Find a vulnerability

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

6 vulnerabilities found for flex_5-14itl05_firmware by lenovo

CVE-2024-3100 (GCVE-0-2024-3100)

Vulnerability from nvd – Published: 2024-09-13 17:26 – Updated: 2024-09-17 14:38

Summary

A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-13 21:05 UTC

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

lenovo mitre root Scorecard

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…

Impacted products

79 products

Vendor	Product	Version
Lenovo	100w Gen 3 Laptop (Lenovo) BIOS	Affected: 0 , < GACN48WW (custom)
Lenovo	100w Gen 4 Laptop (Lenovo) BIOS	Affected: 0 , < L2CN34WW/L3CN34WW (custom)
Lenovo	13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS	Affected: 0 , < JACN41WW (custom)
Lenovo	13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS	Affected: 0 , < KBCN29WW (custom)
Lenovo	14W Gen 2 Laptop (Lenovo) BIOS	Affected: 0 , < H0CN29WW (custom)
Lenovo	300w Gen 3 Laptop (Lenovo) BIOS	Affected: 0 , < GACN48WW (custom)
Lenovo	300w Yoga Gen 4 Laptop (Lenovo) BIOS	Affected: 0 , < L2CN34WW/L3CN34WW (custom)
Lenovo	500w Yoga Gen 4 Laptop (Lenovo) BIOS	Affected: 0 , < L2CN34WW/L3CN34WW (custom)
Lenovo	Flex 5-14ITL05 Laptop (ideapad) BIOS	Affected: 0 , < FXCN47WW (custom)
Lenovo	Flex 5-15ITL05 Laptop (ideapad) BIOS	Affected: 0 , < FXCN47WW (custom)
Lenovo	IdeaPad 1 14ALC7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 1 15ALC7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 1-11IGL05 Laptop BIOS	Affected: 0 , < DWCN31WW (custom)
Lenovo	IdeaPad 1-14IGL05 Laptop BIOS	Affected: 0 , < DWCN31WW (custom)
Lenovo	IdeaPad 3 14ABA7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 3 15ABA7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 3 17ABA7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 3-14ALC6 Laptop BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	IdeaPad 3-15ALC6 Laptop BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	IdeaPad 3-17ALC6 Laptop BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	ideapad 5-15ALC05 Laptop BIOS	Affected: 0 , < H2CN35WW (custom)
Lenovo	IdeaPad Flex 5 14ABR8 BIOS	Affected: 0 , < L7CN21WW (custom)
Lenovo	IdeaPad Flex 5 14ALC7 Laptop BIOS	Affected: 0 , < JCCN40WW (custom)
Lenovo	IdeaPad Flex 5 14IAU7 Laptop BIOS	Affected: 0 , < J7CN48WW (custom)
Lenovo	IdeaPad Flex 5 14IRU8 BIOS	Affected: 0 , < L6CN24WW (custom)
Lenovo	IdeaPad Flex 5 16ABR8 BIOS	Affected: 0 , < L7CN21WW (custom)
Lenovo	IdeaPad Flex 5 16ALC7 BIOS	Affected: 0 , < JCCN40WW (custom)
Lenovo	IdeaPad Flex 5 16IAU7 BIOS	Affected: 0 , < J7CN48WW (custom)
Lenovo	IdeaPad Flex 5 16IRU8 BIOS	Affected: 0 , < L6CN24WW (custom)
Lenovo	IdeaPad Slim 3 14ABR8 BIOS	Affected: 0 , ≤ KYCN32WW (custom)
Lenovo	IdeaPad Slim 3 14AMN8 BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	IdeaPad Slim 3 15ABR8 BIOS	Affected: 0 , ≤ KYCN32WW (custom)
Lenovo	IdeaPad Slim 3 15AMN8 BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	IdeaPad Slim 3 16ABR8 BIOS	Affected: 0 , ≤ KYCN32WW (custom)
Lenovo	IdeaPad Slim 5 Light 14ABR8 BIOS	Affected: 0 , ≤ L9CN26WW (custom)
Lenovo	K14 G2 IRU BIOS	Affected: 0 , < MMCN36WW (custom)
Lenovo	Lenovo Flex 7 14IAU7 BIOS	Affected: 0 , < J7CN48WW (custom)
Lenovo	Lenovo Flex 7 14IRU8 BIOS	Affected: 0 , < L6CN24WW (custom)
Lenovo	Lenovo V14 G3 ABA Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	Lenovo V14 G4 ABP BIOS	Affected: 0 , < MSCN16WW (custom)
Lenovo	Lenovo V14 G4 AMN BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	Lenovo V15 G3 ABA Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	Lenovo V15 G4 ABP BIOS	Affected: 0 , < MSCN16WW (custom)
Lenovo	Lenovo V15 G4 AMN BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	ThinkBook 13s G4 ARB BIOS	Affected: 0 , < HZCN55WW (custom)
Lenovo	ThinkBook 13s G4 IAP BIOS	Affected: 0 , < HWCN52WW (custom)
Lenovo	ThinkBook 13x G2 IAP Laptop BIOS	Affected: 0 , < HXCN57WW (custom)
Lenovo	ThinkBook 14 G6 ABP BIOS	Affected: 0 , < MNCN27WW (custom)
Lenovo	ThinkBook 14 G6 IRL BIOS	Affected: 0 , < MMCN36WW (custom)
Lenovo	ThinkBook 16 G6 ABP BIOS	Affected: 0 , < MNCN27WW (custom)
Lenovo	ThinkBook 16 G6 IRL BIOS	Affected: 0 , < MMCN36WW (custom)
Lenovo	V14 G2-ALC Laptop (Lenovo) BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	V15 G2-ALC Laptop (Lenovo) BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS	Affected: 0 , < GZCN36WW (custom)
Lenovo	Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS	Affected: 0 , < GZCN36WW (custom)
