{"id":"CVE-2022-3742","aliases":["EUVD-2022-43098","GHSA-4p5v-vvr2-vjmq"],"status":"published","title":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...","description":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper buffer validation.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00191,"percentile":0.08749,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2023-08-23T19:42:15Z","modified":"2026-06-17T05:00:12Z","products":[{"vendor":"jupyter","product":"notebook"},{"vendor":"lenovo","product":"ideapad_1-14ijl7_firmware"},{"vendor":"lenovo","product":"ideapad_1-15ijl7_firmware"},{"vendor":"lenovo","product":"ideapad_1_14iau7_firmware"},{"vendor":"lenovo","product":"ideapad_1_14igl7_firmware"},{"vendor":"lenovo","product":"ideapad_1_15iau7_firmware"},{"vendor":"lenovo","product":"ideapad_1_15igl7_firmware"},{"vendor":"lenovo","product":"ideapad_3-14igl05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14iil05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14iml05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14itl05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14itl6_firmware"},{"vendor":"lenovo","product":"ideapad_3-15igl05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15iil05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15iml05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15itl05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15itl6_firmware"},{"vendor":"lenovo","product":"ideapad_3-17iil05_firmware"},{"vendor":"lenovo","product":"ideapad_3-17iml05_firmware"},{"vendor":"lenovo","product":"ideapad_3-17itl6_firmware"},{"vendor":"lenovo","product":"ideapad_3_14iau7_firmware"},{"vendor":"lenovo","product":"ideapad_3_15iau7_firmware"},{"vendor":"lenovo","product":"ideapad_3_17iau7_firmware"},{"vendor":"lenovo","product":"ideapad_5-15iil05_firmware"},{"vendor":"lenovo","product":"ideapad_5-15itl05_firmware"},{"vendor":"lenovo","product":"ideapad_5_15ial7_firmware"},{"vendor":"lenovo","product":"ideapad_creator_5-15imh05_firmware"},{"vendor":"lenovo","product":"ideapad_gaming_3-15imh05_firmware"},{"vendor":"lenovo","product":"l3-15iml05_firmware"},{"vendor":"lenovo","product":"l3-15itl6_firmware"},{"vendor":"lenovo","product":"legion_5-15imh05_firmware"},{"vendor":"lenovo","product":"legion_5-15imh05h_firmware"},{"vendor":"lenovo","product":"legion_5-15imh6_firmware"},{"vendor":"lenovo","product":"legion_5-15ith6_firmware"},{"vendor":"lenovo","product":"legion_5-15ith6h_firmware"},{"vendor":"lenovo","product":"legion_5-17imh05_firmware"},{"vendor":"lenovo","product":"legion_5-17imh05h_firmware"},{"vendor":"lenovo","product":"legion_5-17ith6_firmware"},{"vendor":"lenovo","product":"legion_5-17ith6h_firmware"},{"vendor":"lenovo","product":"legion_5_15iah7_firmware"},{"vendor":"lenovo","product":"legion_5_15iah7h_firmware"},{"vendor":"lenovo","product":"legion_5_pro-16ith6_firmware"},{"vendor":"lenovo","product":"legion_5_pro-16ith6h_firmware"},{"vendor":"lenovo","product":"legion_5_pro_16iah7_firmware"},{"vendor":"lenovo","product":"legion_5_pro_16iah7h_firmware"},{"vendor":"lenovo","product":"legion_5p-15imh05_firmware"},{"vendor":"lenovo","product":"legion_5p-15imh05h_firmware"},{"vendor":"lenovo","product":"legion_7-16ithg6_firmware"},{"vendor":"lenovo","product":"legion_7_16iax7_firmware"},{"vendor":"lenovo","product":"notebook"},{"vendor":"lenovo","product":"s14_g2_itl_firmware"},{"vendor":"lenovo","product":"s14_g3_iap_firmware"},{"vendor":"lenovo","product":"s540-13itl_firmware"},{"vendor":"lenovo","product":"slim_7_14iap7_firmware"},{"vendor":"lenovo","product":"slim_7_carbon_13iap7_firmware"},{"vendor":"lenovo","product":"slim_7_pro-14ihu5_firmware"},{"vendor":"lenovo","product":"slim_7_prox_14iah7_firmware"},{"vendor":"lenovo","product":"slim_9-14itl05_firmware"},{"vendor":"lenovo","product":"slim_9_14iap7_firmware"},{"vendor":"lenovo","product":"thinkbook_15p_g2_ith_firmware"},{"vendor":"lenovo","product":"thinkbook_15p_imh_firmware"},{"vendor":"lenovo","product":"v14-igl_firmware"},{"vendor":"lenovo","product":"v14_g1-iml_firmware"},{"vendor":"lenovo","product":"v14_g2-itl_firmware"},{"vendor":"lenovo","product":"v14_g2_ijl_firmware"},{"vendor":"lenovo","product":"v14_g3_iap_firmware"},{"vendor":"lenovo","product":"v15-igl_firmware"},{"vendor":"lenovo","product":"v15_g1-iml_firmware"},{"vendor":"lenovo","product":"v15_g2-itl_firmware"},{"vendor":"lenovo","product":"v15_g2_ijl_firmware"},{"vendor":"lenovo","product":"v15_g3_iap_firmware"},{"vendor":"lenovo","product":"v17-iil_firmware"},{"vendor":"lenovo","product":"v17_g2-itl_firmware"},{"vendor":"lenovo","product":"v17_g3_iap_firmware"},{"vendor":"lenovo","product":"yoga_7-14itl5_firmware"},{"vendor":"lenovo","product":"yoga_7-15itl5_firmware"},{"vendor":"lenovo","product":"yoga_7_14ial7_firmware"},{"vendor":"lenovo","product":"yoga_7_16iah7_firmware"},{"vendor":"lenovo","product":"yoga_7_16iap7_firmware"},{"vendor":"lenovo","product":"yoga_9_14iap7_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_carbon_13iap7_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14ihu5_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14ihu5_o_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14itl5_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro_14iah7_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro_14iap7_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_prox_14iah7_firmware"},{"vendor":"lenovo","product":"yoga_slim_9-14itl05_firmware"},{"vendor":"lenovo","product":"yoga_slim_9_14iap7_firmware"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-103710","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3742"},{"url":"https://github.com/advisories/GHSA-4p5v-vvr2-vjmq"}],"sources":{"cve":[{"id":"CVE-2022-3742","description":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper buffer validation.","status":"published","published":"2023-08-23T19:42:15.848Z","modified":"2024-10-09T19:17:23.103Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:34:33.24035Z"}],"euvd":[{"id":"EUVD-2022-43098","description":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper buffer validation.","status":"published","published":"2023-08-23T19:42:15Z","modified":"2024-10-09T19:17:23Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:27:42.546269Z"}],"ghsa":[{"id":"GHSA-4p5v-vvr2-vjmq","title":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...","description":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper buffer validation.","status":"published","published":"2023-08-23T21:30:26Z","modified":"2024-04-04T07:10:02Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:56:48.742308Z"}],"nvd":[{"id":"CVE-2022-3742","description":"A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper buffer validation.","status":"published","published":"2023-08-23T20:15:08.327Z","modified":"2026-06-17T05:00:12.887Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:39.811118Z"}]}}