High severity · published Jun 5, 2023
CVE-2022-48188
A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
I5
Ideacentre 510s-07icb Firmware · Lenovo
before m22kt48a; before m22kt49a · source: NVD
I5
Ideacentre 510s-07ick Firmware · Lenovo
before m30kt28a; before m1zkt40a · source: NVD
I7
Ideacentre 720-18apr Firmware · Lenovo
before m25kt63a · source: NVD
IA
Ideacentre Aio 3 21itl7 Firmware · Lenovo
before o5akt33 · source: NVD
IA
Ideacentre Aio 3-22itl6 Firmware · Lenovo
before o5akt33 · source: NVD
IA
Ideacentre Aio 3-24itl6 Firmware · Lenovo
before o5akt33 · source: NVD
IA
Ideacentre Aio 3-27itl6 Firmware · Lenovo
before o5akt33 · source: NVD
TM
Thinkcentre M720e Firmware · Lenovo
before m1zkt40a · source: NVD
TM
Thinkcentre M720q Firmware · Lenovo
before m1ukt70a · source: NVD
TM
Thinkcentre M720s Firmware · Lenovo
before m1ukt70a · source: NVD
TM
Thinkcentre M720t Firmware · Lenovo
before m1ukt70a · source: NVD
TM
Thinkcentre M725s Firmware · Lenovo
before m25kt63a · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-48188
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-48188
Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-124495
More from Ideacentre 510s-07icb Firmware
6.8
CVE-2021-3519
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes
6.7
CVE-2021-4211
A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with…