lenovo	ideapad_1-11igl05_firmware	Affected: 0 , < dwcn31ww (custom) cpe:2.3:o:lenovo:ideapad_1-14igl05_firmware:-:::::::* cpe:2.3:o:lenovo:ideapad_1-11igl05_firmware:-:::::::*
lenovo	flex_5-14itl05_firmware	Affected: 0 , < fxcn47ww (custom) cpe:2.3:o:lenovo:ideapad_5-15itl05_firmware:-:::::::* cpe:2.3:o:lenovo:flex_5-14itl05_firmware:-:::::::*
lenovo	100w_gen_3_firmware	Affected: 0 , < gacn48ww (custom) cpe:2.3:o:lenovo:300w_gen_3_firmware:-:::::::* cpe:2.3:o:lenovo:100w_gen_3_firmware:-:::::::*
lenovo	yoga_slim_7_pro-14ach5_o_firmware	Affected: 0 , < gzcn36ww (custom) cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_firmware:::::::: cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_o_firmware::::::::
lenovo	14w_gen_2_firmware	Affected: 0 , < h0cn29ww (custom) cpe:2.3:o:lenovo:14w_gen_2_firmware:-:::::::*
lenovo	ideapad_5-15alc05_firmware	Affected: 0 , < h2cn35ww (custom) cpe:2.3:o:lenovo:ideapad_5-15alc05_firmware:-:::::::*
lenovo	thinkbook_13s_g4_iap_firmware	Affected: 0 , < hwcn52ww (custom) cpe:2.3:o:lenovo:thinkbook_13s_g4_iap_firmware::::::::
lenovo	thinkbook_13x_g2_iap_firmware	Affected: 0 , < hxcn57ww (custom) cpe:2.3:o:lenovo:thinkbook_13x_g2_iap_firmware::::::::
lenovo	thinkbook_13s_g4_arb_firmware	Affected: 0 , < hzcx55ww (custom) cpe:2.3:o:lenovo:thinkbook_13s_g4_arb_firmware::::::::
lenovo	ideapad_flex_5_16iau7_firmware	Affected: 0 , < j7cn48ww (custom) cpe:2.3:o:lenovo:flex_7_14iau7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_14iau7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_16iau7_firmware::::::::
lenovo	13w_yoga_firmware	Affected: 0 , < jacn41ww (custom) cpe:2.3:o:lenovo:13w_yoga_firmware:-:::::::*
lenovo	ideapad_flex_5_14alc7_firmware	Affected: 0 , < jccn40ww (custom) cpe:2.3:o:lenovo:ideapad_flex_5_16alc7_firmware:-:::::::* cpe:2.3:o:lenovo:ideapad_flex_5_14alc7_firmware:-:::::::*
lenovo	ideapad_1_15alc7_firmware	Affected: 0 , < jtcn54ww (custom) cpe:2.3:o:lenovo:v15_g3_aba_firmware:::::::: cpe:2.3:o:lenovo:v14_g3_aba_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3_14aba7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3_15aba7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3_17aba7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_1_14alc7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_1_15alc7_firmware::::::::
lenovo	13w_yoga_gen_2_firmware	Affected: 0 , < kbcn29ww (custom) cpe:2.3:o:lenovo:13w_yoga_gen_2_firmware::::::::
lenovo	ideapad_slim_3_15amn8_firmware	Affected: 0 , < l1cn41ww (custom) cpe:2.3:o:lenovo:v14_g4_amn_firmware:::::::: cpe:2.3:o:lenovo:v15_g4_amn_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_14amn8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_15amn8_firmware::::::::
lenovo	500w_yoga_gen_4_firmware	Affected: 0 , < l2cn34ww (custom) Affected: 0 , < l3cn34ww (custom) cpe:2.3:o:lenovo:100w_gen_4_firmware:::::::: cpe:2.3:o:lenovo:300w_yoga_gen_4_firmware:::::::: cpe:2.3:o:lenovo:500w_yoga_gen_4_firmware::::::::
lenovo	ideapad_flex_5_16iru8_firmware	Affected: 0 , < l6cn24ww (custom) cpe:2.3:o:lenovo:flex_7_14iru8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_14iru8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_16iru8_firmware::::::::
lenovo	ideapad_flex_5_16abr8_firmware	Affected: 0 , < l7cn21ww (custom) cpe:2.3:o:lenovo:ideapad_flex_5_14abr8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_16abr8_firmware::::::::
lenovo	k14_g2_iru_firmware	Affected: 0 , < mmcn36ww (custom) cpe:2.3:o:lenovo:thinkbook_14_g6_irl_firmware:::::::: cpe:2.3:o:lenovo:thinkbook_16_g6_irl_firmware:::::::: cpe:2.3:o:lenovo:k14_g2_iru_firmware::::::::
lenovo	thinkbook_16_g6_abp_firmware	Affected: 0 , < mncn27ww (custom) cpe:2.3:o:lenovo:thinkbook_14_g6_abp_firmware:::::::: cpe:2.3:o:lenovo:thinkbook_16_g6_abp_firmware::::::::
lenovo	v15_g4_abp_firmware	Affected: 0 , < mscn16ww (custom) cpe:2.3:o:lenovo:v14_g4_abp_firmware:::::::: cpe:2.3:o:lenovo:v15_g4_abp_firmware::::::::
lenovo	ideapad_3-17alc6_firmware	Affected: 0 , < glcn63ww (custom) cpe:2.3:o:lenovo:v14_g2-alc_firmware:::::::: cpe:2.3:o:lenovo:v15_g2-alc_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware::::::::
lenovo	ideapad_slim_3_16abr8_firmware	Affected: 0 , < kycn32ww (custom) cpe:2.3:o:lenovo:ideapad_slim_3_14abr8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_15abr8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_16abr8_firmware::::::::
lenovo	ideapad_slim_5_light_14abr8_firmware	Affected: 0 , < l9cn26ww (custom) cpe:2.3:o:lenovo:ideapad_slim_5_light_14abr8_firmware::::::::

Credits

Lenovo thanks Eason for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_1-14igl05_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_1-11igl05_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_1-11igl05_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "dwcn31ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_5-15itl05_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:flex_5-14itl05_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "flex_5-14itl05_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "fxcn47ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:300w_gen_3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:100w_gen_3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "100w_gen_3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "gacn48ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_o_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "yoga_slim_7_pro-14ach5_o_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "gzcn36ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:14w_gen_2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "14w_gen_2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "h0cn29ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_5-15alc05_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_5-15alc05_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "h2cn35ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_13s_g4_iap_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_13s_g4_iap_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "hwcn52ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_13x_g2_iap_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_13x_g2_iap_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "hxcn57ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_13s_g4_arb_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_13s_g4_arb_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "hzcx55ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:flex_7_14iau7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_14iau7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_16iau7_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_16iau7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "j7cn48ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:13w_yoga_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "13w_yoga_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "jacn41ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_flex_5_16alc7_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_14alc7_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_14alc7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "jccn40ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v15_g3_aba_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v14_g3_aba_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3_14aba7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3_15aba7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3_17aba7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_1_14alc7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_1_15alc7_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_1_15alc7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "jtcn54ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:13w_yoga_gen_2_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "13w_yoga_gen_2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "kbcn29ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v14_g4_amn_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v15_g4_amn_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_14amn8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_15amn8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_slim_3_15amn8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l1cn41ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:100w_gen_4_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:300w_yoga_gen_4_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:500w_yoga_gen_4_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "500w_yoga_gen_4_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l2cn34ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "l3cn34ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:flex_7_14iru8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_14iru8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_16iru8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_16iru8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l6cn24ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_flex_5_14abr8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_16abr8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_16abr8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l7cn21ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_14_g6_irl_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:thinkbook_16_g6_irl_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:k14_g2_iru_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "k14_g2_iru_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "mmcn36ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_14_g6_abp_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:thinkbook_16_g6_abp_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_16_g6_abp_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "mncn27ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v14_g4_abp_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v15_g4_abp_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "v15_g4_abp_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "mscn16ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v14_g2-alc_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v15_g2-alc_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_3-17alc6_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "glcn63ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_slim_3_14abr8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_15abr8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_16abr8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_slim_3_16abr8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "kycn32ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_slim_5_light_14abr8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_slim_5_light_14abr8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l9cn26ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-3100",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-13T21:05:01.377114Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-17T14:38:51.949Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "100w Gen 3 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GACN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "100w Gen 4 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L2CN34WW/L3CN34WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JACN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "KBCN29WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "14W Gen 2 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "H0CN29WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "300w Gen 3 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GACN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "300w Yoga Gen 4 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L2CN34WW/L3CN34WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "500w Yoga Gen 4 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L2CN34WW/L3CN34WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Flex 5-14ITL05 Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "FXCN47WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Flex 5-15ITL05 Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "FXCN47WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1 14ALC7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1 15ALC7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1-11IGL05 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "DWCN31WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1-14IGL05 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "DWCN31WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3 14ABA7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3 15ABA7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3 17ABA7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3-14ALC6 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3-15ALC6 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3-17ALC6 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ideapad 5-15ALC05 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "H2CN35WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L7CN21WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14ALC7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JCCN40WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14IAU7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "J7CN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14IRU8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L6CN24WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L7CN21WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16ALC7 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JCCN40WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16IAU7 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "J7CN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16IRU8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L6CN24WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 14ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "KYCN32WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 14AMN8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 15ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "KYCN32WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 15AMN8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 16ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "KYCN32WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 5 Light 14ABR8  BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "L9CN26WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "K14 G2 IRU BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MMCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo Flex 7 14IAU7 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "J7CN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo Flex 7 14IRU8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L6CN24WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V14 G3 ABA Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V14 G4 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MSCN16WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V14 G4 AMN BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V15 G3 ABA Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V15 G4 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MSCN16WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V15 G4 AMN BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 13s G4 ARB BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "HZCN55WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 13s G4 IAP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "HWCN52WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 13x G2 IAP Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "HXCN57WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 14 G6 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MNCN27WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 14 G6 IRL BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MMCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 16 G6 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MNCN27WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 16 G6 IRL BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MMCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "V14 G2-ALC Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "V15 G2-ALC Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GZCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GZCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Lenovo thanks Eason for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cp\u003eA potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-13T17:26:33.357Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-165524"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cp\u003e\n\nUpdate system firmware to the version (or newer) indicated for your model in the advisory:\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://support.lenovo.com/us/en/product_security/LEN-165524\"\u003ehttps://support.lenovo.com/us/en/product_security/LEN-165524\u003c/a\u003e\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the advisory:\u00a0 https://support.lenovo.com/us/en/product_security/LEN-165524"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2024-3100",
    "datePublished": "2024-09-13T17:26:33.357Z",
    "dateReserved": "2024-03-29T17:56:28.533Z",
    "dateUpdated": "2024-09-17T14:38:51.949Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-4028 (GCVE-0-2023-4028)

Vulnerability from nvd – Published: 2023-08-17 16:48 – Updated: 2024-10-08 13:50

Summary

A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-08 13:16 UTC

CWE

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Assigner

lenovo mitre root Scorecard

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…

Impacted products

32 products

Vendor	Product	Version
Lenovo	Lenovo Notebook	Affected: various
lenovo	ideapad_flex_5_16iau7	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_16iau7:-:::::::*
lenovo	ideapad_flex_5_16iru8	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_16iru8:-:::::::*
lenovo	13w_yoga	Affected: 82s1 Affected: 82s2 cpe:2.3:h:lenovo:13w_yoga:-:::::::*
lenovo	13w_yoga_gen_2	Affected: 82yr Affected: 82y2 cpe:2.3:h:lenovo:13w_yoga_gen_2:-:::::::*
lenovo	ideapad_5-14alc05	Affected: 0 cpe:2.3:h:lenovo:ideapad_5-14alc05:-:::::::*
lenovo	ideapad_5-15alc05	Affected: 0 cpe:2.3:h:lenovo:ideapad_5-15alc05:-:::::::*
lenovo	flex_5-14are05	Affected: 0 cpe:2.3:h:lenovo:flex_5-14are05:-:::::::*
lenovo	flex_5-14iil05	Affected: 0 cpe:2.3:h:lenovo:flex_5-14iil05:-:::::::*
lenovo	flex_5-14itl05	Affected: 0 cpe:2.3:h:lenovo:flex_5-14itl05:-:::::::*
lenovo	flex_5-15alc05	Affected: 0 cpe:2.3:h:lenovo:flex_5-15alc05:-:::::::*
lenovo	flex_5-15iil05	Affected: 0 cpe:2.3:h:lenovo:flex_5-15iil05:-:::::::*
lenovo	flex_5-15itl05	Affected: 0 cpe:2.3:h:lenovo:flex_5-15itl05:-:::::::*
lenovo	ideapad_1-11ada05	Affected: 0 cpe:2.3:h:lenovo:ideapad_1-11ada05:-:::::::*
lenovo	ideapad_1-11igl05	Affected: 0 cpe:2.3:h:lenovo:ideapad_1-11igl05:-:::::::*
lenovo	ideapad_1-14ada05	Affected: 0 cpe:2.3:h:lenovo:ideapad_1-14ada05:-:::::::*
lenovo	ideapad_1-14igl05	Affected: 0 cpe:2.3:h:lenovo:ideapad_1-14igl05:-:::::::*
lenovo	ideapad_flex_5_14abr8	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_14abr8:-:::::::*
lenovo	ideapad_flex_5_14alc7	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_14alc7:-:::::::*
lenovo	ideapad_flex_5_14iau7	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_14iau7:-:::::::*
lenovo	ideapad_flex_5_14iru8	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_14iru8:-:::::::*
lenovo	ideapad_flex_5_16abr8	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_16abr8:-:::::::*
lenovo	ideapad_flex_5_16alc7	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_16alc7:-:::::::*
lenovo	flex_7_14iau7_firmware	Affected: 0 cpe:2.3:o:lenovo:flex_7_14iau7_firmware::::::::
lenovo	flex_7_14iru8	Affected: 0 cpe:2.3:h:lenovo:flex_7_14iru8:-:::::::*
lenovo	thinkbook_13s_g2_are	Affected: 0 cpe:2.3:h:lenovo:thinkbook_13s_g2_are:-:::::::*
lenovo	thinkbook_13s_g2_itl	Affected: 0 cpe:2.3:h:lenovo:thinkbook_13s_g2_itl:-:::::::*
lenovo	thinkbook_13s_g3_acn	Affected: 0 cpe:2.3:h:lenovo:thinkbook_13s_g3_acn:-:::::::*
lenovo	thinkbook_13s_g4_iap	Affected: 0 cpe:2.3:h:lenovo:thinkbook_13s_g4_iap:-:::::::*
lenovo	thinkbook_13x_g2_iap	Affected: 0 cpe:2.3:h:lenovo:thinkbook_13x_g2_iap:-:::::::*
lenovo	thinkbook_14s_g2_itl	Affected: 0 cpe:2.3:h:lenovo:thinkbook_14s_g2_itl:-:::::::*
lenovo	yoga_9-15imh5	Affected: 0 cpe:2.3:h:lenovo:yoga_9-15imh5:-:::::::*

Credits

Lenovo thanks Zichuan Li (@Ri7erLi) from Indiana University Bloomington for reporting this vulnerability.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:17:11.498Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-134879"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_16iau7:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_16iau7",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_16iru8:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_16iru8",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:13w_yoga:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "13w_yoga",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "82s1"
              },
              {
                "status": "affected",
                "version": "82s2"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:13w_yoga_gen_2:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "13w_yoga_gen_2",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "82yr"
              },
              {
                "status": "affected",
                "version": "82y2"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_5-14alc05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_5-14alc05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_5-15alc05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_5-15alc05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_5-14are05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_5-14are05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_5-14iil05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_5-14iil05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_5-14itl05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_5-14itl05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_5-15alc05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_5-15alc05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_5-15iil05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_5-15iil05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_5-15itl05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_5-15itl05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_1-11ada05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_1-11ada05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_1-11igl05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_1-11igl05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_1-14ada05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_1-14ada05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_1-14igl05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_1-14igl05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_14abr8:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_14abr8",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_14alc7:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_14alc7",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_14iau7:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_14iau7",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_14iru8:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_14iru8",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_16abr8:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_16abr8",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_16alc7:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_16alc7",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:flex_7_14iau7_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_7_14iau7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_7_14iru8:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_7_14iru8",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:thinkbook_13s_g2_are:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkbook_13s_g2_are",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:thinkbook_13s_g2_itl:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkbook_13s_g2_itl",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:thinkbook_13s_g3_acn:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkbook_13s_g3_acn",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:thinkbook_13s_g4_iap:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkbook_13s_g4_iap",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:thinkbook_13x_g2_iap:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkbook_13x_g2_iap",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:thinkbook_14s_g2_itl:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkbook_14s_g2_itl",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:yoga_9-15imh5:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "yoga_9-15imh5",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-4028",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T13:16:57.654067Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T13:50:36.650Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo Notebook",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Lenovo thanks Zichuan Li (@Ri7erLi) from Indiana University Bloomington for reporting this vulnerability."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code."
            }
          ],
          "value": "A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-17T16:48:06.884Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-134879"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-134879."
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-134879."
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2023-4028",
    "datePublished": "2023-08-17T16:48:06.884Z",
    "dateReserved": "2023-07-31T16:44:11.696Z",
    "dateUpdated": "2024-10-08T13:50:36.650Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1892 (GCVE-0-2022-1892)

Vulnerability from nvd – Published: 2023-01-23 15:31 – Updated: 2025-04-02 14:37

Summary

A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-02 14:36 UTC

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

lenovo mitre root Scorecard

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…

Impacted products

1 product

Vendor	Product	Version
Lenovo	BIOS	Affected: various

Credits

Lenovo thanks Martin Smolár from ESET for reporting these issues.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:17:00.914Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-91369"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-1892",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:36:42.939310Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T14:37:24.386Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting these issues."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code."
            }
          ],
          "value": "A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-26T06:03:10.975Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-91369"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-91369\u003cbr\u003e"
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-91369\n"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2022-1892",
    "datePublished": "2023-01-23T15:31:19.243Z",
    "dateReserved": "2022-05-25T20:29:39.456Z",
    "dateUpdated": "2025-04-02T14:37:24.386Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-3100 (GCVE-0-2024-3100)

Vulnerability from cvelistv5 – Published: 2024-09-13 17:26 – Updated: 2024-09-17 14:38

Summary

A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-13 21:05 UTC

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

lenovo mitre root Scorecard

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…

Impacted products

79 products

Vendor	Product	Version
Lenovo	100w Gen 3 Laptop (Lenovo) BIOS	Affected: 0 , < GACN48WW (custom)
Lenovo	100w Gen 4 Laptop (Lenovo) BIOS	Affected: 0 , < L2CN34WW/L3CN34WW (custom)
Lenovo	13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS	Affected: 0 , < JACN41WW (custom)
Lenovo	13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS	Affected: 0 , < KBCN29WW (custom)
Lenovo	14W Gen 2 Laptop (Lenovo) BIOS	Affected: 0 , < H0CN29WW (custom)
Lenovo	300w Gen 3 Laptop (Lenovo) BIOS	Affected: 0 , < GACN48WW (custom)
Lenovo	300w Yoga Gen 4 Laptop (Lenovo) BIOS	Affected: 0 , < L2CN34WW/L3CN34WW (custom)
Lenovo	500w Yoga Gen 4 Laptop (Lenovo) BIOS	Affected: 0 , < L2CN34WW/L3CN34WW (custom)
Lenovo	Flex 5-14ITL05 Laptop (ideapad) BIOS	Affected: 0 , < FXCN47WW (custom)
Lenovo	Flex 5-15ITL05 Laptop (ideapad) BIOS	Affected: 0 , < FXCN47WW (custom)
Lenovo	IdeaPad 1 14ALC7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 1 15ALC7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 1-11IGL05 Laptop BIOS	Affected: 0 , < DWCN31WW (custom)
Lenovo	IdeaPad 1-14IGL05 Laptop BIOS	Affected: 0 , < DWCN31WW (custom)
Lenovo	IdeaPad 3 14ABA7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 3 15ABA7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 3 17ABA7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 3-14ALC6 Laptop BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	IdeaPad 3-15ALC6 Laptop BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	IdeaPad 3-17ALC6 Laptop BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	ideapad 5-15ALC05 Laptop BIOS	Affected: 0 , < H2CN35WW (custom)
Lenovo	IdeaPad Flex 5 14ABR8 BIOS	Affected: 0 , < L7CN21WW (custom)
Lenovo	IdeaPad Flex 5 14ALC7 Laptop BIOS	Affected: 0 , < JCCN40WW (custom)
Lenovo	IdeaPad Flex 5 14IAU7 Laptop BIOS	Affected: 0 , < J7CN48WW (custom)
Lenovo	IdeaPad Flex 5 14IRU8 BIOS	Affected: 0 , < L6CN24WW (custom)
Lenovo	IdeaPad Flex 5 16ABR8 BIOS	Affected: 0 , < L7CN21WW (custom)
Lenovo	IdeaPad Flex 5 16ALC7 BIOS	Affected: 0 , < JCCN40WW (custom)
Lenovo	IdeaPad Flex 5 16IAU7 BIOS	Affected: 0 , < J7CN48WW (custom)
Lenovo	IdeaPad Flex 5 16IRU8 BIOS	Affected: 0 , < L6CN24WW (custom)
Lenovo	IdeaPad Slim 3 14ABR8 BIOS	Affected: 0 , ≤ KYCN32WW (custom)
Lenovo	IdeaPad Slim 3 14AMN8 BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	IdeaPad Slim 3 15ABR8 BIOS	Affected: 0 , ≤ KYCN32WW (custom)
Lenovo	IdeaPad Slim 3 15AMN8 BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	IdeaPad Slim 3 16ABR8 BIOS	Affected: 0 , ≤ KYCN32WW (custom)
Lenovo	IdeaPad Slim 5 Light 14ABR8 BIOS	Affected: 0 , ≤ L9CN26WW (custom)
Lenovo	K14 G2 IRU BIOS	Affected: 0 , < MMCN36WW (custom)
Lenovo	Lenovo Flex 7 14IAU7 BIOS	Affected: 0 , < J7CN48WW (custom)
Lenovo	Lenovo Flex 7 14IRU8 BIOS	Affected: 0 , < L6CN24WW (custom)
Lenovo	Lenovo V14 G3 ABA Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	Lenovo V14 G4 ABP BIOS	Affected: 0 , < MSCN16WW (custom)
Lenovo	Lenovo V14 G4 AMN BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	Lenovo V15 G3 ABA Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	Lenovo V15 G4 ABP BIOS	Affected: 0 , < MSCN16WW (custom)
Lenovo	Lenovo V15 G4 AMN BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	ThinkBook 13s G4 ARB BIOS	Affected: 0 , < HZCN55WW (custom)
Lenovo	ThinkBook 13s G4 IAP BIOS	Affected: 0 , < HWCN52WW (custom)
Lenovo	ThinkBook 13x G2 IAP Laptop BIOS	Affected: 0 , < HXCN57WW (custom)
Lenovo	ThinkBook 14 G6 ABP BIOS	Affected: 0 , < MNCN27WW (custom)
Lenovo	ThinkBook 14 G6 IRL BIOS	Affected: 0 , < MMCN36WW (custom)
Lenovo	ThinkBook 16 G6 ABP BIOS	Affected: 0 , < MNCN27WW (custom)
Lenovo	ThinkBook 16 G6 IRL BIOS	Affected: 0 , < MMCN36WW (custom)
Lenovo	V14 G2-ALC Laptop (Lenovo) BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	V15 G2-ALC Laptop (Lenovo) BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS	Affected: 0 , < GZCN36WW (custom)
Lenovo	Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS	Affected: 0 , < GZCN36WW (custom)
lenovo	ideapad_1-11igl05_firmware	Affected: 0 , < dwcn31ww (custom) cpe:2.3:o:lenovo:ideapad_1-14igl05_firmware:-:::::::* cpe:2.3:o:lenovo:ideapad_1-11igl05_firmware:-:::::::*
