CVE Feed

    Dashboard / CVE / CVE-2022-48181

    CVE-2022-48181

    An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

    Published:Jun 5, 2023
    Last Modified:Jan 8, 2025
    EPS:Jun 5, 2023
    EPSS Score:0.00032
    CVSS Score:6.7

    Affected Products

    Vendor
    Lenovo
    Product
    Ideacentre 3-07ada05
    Vendor
    Lenovo
    Product
    Ideacentre 3-07ada05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 3-07imb05
    Vendor
    Lenovo
    Product
    Ideacentre 3-07imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 3 07ach7
    Vendor
    Lenovo
    Product
    Ideacentre 3 07ach7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 3 07iab7
    Vendor
    Lenovo
    Product
    Ideacentre 3 07iab7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14acn6
    Vendor
    Lenovo
    Product
    Ideacentre 5-14acn6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14are05
    Vendor
    Lenovo
    Product
    Ideacentre 5-14are05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14imb05
    Vendor
    Lenovo
    Product
    Ideacentre 5-14imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 510s-07icb
    Vendor
    Lenovo
    Product
    Ideacentre 510s-07icb Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 510s-07ick
    Vendor
    Lenovo
    Product
    Ideacentre 510s-07ick Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5 14iab7
    Vendor
    Lenovo
    Product
    Ideacentre 5 14iab7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 720-18apr
    Vendor
    Lenovo
    Product
    Ideacentre 720-18apr Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-22imb05
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-22imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-22itl6
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-22itl6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24alc6
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24alc6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24imb05
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24itl6
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24itl6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-27alc6
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-27alc6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-27imb05
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-27imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-27itl6
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-27itl6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 21itl7
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 21itl7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 22iap7
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 22iap7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 24iap7
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 24iap7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 27iap7
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 27iap7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 5 24iah7
    Vendor
    Lenovo
    Product
    Ideacentre Aio 5 24iah7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 5 27iah7
    Vendor
    Lenovo
    Product
    Ideacentre Aio 5 27iah7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre C5-14imb05
    Vendor
    Lenovo
    Product
    Ideacentre C5-14imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Creator 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre Creator 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre G5-14amr05
    Vendor
    Lenovo
    Product
    Ideacentre G5-14amr05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre G5-14imb05
    Vendor
    Lenovo
    Product
    Ideacentre G5-14imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14acn6
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14acn6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5 17acn7
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5 17acn7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5 17iab7
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5 17iab7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Mini 5-01imh05
    Vendor
    Lenovo
    Product
    Ideacentre Mini 5-01imh05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Mini 5 01iaq7
    Vendor
    Lenovo
    Product
    Ideacentre Mini 5 01iaq7 Firmware
    Vendor
    Lenovo
    Product
    Legion C530-19icb
    Vendor
    Lenovo
    Product
    Legion C530-19icb Firmware
    Vendor
    Lenovo
    Product
    Legion R5-28imb05
    Vendor
    Lenovo
    Product
    Legion R5-28imb05 Firmware
    Vendor
    Lenovo
    Product
    Legion T5-26amr5
    Vendor
    Lenovo
    Product
    Legion T5-26amr5 Firmware
    Vendor
    Lenovo
    Product
    Legion T5-26iob6
    Vendor
    Lenovo
    Product
    Legion T5-26iob6 Firmware
    Vendor
    Lenovo
    Product
    Legion T5-28icb05
    Vendor
    Lenovo
    Product
    Legion T5-28icb05 Firmware
    Vendor
    Lenovo
    Product
    Legion T5-28imb05
    Vendor
    Lenovo
    Product
    Legion T5-28imb05 Firmware
    Vendor
    Lenovo
    Product
    Legion T530-28icb
    Vendor
    Lenovo
    Product
    Legion T530-28icb Firmware
    Vendor
    Lenovo
    Product
    Legion T7-34iaz7
    Vendor
    Lenovo
    Product
    Legion T7-34iaz7 Firmware
    Vendor
    Lenovo
    Product
    Legion T7-34imz5
    Vendor
    Lenovo
    Product
    Legion T7-34imz5 Firmware
    Vendor
    Lenovo
    Product
    Lenovo Legion T5 26iab7
    Vendor
    Lenovo
    Product
    Lenovo Legion T5 26iab7 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M600
    Vendor
    Lenovo
    Product
    Thinkcentre M600 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M60e Tiny
    Vendor
    Lenovo
    Product
    Thinkcentre M60e Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M625q
    Vendor
    Lenovo
    Product
    Thinkcentre M625q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70c
    Vendor
    Lenovo
    Product
    Thinkcentre M70c Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70q
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70s
    Vendor
    Lenovo
    Product
    Thinkcentre M70s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70s Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M70s Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70t
    Vendor
    Lenovo
    Product
    Thinkcentre M70t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70t Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M70t Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M720e
    Vendor
    Lenovo
    Product
    Thinkcentre M720e Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M720q
    Vendor
    Lenovo
    Product
