CVE-2022-1892
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow...
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
- Record
CVE-2022-1892- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-122
- Updated
- 2026-11-02
EUVDEUVD-2022-25164
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
- Record
EUVD-2022-25164- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vw4p-v429-wp9h
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow...
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
- Record
GHSA-vw4p-v429-wp9h- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
NVD
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
- Record
CVE-2022-1892- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-122, CWE-120
- Updated
- 2026-11-02
Affected products
- lenovo 100e 2nd gen firmware
- lenovo 100w gen 3 firmware
- lenovo 13w yoga firmware
- lenovo 14w gen 2 firmware
- lenovo 300e 2nd gen firmware
- lenovo 300w gen 3 firmware
- lenovo 500w gen 3 firmware
- lenovo 730s-13iml firmware
- lenovo bios
- lenovo flex 3-11ada05 firmware
- lenovo flex 5-14alc05 firmware
- lenovo flex 5-14are05 firmware
Show 59 moreShow less
- lenovo flex 5-14iil05 firmware
- lenovo flex 5-14itl05 firmware
- lenovo flex 5-15alc05 firmware
- lenovo flex 5-15iil05 firmware
- lenovo flex 5-15itl05 firmware
- lenovo ideapad 1-11ada05 firmware
- lenovo ideapad 1-11igl05 firmware
- lenovo ideapad 1-14ada05 firmware
- lenovo ideapad 1-14igl05 firmware
- lenovo ideapad 3-14ada05 firmware
- lenovo ideapad 3-14ada6 firmware
- lenovo ideapad 3-14alc6 firmware
- lenovo ideapad 3-15ada05 firmware
- lenovo ideapad 3-15ada6 firmware
- lenovo ideapad 3-15alc6 firmware
- lenovo ideapad 3-17ada05 firmware
- lenovo ideapad 3-17ada6 firmware
- lenovo ideapad 3-17alc6 firmware
- lenovo ideapad 5-15alc05 firmware
- lenovo ideapad 5 15aba7 firmware
- lenovo ideapad flex 5 14alc7 firmware
- lenovo ideapad flex 5 16alc7 firmware
- lenovo ideapad s940-14iil firmware
- lenovo ideapad slim 1-11ast-05 firmware
- lenovo ideapad slim 1-14ast-05 firmware
- lenovo legion s7-15ach6 firmware
- lenovo legion s7-15arh5 firmware
- lenovo legion s7-15imh5 firmware
- lenovo s145-14api firmware
- lenovo s145-14ast firmware
- lenovo s145-15api firmware
- lenovo s145-15ast firmware
- lenovo s540-13api firmware
- lenovo thinkbook 13s-iml firmware
- lenovo thinkbook 13s g2 are firmware
- lenovo thinkbook 13s g2 itl firmware
- lenovo thinkbook 13s g3 acn firmware
- lenovo thinkbook 14-iil firmware
- lenovo thinkbook 14-iml firmware
- lenovo thinkbook 14p g2 ach firmware
- lenovo thinkbook 14s-iml firmware
- lenovo thinkbook 14s g2 itl firmware
- lenovo thinkbook 15-iil firmware
- lenovo thinkbook 15-iml firmware
- lenovo thinkbook 16p g2 ach firmware
- lenovo v130-15ikb firmware
- lenovo v14-ada firmware
- lenovo v14 g2-alc firmware
- lenovo v15-ada firmware
- lenovo v15 g2-alc firmware
- lenovo yoga 9-15imh5 firmware
- lenovo yoga c640-13iml firmware
- lenovo yoga c640-13iml lte firmware
- lenovo yoga c940-15irh firmware
- lenovo yoga s730-13iml firmware
- lenovo yoga s940-14iil firmware
- lenovo yoga slim 7 pro-14ach5 firmware
- lenovo yoga slim 7 pro-14ach5 o firmware
- lenovo yoga slim 7 pro-14arh5 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-1892 is a medium vulnerability (CVSS 6.7) in Lenovo 100e 2nd Gen Firmware, published January 23, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. No source names a fixed version.