lenovo	flex_5-14itl05_firmware	Affected: 0 , < fxcn47ww (custom) cpe:2.3:o:lenovo:ideapad_5-15itl05_firmware:-:::::::* cpe:2.3:o:lenovo:flex_5-14itl05_firmware:-:::::::*
lenovo	100w_gen_3_firmware	Affected: 0 , < gacn48ww (custom) cpe:2.3:o:lenovo:300w_gen_3_firmware:-:::::::* cpe:2.3:o:lenovo:100w_gen_3_firmware:-:::::::*
lenovo	yoga_slim_7_pro-14ach5_o_firmware	Affected: 0 , < gzcn36ww (custom) cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_firmware:::::::: cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_o_firmware::::::::
lenovo	14w_gen_2_firmware	Affected: 0 , < h0cn29ww (custom) cpe:2.3:o:lenovo:14w_gen_2_firmware:-:::::::*
lenovo	ideapad_5-15alc05_firmware	Affected: 0 , < h2cn35ww (custom) cpe:2.3:o:lenovo:ideapad_5-15alc05_firmware:-:::::::*
lenovo	thinkbook_13s_g4_iap_firmware	Affected: 0 , < hwcn52ww (custom) cpe:2.3:o:lenovo:thinkbook_13s_g4_iap_firmware::::::::
lenovo	thinkbook_13x_g2_iap_firmware	Affected: 0 , < hxcn57ww (custom) cpe:2.3:o:lenovo:thinkbook_13x_g2_iap_firmware::::::::
lenovo	thinkbook_13s_g4_arb_firmware	Affected: 0 , < hzcx55ww (custom) cpe:2.3:o:lenovo:thinkbook_13s_g4_arb_firmware::::::::
lenovo	ideapad_flex_5_16iau7_firmware	Affected: 0 , < j7cn48ww (custom) cpe:2.3:o:lenovo:flex_7_14iau7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_14iau7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_16iau7_firmware::::::::
lenovo	13w_yoga_firmware	Affected: 0 , < jacn41ww (custom) cpe:2.3:o:lenovo:13w_yoga_firmware:-:::::::*
lenovo	ideapad_flex_5_14alc7_firmware	Affected: 0 , < jccn40ww (custom) cpe:2.3:o:lenovo:ideapad_flex_5_16alc7_firmware:-:::::::* cpe:2.3:o:lenovo:ideapad_flex_5_14alc7_firmware:-:::::::*
lenovo	ideapad_1_15alc7_firmware	Affected: 0 , < jtcn54ww (custom) cpe:2.3:o:lenovo:v15_g3_aba_firmware:::::::: cpe:2.3:o:lenovo:v14_g3_aba_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3_14aba7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3_15aba7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3_17aba7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_1_14alc7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_1_15alc7_firmware::::::::
lenovo	13w_yoga_gen_2_firmware	Affected: 0 , < kbcn29ww (custom) cpe:2.3:o:lenovo:13w_yoga_gen_2_firmware::::::::
lenovo	ideapad_slim_3_15amn8_firmware	Affected: 0 , < l1cn41ww (custom) cpe:2.3:o:lenovo:v14_g4_amn_firmware:::::::: cpe:2.3:o:lenovo:v15_g4_amn_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_14amn8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_15amn8_firmware::::::::
lenovo	500w_yoga_gen_4_firmware	Affected: 0 , < l2cn34ww (custom) Affected: 0 , < l3cn34ww (custom) cpe:2.3:o:lenovo:100w_gen_4_firmware:::::::: cpe:2.3:o:lenovo:300w_yoga_gen_4_firmware:::::::: cpe:2.3:o:lenovo:500w_yoga_gen_4_firmware::::::::
lenovo	ideapad_flex_5_16iru8_firmware	Affected: 0 , < l6cn24ww (custom) cpe:2.3:o:lenovo:flex_7_14iru8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_14iru8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_16iru8_firmware::::::::
lenovo	ideapad_flex_5_16abr8_firmware	Affected: 0 , < l7cn21ww (custom) cpe:2.3:o:lenovo:ideapad_flex_5_14abr8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_16abr8_firmware::::::::
lenovo	k14_g2_iru_firmware	Affected: 0 , < mmcn36ww (custom) cpe:2.3:o:lenovo:thinkbook_14_g6_irl_firmware:::::::: cpe:2.3:o:lenovo:thinkbook_16_g6_irl_firmware:::::::: cpe:2.3:o:lenovo:k14_g2_iru_firmware::::::::
lenovo	thinkbook_16_g6_abp_firmware	Affected: 0 , < mncn27ww (custom) cpe:2.3:o:lenovo:thinkbook_14_g6_abp_firmware:::::::: cpe:2.3:o:lenovo:thinkbook_16_g6_abp_firmware::::::::
lenovo	v15_g4_abp_firmware	Affected: 0 , < mscn16ww (custom) cpe:2.3:o:lenovo:v14_g4_abp_firmware:::::::: cpe:2.3:o:lenovo:v15_g4_abp_firmware::::::::
lenovo	ideapad_3-17alc6_firmware	Affected: 0 , < glcn63ww (custom) cpe:2.3:o:lenovo:v14_g2-alc_firmware:::::::: cpe:2.3:o:lenovo:v15_g2-alc_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware::::::::
lenovo	ideapad_slim_3_16abr8_firmware	Affected: 0 , < kycn32ww (custom) cpe:2.3:o:lenovo:ideapad_slim_3_14abr8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_15abr8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_16abr8_firmware::::::::
lenovo	ideapad_slim_5_light_14abr8_firmware	Affected: 0 , < l9cn26ww (custom) cpe:2.3:o:lenovo:ideapad_slim_5_light_14abr8_firmware::::::::

