lenovo Thinkstation P340 Firmware<s08kt53a
Lenovo Thinkstation P340
Lenovo Thinkstation P350 Tiny Firmware<m3jkt37a
Lenovo Thinkstation P350 Tiny
Lenovo Thinkstation P350 Firmware<s0akt39a
Lenovo Thinkstation P350
Lenovo Thinkstation P360 Tiny Firmware<m4gkt23a
Lenovo Thinkstation P360 Tiny
Lenovo Thinkstation P360 Firmware<s0ekt40a
Lenovo Thinkstation P360
Lenovo Thinkstation P360 Firmware<s0ekt43a

Remedy

Update system firmware to the version (or newer) indicated for your model in the related Lenovo product security advisory:  https://support.lenovo.com/us/en/product_security/LEN-124495 https://support.lenovo.com/us/en/product_security/LEN-124495

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203