    Thinkcentre M720q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M720s
    Vendor
    Lenovo
    Product
    Thinkcentre M720s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M720t
    Vendor
    Lenovo
    Product
    Thinkcentre M720t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M725s
    Vendor
    Lenovo
    Product
    Thinkcentre M725s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75n
    Vendor
    Lenovo
    Product
    Thinkcentre M75n Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75s-1
    Vendor
    Lenovo
    Product
    Thinkcentre M75s-1 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75s Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M75s Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75t Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M75t Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80q
    Vendor
    Lenovo
    Product
    Thinkcentre M80q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80q Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M80q Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80s
    Vendor
    Lenovo
    Product
    Thinkcentre M80s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80s Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M80s Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80t
    Vendor
    Lenovo
    Product
    Thinkcentre M80t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80t Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M80t Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90a
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Pro Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Pro Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Tiny
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90s
    Vendor
    Lenovo
    Product
    Thinkcentre M90s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90s Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M90s Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90t
    Vendor
    Lenovo
    Product
    Thinkcentre M90t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90t Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M90t Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920q
    Vendor
    Lenovo
    Product
    Thinkcentre M920q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920s
    Vendor
    Lenovo
    Product
    Thinkcentre M920s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920t
    Vendor
    Lenovo
    Product
    Thinkcentre M920t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920x
    Vendor
    Lenovo
    Product
    Thinkcentre M920x Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920z
    Vendor
    Lenovo
    Product
    Thinkcentre M920z Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 22 Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 22 Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 24 Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 24 Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 27 Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 27 Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50s Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50s Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50t Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50t Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 70t Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 70t Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre T540-15ama G
    Vendor
    Lenovo
    Product
    Thinkcentre T540-15ama G Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P320
    Vendor
    Lenovo
    Product
    Thinkstation P320 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P330
    Vendor
    Lenovo
    Product
    Thinkstation P330 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P330 Gen 2
    Vendor
    Lenovo
    Product
    Thinkstation P330 Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P330 Tiny
    Vendor
    Lenovo
    Product
    Thinkstation P330 Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P340
    Vendor
    Lenovo
    Product
    Thinkstation P340 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P340 Tiny
    Vendor
    Lenovo
    Product
    Thinkstation P340 Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P350
    Vendor
    Lenovo
    Product
    Thinkstation P350 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P350 Tiny
    Vendor
    Lenovo
    Product
    Thinkstation P350 Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P360
    Vendor
    Lenovo
    Product
    Thinkstation P360 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P360 Tiny
    Vendor
    Lenovo
    Product
    Thinkstation P360 Tiny Firmware
    Vendor
    Lenovo
    Product
    V30a-22itl
    Vendor
    Lenovo
    Product
    V30a-22itl Firmware
    Vendor
    Lenovo
    Product
    V30a-24itl
    Vendor
    Lenovo
    Product
    V30a-24itl Firmware
    Vendor
    Lenovo
    Product
    V35s-07ada
    Vendor
    Lenovo
    Product
    V35s-07ada Firmware
    Vendor
    Lenovo
    Product
    V50s-07imb
    Vendor
    Lenovo
    Product
    V50s-07imb Firmware
    Vendor
    Lenovo
    Product
    V50t-13imb
    Vendor
    Lenovo
    Product
    V50t-13imb Firmware
    Vendor
    Lenovo
    Product
    V50t-13iob G2
    Vendor
    Lenovo
    Product
    V50t-13iob G2 Firmware
    Vendor
    Lenovo
    Product
    V530s-07icb
    Vendor
    Lenovo
    Product
    V530s-07icb Firmware
    Vendor
    Lenovo
    Product
    V530s-07icr
    Vendor
    Lenovo
    Product
    V530s-07icr Firmware
    Vendor
    Lenovo
    Product
    V55t Gen 2 13acn
    Vendor
    Lenovo
    Product
    V55t Gen 2 13acn Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-43577 (CVSS 6.7) — A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local at…
    CVE-2023-43576 (CVSS 6.7) — A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local a…
    CVE-2023-43575 (CVSS 6.7) — A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow…
    CVE-2023-43574 (CVSS 4.4) — A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products …
    CVE-2023-43573 (CVSS 6.7) — A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products t…
    CVE-2023-43572 (CVSS 4.4) — A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may all…
    CVE-2023-45079 (CVSS 6.7) — A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with e…
    CVE-2023-45078 (CVSS 6.7) — A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attack…
    CVE-2023-45077 (CVSS 6.7) — A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with el…
    CVE-2023-45076 (CVSS 6.7) — A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with el…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High