Description
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Published: 2023-01-23
Score: 6.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-91369

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-25164 A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
History

Mon, 14 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00046}

epss

{'score': 0.00037}


Wed, 02 Apr 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Lenovo 100e 2nd Gen 100e 2nd Gen Firmware 100w Gen 3 100w Gen 3 Firmware 13w Yoga 13w Yoga Firmware 14w Gen 2 14w Gen 2 Firmware 300e 2nd Gen 300e 2nd Gen Firmware 300w Gen 3 300w Gen 3 Firmware 500w Gen 3 500w Gen 3 Firmware 730s-13iml 730s-13iml Firmware Flex 3-11ada05 Flex 3-11ada05 Firmware Flex 5-14alc05 Flex 5-14alc05 Firmware Flex 5-14are05 Flex 5-14are05 Firmware Flex 5-14iil05 Flex 5-14iil05 Firmware Flex 5-14itl05 Flex 5-14itl05 Firmware Flex 5-15alc05 Flex 5-15alc05 Firmware Flex 5-15iil05 Flex 5-15iil05 Firmware Flex 5-15itl05 Flex 5-15itl05 Firmware Ideapad 1-11ada05 Ideapad 1-11ada05 Firmware Ideapad 1-11igl05 Ideapad 1-11igl05 Firmware Ideapad 1-14ada05 Ideapad 1-14ada05 Firmware Ideapad 1-14igl05 Ideapad 1-14igl05 Firmware Ideapad 3-14ada05 Ideapad 3-14ada05 Firmware Ideapad 3-14ada6 Ideapad 3-14ada6 Firmware Ideapad 3-14alc6 Ideapad 3-14alc6 Firmware Ideapad 3-15ada05 Ideapad 3-15ada05 Firmware Ideapad 3-15ada6 Ideapad 3-15ada6 Firmware Ideapad 3-15alc6 Ideapad 3-15alc6 Firmware Ideapad 3-17ada05 Ideapad 3-17ada05 Firmware Ideapad 3-17ada6 Ideapad 3-17ada6 Firmware Ideapad 3-17alc6 Ideapad 3-17alc6 Firmware Ideapad 5-15alc05 Ideapad 5-15alc05 Firmware Ideapad 5 15aba7 Ideapad 5 15aba7 Firmware Ideapad Flex 5 14alc7 Ideapad Flex 5 14alc7 Firmware Ideapad Flex 5 16alc7 Ideapad Flex 5 16alc7 Firmware Ideapad S940-14iil Ideapad S940-14iil Firmware Ideapad Slim 1-11ast-05 Ideapad Slim 1-11ast-05 Firmware Ideapad Slim 1-14ast-05 Ideapad Slim 1-14ast-05 Firmware Legion S7-15ach6 Legion S7-15ach6 Firmware Legion S7-15arh5 Legion S7-15arh5 Firmware Legion S7-15imh5 Legion S7-15imh5 Firmware S145-14api S145-14api Firmware S145-14ast S145-14ast Firmware S145-15api S145-15api Firmware S145-15ast S145-15ast Firmware S540-13api S540-13api Firmware Thinkbook 13s-iml Thinkbook 13s-iml Firmware Thinkbook 13s G2 Are Thinkbook 13s G2 Are Firmware Thinkbook 13s G2 Itl Thinkbook 13s G2 Itl Firmware Thinkbook 13s G3 Acn Thinkbook 13s G3 Acn Firmware Thinkbook 14-iil Thinkbook 14-iil Firmware Thinkbook 14-iml Thinkbook 14-iml Firmware Thinkbook 14p G2 Ach Thinkbook 14p G2 Ach Firmware Thinkbook 14s-iml Thinkbook 14s-iml Firmware Thinkbook 14s G2 Itl Thinkbook 14s G2 Itl Firmware Thinkbook 15-iil Thinkbook 15-iil Firmware Thinkbook 15-iml Thinkbook 15-iml Firmware Thinkbook 16p G2 Ach Thinkbook 16p G2 Ach Firmware V130-15ikb V130-15ikb Firmware V14-ada V14-ada Firmware V14 G2-alc V14 G2-alc Firmware V15-ada V15-ada Firmware V15 G2-alc V15 G2-alc Firmware Yoga 9-15imh5 Yoga 9-15imh5 Firmware Yoga C640-13iml Yoga C640-13iml Firmware Yoga C640-13iml Lte Yoga C640-13iml Lte Firmware Yoga C940-15irh Yoga C940-15irh Firmware Yoga S730-13iml Yoga S730-13iml Firmware Yoga S940-14iil Yoga S940-14iil Firmware Yoga Slim 7 Pro-14ach5 Yoga Slim 7 Pro-14ach5 Firmware Yoga Slim 7 Pro-14ach5 O Yoga Slim 7 Pro-14ach5 O Firmware Yoga Slim 7 Pro-14arh5 Yoga Slim 7 Pro-14arh5 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2025-04-02T14:37:24.386Z

Reserved: 2022-05-25T20:29:39.456Z

Link: CVE-2022-1892

cve-icon Vulnrichment

Updated: 2024-08-03T00:17:00.914Z

cve-icon NVD

Status : Modified

Published: 2023-01-26T21:15:25.467

Modified: 2024-11-21T06:41:41.637

Link: CVE-2022-1892

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses