Heap-based buffer overflow in Lenovo BIOS
Priority LOW 36CWE-122Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-122 and the CVSS impact.
Summary
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00353 29th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | BIOS | various | — | No fix listed | CNA |
- BIOS VendorLenovo Affected various Fixed in — No fix listed CNA
CPE configurations NVD · 140
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:100e_2nd_gen_firmware:*:*:*:*:*:*:*:* | before frcn23ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:100e_2nd_gen:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:100w_gen_3_firmware:*:*:*:*:*:*:*:* | before gacn38ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:100w_gen_3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:13w_yoga_firmware:*:*:*:*:*:*:*:* | before jacn31ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:13w_yoga:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:14w_gen_2_firmware:*:*:*:*:*:*:*:* | before h0cn21ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:14w_gen_2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:300e_2nd_gen_firmware:*:*:*:*:*:*:*:* | before frcn23ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:300e_2nd_gen:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:100e_2nd_gen_firmware:*:*:*:*:*:*:*:* Versions before frcn23ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:100e_2nd_gen:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:100w_gen_3_firmware:*:*:*:*:*:*:*:* Versions before gacn38ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:100w_gen_3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:13w_yoga_firmware:*:*:*:*:*:*:*:* Versions before jacn31ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:13w_yoga:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:14w_gen_2_firmware:*:*:*:*:*:*:*:* Versions before h0cn21ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:14w_gen_2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:300e_2nd_gen_firmware:*:*:*:*:*:*:*:* Versions before frcn23ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:300e_2nd_gen:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Show 130 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:300w_gen_3_firmware:*:*:*:*:*:*:*:* | before gacn38ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:300w_gen_3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:500w_gen_3_firmware:*:*:*:*:*:*:*:* | before g6cn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:500w_gen_3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:730s-13iml_firmware:*:*:*:*:*:*:*:* | before brcn20ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:730s-13iml:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:flex_3-11ada05_firmware:*:*:*:*:*:*:*:* | before fpcn26ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:flex_3-11ada05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:flex_5-14alc05_firmware:*:*:*:*:*:*:*:* | before gjcn27ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:flex_5-14alc05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:flex_5-14are05_firmware:*:*:*:*:*:*:*:* | before eecn39ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:flex_5-14are05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:flex_5-14iil05_firmware:*:*:*:*:*:*:*:* | before eecn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:flex_5-14iil05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:flex_5-14itl05_firmware:*:*:*:*:*:*:*:* | before fxcn38ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:flex_5-14itl05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:flex_5-15alc05_firmware:*:*:*:*:*:*:*:* | before gjcn27ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:flex_5-15alc05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:flex_5-15iil05_firmware:*:*:*:*:*:*:*:* | before eccn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:flex_5-15iil05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:flex_5-15itl05_firmware:*:*:*:*:*:*:*:* | before fxcn38ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:flex_5-15itl05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_1-11ada05_firmware:*:*:*:*:*:*:*:* | before fqcn26ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_1-11ada05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_1-11igl05_firmware:*:*:*:*:*:*:*:* | before dwcn24ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_1-11igl05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_1-14ada05_firmware:*:*:*:*:*:*:*:* | before fqcn26ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_1-14ada05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_1-14igl05_firmware:*:*:*:*:*:*:*:* | before dwcn24ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_1-14igl05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-15ada05_firmware:*:*:*:*:*:*:*:* | before e8cn36ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-15ada05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-14ada05_firmware:*:*:*:*:*:*:*:* | before e8cn36ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-14ada05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-14ada6_firmware:*:*:*:*:*:*:*:* | before hbcn24ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-14ada6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:*:*:*:*:*:*:*:* | before glcn48ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-14alc6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-15ada6_firmware:*:*:*:*:*:*:*:* | before hbcn24ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-15ada6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:*:*:*:*:*:*:*:* | before glcn48ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-15alc6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware:*:*:*:*:*:*:*:* | before e8cn36ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-17alc6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-17ada05_firmware:*:*:*:*:*:*:*:* | before hbcn24ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-17ada05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-17ada6_firmware:*:*:*:*:*:*:*:* | before glcn48ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-17ada6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_5_15aba7_firmware:*:*:*:*:*:*:*:* | before kacn14ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_5_15aba7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_flex_5_14alc7_firmware:*:*:*:*:*:*:*:* | before jccn29ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_flex_5_14alc7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_flex_5_16alc7_firmware:*:*:*:*:*:*:*:* | before jccn29ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_flex_5_16alc7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_s7-15imh5_firmware:*:*:*:*:*:*:*:* | before hacn37ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_s7-15imh5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_s7-15ach6_firmware:*:*:*:*:*:*:*:* | before g1cn27ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_s7-15ach6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_s7-15arh5_firmware:*:*:*:*:*:*:*:* | before fdcn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_s7-15arh5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s145-14api_firmware:*:*:*:*:*:*:*:* | before bucn33ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s145-14api:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s145-14ast_firmware:*:*:*:*:*:*:*:* | before aycn28ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s145-14ast:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s145-15api_firmware:*:*:*:*:*:*:*:* | before bucn33ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s145-15api:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s145-15ast_firmware:*:*:*:*:*:*:*:* | before aycn28ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s145-15ast:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s540-13api_firmware:*:*:*:*:*:*:*:* | before cxcn36ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s540-13api:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_s940-14iil_firmware:*:*:*:*:*:*:*:* | before bqcn34ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_s940-14iil:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_s940-14iil_firmware:*:*:*:*:*:*:*:* | before bqcn34ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_s940-14iil:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_slim_1-14ast-05_firmware:*:*:*:*:*:*:*:* | before cwcn25ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_slim_1-14ast-05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_slim_1-11ast-05_firmware:*:*:*:*:*:*:*:* | before cwcn25ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_slim_1-11ast-05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_13s_g3_acn_firmware:*:*:*:*:*:*:*:* | before gmcn29ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_13s_g3_acn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_13s_g2_are_firmware:*:*:*:*:*:*:*:* | before fvcn24ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_13s_g2_are:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_13s_g2_itl_firmware:*:*:*:*:*:*:*:* | before f9cn50ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_13s_g2_itl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_13s-iml_firmware:*:*:*:*:*:*:*:* | before cqcn37ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_13s-iml:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14-iil_firmware:*:*:*:*:*:*:*:* | before djcn28ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14-iil:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14-iml_firmware:*:*:*:*:*:*:*:* | before cjcn38ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14-iml:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14p_g2_ach_firmware:*:*:*:*:*:*:*:* | before gwcn41ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14p_g2_ach:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14s_g2_itl_firmware:*:*:*:*:*:*:*:* | before f9cn50ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14s_g2_itl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14s-iml_firmware:*:*:*:*:*:*:*:* | before cqcn37ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_14s-iml:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_15-iil_firmware:*:*:*:*:*:*:*:* | before djcn28ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_15-iil:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_15-iml_firmware:*:*:*:*:*:*:*:* | before cjcn38ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_15-iml:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_16p_g2_ach_firmware:*:*:*:*:*:*:*:* | before gxcn42ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkbook_16p_g2_ach:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v130-15ikb_firmware:*:*:*:*:*:*:*:* | before 8vcn31ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v130-15ikb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v14_g2-alc_firmware:*:*:*:*:*:*:*:* | before glcn48ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v14_g2-alc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v14-ada_firmware:*:*:*:*:*:*:*:* | before e8cn36ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v14-ada:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v15_g2-alc_firmware:*:*:*:*:*:*:*:* | before glcn48ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v15_g2-alc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v15-ada_firmware:*:*:*:*:*:*:*:* | before e8cn36ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v15-ada:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_9-15imh5_firmware:*:*:*:*:*:*:*:* | before epcn28ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_9-15imh5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_c640-13iml_firmware:*:*:*:*:*:*:*:* | before chcn28ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_c640-13iml:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_c640-13iml_lte_firmware:*:*:*:*:*:*:*:* | before chcn28ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_c640-13iml_lte:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_c940-15irh_firmware:*:*:*:*:*:*:*:* | before bscn37ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_c940-15irh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_s730-13iml_firmware:*:*:*:*:*:*:*:* | before brcn20ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_s730-13iml:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_firmware:*:*:*:*:*:*:*:* | before gzcn29ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7_pro-14ach5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_o_firmware:*:*:*:*:*:*:*:* | before gzcn29ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7_pro-14ach5_o:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7_pro-14arh5_firmware:*:*:*:*:*:*:*:* | before gzcn24ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7_pro-14arh5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_5-15alc05_firmware:*:*:*:*:*:*:*:* | before h2cn27ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_5-15alc05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:300w_gen_3_firmware:*:*:*:*:*:*:*:* Versions before gacn38ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:300w_gen_3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:500w_gen_3_firmware:*:*:*:*:*:*:*:* Versions before g6cn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:500w_gen_3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:730s-13iml_firmware:*:*:*:*:*:*:*:* Versions before brcn20ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:730s-13iml:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:flex_3-11ada05_firmware:*:*:*:*:*:*:*:* Versions before fpcn26ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:flex_3-11ada05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:flex_5-14alc05_firmware:*:*:*:*:*:*:*:* Versions before gjcn27ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:flex_5-14alc05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:flex_5-14are05_firmware:*:*:*:*:*:*:*:* Versions before eecn39ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:flex_5-14are05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:flex_5-14iil05_firmware:*:*:*:*:*:*:*:* Versions before eecn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:flex_5-14iil05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:flex_5-14itl05_firmware:*:*:*:*:*:*:*:* Versions before fxcn38ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:flex_5-14itl05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:flex_5-15alc05_firmware:*:*:*:*:*:*:*:* Versions before gjcn27ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:flex_5-15alc05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:flex_5-15iil05_firmware:*:*:*:*:*:*:*:* Versions before eccn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:flex_5-15iil05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:flex_5-15itl05_firmware:*:*:*:*:*:*:*:* Versions before fxcn38ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:flex_5-15itl05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_1-11ada05_firmware:*:*:*:*:*:*:*:* Versions before fqcn26ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_1-11ada05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_1-11igl05_firmware:*:*:*:*:*:*:*:* Versions before dwcn24ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_1-11igl05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_1-14ada05_firmware:*:*:*:*:*:*:*:* Versions before fqcn26ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_1-14ada05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_1-14igl05_firmware:*:*:*:*:*:*:*:* Versions before dwcn24ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_1-14igl05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-15ada05_firmware:*:*:*:*:*:*:*:* Versions before e8cn36ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-15ada05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-14ada05_firmware:*:*:*:*:*:*:*:* Versions before e8cn36ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-14ada05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-14ada6_firmware:*:*:*:*:*:*:*:* Versions before hbcn24ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-14ada6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:*:*:*:*:*:*:*:* Versions before glcn48ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-14alc6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-15ada6_firmware:*:*:*:*:*:*:*:* Versions before hbcn24ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-15ada6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:*:*:*:*:*:*:*:* Versions before glcn48ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-15alc6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware:*:*:*:*:*:*:*:* Versions before e8cn36ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-17alc6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-17ada05_firmware:*:*:*:*:*:*:*:* Versions before hbcn24ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-17ada05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-17ada6_firmware:*:*:*:*:*:*:*:* Versions before glcn48ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-17ada6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_5_15aba7_firmware:*:*:*:*:*:*:*:* Versions before kacn14ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_5_15aba7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_flex_5_14alc7_firmware:*:*:*:*:*:*:*:* Versions before jccn29ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_flex_5_14alc7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_flex_5_16alc7_firmware:*:*:*:*:*:*:*:* Versions before jccn29ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_flex_5_16alc7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_s7-15imh5_firmware:*:*:*:*:*:*:*:* Versions before hacn37ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_s7-15imh5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_s7-15ach6_firmware:*:*:*:*:*:*:*:* Versions before g1cn27ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_s7-15ach6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_s7-15arh5_firmware:*:*:*:*:*:*:*:* Versions before fdcn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_s7-15arh5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s145-14api_firmware:*:*:*:*:*:*:*:* Versions before bucn33ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s145-14api:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s145-14ast_firmware:*:*:*:*:*:*:*:* Versions before aycn28ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s145-14ast:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s145-15api_firmware:*:*:*:*:*:*:*:* Versions before bucn33ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s145-15api:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s145-15ast_firmware:*:*:*:*:*:*:*:* Versions before aycn28ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s145-15ast:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s540-13api_firmware:*:*:*:*:*:*:*:* Versions before cxcn36ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s540-13api:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_s940-14iil_firmware:*:*:*:*:*:*:*:* Versions before bqcn34ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_s940-14iil:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_s940-14iil_firmware:*:*:*:*:*:*:*:* Versions before bqcn34ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_s940-14iil:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_slim_1-14ast-05_firmware:*:*:*:*:*:*:*:* Versions before cwcn25ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_slim_1-14ast-05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_slim_1-11ast-05_firmware:*:*:*:*:*:*:*:* Versions before cwcn25ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_slim_1-11ast-05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_13s_g3_acn_firmware:*:*:*:*:*:*:*:* Versions before gmcn29ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_13s_g3_acn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_13s_g2_are_firmware:*:*:*:*:*:*:*:* Versions before fvcn24ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_13s_g2_are:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_13s_g2_itl_firmware:*:*:*:*:*:*:*:* Versions before f9cn50ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_13s_g2_itl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_13s-iml_firmware:*:*:*:*:*:*:*:* Versions before cqcn37ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_13s-iml:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14-iil_firmware:*:*:*:*:*:*:*:* Versions before djcn28ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14-iil:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14-iml_firmware:*:*:*:*:*:*:*:* Versions before cjcn38ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14-iml:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14p_g2_ach_firmware:*:*:*:*:*:*:*:* Versions before gwcn41ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14p_g2_ach:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14s_g2_itl_firmware:*:*:*:*:*:*:*:* Versions before f9cn50ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14s_g2_itl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14s-iml_firmware:*:*:*:*:*:*:*:* Versions before cqcn37ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_14s-iml:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_15-iil_firmware:*:*:*:*:*:*:*:* Versions before djcn28ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_15-iil:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_15-iml_firmware:*:*:*:*:*:*:*:* Versions before cjcn38ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_15-iml:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_16p_g2_ach_firmware:*:*:*:*:*:*:*:* Versions before gxcn42ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkbook_16p_g2_ach:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v130-15ikb_firmware:*:*:*:*:*:*:*:* Versions before 8vcn31ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v130-15ikb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v14_g2-alc_firmware:*:*:*:*:*:*:*:* Versions before glcn48ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v14_g2-alc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v14-ada_firmware:*:*:*:*:*:*:*:* Versions before e8cn36ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v14-ada:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v15_g2-alc_firmware:*:*:*:*:*:*:*:* Versions before glcn48ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v15_g2-alc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v15-ada_firmware:*:*:*:*:*:*:*:* Versions before e8cn36ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v15-ada:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_9-15imh5_firmware:*:*:*:*:*:*:*:* Versions before epcn28ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_9-15imh5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_c640-13iml_firmware:*:*:*:*:*:*:*:* Versions before chcn28ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_c640-13iml:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_c640-13iml_lte_firmware:*:*:*:*:*:*:*:* Versions before chcn28ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_c640-13iml_lte:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_c940-15irh_firmware:*:*:*:*:*:*:*:* Versions before bscn37ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_c940-15irh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_s730-13iml_firmware:*:*:*:*:*:*:*:* Versions before brcn20ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_s730-13iml:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_firmware:*:*:*:*:*:*:*:* Versions before gzcn29ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7_pro-14ach5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_o_firmware:*:*:*:*:*:*:*:* Versions before gzcn29ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7_pro-14ach5_o:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7_pro-14arh5_firmware:*:*:*:*:*:*:*:* Versions before gzcn24ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7_pro-14arh5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_5-15alc05_firmware:*:*:*:*:*:*:*:* Versions before h2cn27ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_5-15alc05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-1892
- 2026-10-03 Alias added: GHSA-vw4p-v429-wp9h
References
More Lenovo 100e 2nd Gen Firmware vulnerabilities
- TI-2019-08001 There is a vulnerability with the Dolby DAX2 API system services in which a… CVSS 3.0MEDIUM 6.5
- TI-2021-02560 A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker… CVSS 3.1MEDIUM 6.8
Sources
- CVE-2022-1892 · CVE Program
- CVE-2022-1892 · NVD
- FIRST EPSS
- GHSA-vw4p-v429-wp9h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences