2 lines
5.0 KiB
JSON
2 lines
5.0 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"BIOS","vendor":"Lenovo","versions":[{"status":"affected","version":"various"}]}],"source":"psirt@lenovo.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkbook_14-iml_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"495AE9CC-8F17-40CF-98AA-8CD8DAF49E29","versionEndExcluding":"cjcn38ww","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkbook_14-iml:-:*:*:*:*:*:*:*","matchCriteriaId":"B6839816-92D3-4698-893E-DF7D99C487C1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkbook_14-iil_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"036C342E-1F74-4B63-A06B-06157A6797E8","versionEndExcluding":"djcn28ww","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkbook_14-iil:-:*:*:*:*:*:*:*","matchCriteriaId":"E1CF3129-19E2-4649-B0E8-79EB5B3EB1F7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkbook_15-iil_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F4947120-80EC-4DD8-B386-80FF9E749B76","versionEndExcluding":"djcn28ww","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkbook_15-iil:-:*:*:*:*:*:*:*","matchCriteriaId":"F4CEE028-83AF-4AFD-A3F1-C0DA6070FC48","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkbook_15-iml_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8BF015D2-2202-4330-A1F2-9E319A0CFC73","versionEndExcluding":"cjcn38ww","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkbook_15-iml:-:*:*:*:*:*:*:*","matchCriteriaId":"CA4C15FE-8601-4948-BCF4-5A4A5E307759","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:yoga_c640-13iml_lte_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"A3FA80A4-ED4B-40E1-AC05-F355A880C374","versionEndExcluding":"chcn28ww","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:yoga_c640-13iml_lte:-:*:*:*:*:*:*:*","matchCriteriaId":"6E2E3608-02DC-40C8-A92D-04E50B81F534","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:yoga_c640-13iml_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E747094D-17B6-4954-A346-46934230091B","versionEndExcluding":"chcn28ww","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:yoga_c640-13iml:-:*:*:*:*:*:*:*","matchCriteriaId":"709C368C-A159-45F9-BD23-ED07A5CF08A2","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code."},{"lang":"es","value":"Un desbordamiento de búfer en el controlador SystemLoadDefaultDxe en algunos productos portátiles Lenovo puede permitir que un atacante con privilegios locales ejecute código arbitrario."}],"id":"CVE-2022-1891","lastModified":"2026-06-17T04:23:17.550","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":5.9,"source":"psirt@lenovo.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-1891","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-04-02T14:34:12.315495Z","version":"2.0.3"}}]},"published":"2023-01-26T21:15:25.193","references":[{"source":"psirt@lenovo.com","tags":["Vendor Advisory"],"url":"https://support.lenovo.com/us/en/product_security/LEN-91369"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.lenovo.com/us/en/product_security/LEN-91369"}],"sourceIdentifier":"psirt@lenovo.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"}],"source":"psirt@lenovo.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-120"}],"source":"nvd@nist.gov","type":"Primary"}]}
|