Credits

Lenovo thanks Eason for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_1-14igl05_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_1-11igl05_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_1-11igl05_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "dwcn31ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_5-15itl05_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:flex_5-14itl05_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "flex_5-14itl05_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "fxcn47ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:300w_gen_3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:100w_gen_3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "100w_gen_3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "gacn48ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_o_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "yoga_slim_7_pro-14ach5_o_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "gzcn36ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:14w_gen_2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "14w_gen_2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "h0cn29ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_5-15alc05_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_5-15alc05_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "h2cn35ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_13s_g4_iap_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_13s_g4_iap_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "hwcn52ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_13x_g2_iap_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_13x_g2_iap_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "hxcn57ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_13s_g4_arb_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_13s_g4_arb_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "hzcx55ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:flex_7_14iau7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_14iau7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_16iau7_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_16iau7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "j7cn48ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:13w_yoga_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "13w_yoga_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "jacn41ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_flex_5_16alc7_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_14alc7_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_14alc7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "jccn40ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v15_g3_aba_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v14_g3_aba_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3_14aba7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3_15aba7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3_17aba7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_1_14alc7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_1_15alc7_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_1_15alc7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "jtcn54ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:13w_yoga_gen_2_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "13w_yoga_gen_2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "kbcn29ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v14_g4_amn_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v15_g4_amn_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_14amn8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_15amn8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_slim_3_15amn8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l1cn41ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:100w_gen_4_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:300w_yoga_gen_4_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:500w_yoga_gen_4_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "500w_yoga_gen_4_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l2cn34ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "l3cn34ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:flex_7_14iru8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_14iru8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_16iru8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_16iru8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l6cn24ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_flex_5_14abr8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_16abr8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_16abr8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l7cn21ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_14_g6_irl_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:thinkbook_16_g6_irl_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:k14_g2_iru_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "k14_g2_iru_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "mmcn36ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_14_g6_abp_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:thinkbook_16_g6_abp_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_16_g6_abp_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "mncn27ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v14_g4_abp_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v15_g4_abp_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "v15_g4_abp_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "mscn16ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v14_g2-alc_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v15_g2-alc_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_3-17alc6_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "glcn63ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_slim_3_14abr8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_15abr8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_16abr8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_slim_3_16abr8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "kycn32ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_slim_5_light_14abr8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_slim_5_light_14abr8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l9cn26ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-3100",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-13T21:05:01.377114Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-17T14:38:51.949Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "100w Gen 3 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GACN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "100w Gen 4 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L2CN34WW/L3CN34WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JACN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "KBCN29WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "14W Gen 2 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "H0CN29WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "300w Gen 3 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GACN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "300w Yoga Gen 4 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L2CN34WW/L3CN34WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "500w Yoga Gen 4 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L2CN34WW/L3CN34WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Flex 5-14ITL05 Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "FXCN47WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Flex 5-15ITL05 Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "FXCN47WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1 14ALC7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1 15ALC7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1-11IGL05 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "DWCN31WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1-14IGL05 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "DWCN31WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3 14ABA7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3 15ABA7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3 17ABA7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3-14ALC6 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3-15ALC6 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3-17ALC6 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ideapad 5-15ALC05 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "H2CN35WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L7CN21WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14ALC7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JCCN40WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14IAU7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "J7CN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14IRU8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L6CN24WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L7CN21WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16ALC7 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JCCN40WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16IAU7 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "J7CN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16IRU8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L6CN24WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 14ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "KYCN32WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 14AMN8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 15ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "KYCN32WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 15AMN8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 16ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "KYCN32WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 5 Light 14ABR8  BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "L9CN26WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "K14 G2 IRU BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MMCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo Flex 7 14IAU7 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "J7CN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo Flex 7 14IRU8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L6CN24WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V14 G3 ABA Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V14 G4 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MSCN16WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V14 G4 AMN BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V15 G3 ABA Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V15 G4 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MSCN16WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V15 G4 AMN BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 13s G4 ARB BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "HZCN55WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 13s G4 IAP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "HWCN52WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 13x G2 IAP Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "HXCN57WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 14 G6 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MNCN27WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 14 G6 IRL BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MMCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 16 G6 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MNCN27WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 16 G6 IRL BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MMCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "V14 G2-ALC Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "V15 G2-ALC Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GZCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GZCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Lenovo thanks Eason for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cp\u003eA potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-13T17:26:33.357Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-165524"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cp\u003e\n\nUpdate system firmware to the version (or newer) indicated for your model in the advisory:\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://support.lenovo.com/us/en/product_security/LEN-165524\"\u003ehttps://support.lenovo.com/us/en/product_security/LEN-165524\u003c/a\u003e\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the advisory:\u00a0 https://support.lenovo.com/us/en/product_security/LEN-165524"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2024-3100",
    "datePublished": "2024-09-13T17:26:33.357Z",
    "dateReserved": "2024-03-29T17:56:28.533Z",
    "dateUpdated": "2024-09-17T14:38:51.949Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-4028 (GCVE-0-2023-4028)

Vulnerability from cvelistv5 – Published: 2023-08-17 16:48 – Updated: 2024-10-08 13:50

Summary

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-10-08 13:16 UTC

CWE

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Assigner

lenovo mitre root Scorecard

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…

Impacted products

32 products

Vendor	Product	Version
Lenovo	Lenovo Notebook	Affected: various
lenovo	ideapad_flex_5_16iau7	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_16iau7:-:::::::*
lenovo	ideapad_flex_5_16iru8	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_16iru8:-:::::::*
lenovo	13w_yoga	Affected: 82s1 Affected: 82s2 cpe:2.3:h:lenovo:13w_yoga:-:::::::*
lenovo	13w_yoga_gen_2	Affected: 82yr Affected: 82y2 cpe:2.3:h:lenovo:13w_yoga_gen_2:-:::::::*
lenovo	ideapad_5-14alc05	Affected: 0 cpe:2.3:h:lenovo:ideapad_5-14alc05:-:::::::*
lenovo	ideapad_5-15alc05	Affected: 0 cpe:2.3:h:lenovo:ideapad_5-15alc05:-:::::::*
lenovo	flex_5-14are05	Affected: 0 cpe:2.3:h:lenovo:flex_5-14are05:-:::::::*
lenovo	flex_5-14iil05	Affected: 0 cpe:2.3:h:lenovo:flex_5-14iil05:-:::::::*
lenovo	flex_5-14itl05	Affected: 0 cpe:2.3:h:lenovo:flex_5-14itl05:-:::::::*
lenovo	flex_5-15alc05	Affected: 0 cpe:2.3:h:lenovo:flex_5-15alc05:-:::::::*
lenovo	flex_5-15iil05	Affected: 0 cpe:2.3:h:lenovo:flex_5-15iil05:-:::::::*
lenovo	flex_5-15itl05	Affected: 0 cpe:2.3:h:lenovo:flex_5-15itl05:-:::::::*
lenovo	ideapad_1-11ada05	Affected: 0 cpe:2.3:h:lenovo:ideapad_1-11ada05:-:::::::*
lenovo	ideapad_1-11igl05	Affected: 0 cpe:2.3:h:lenovo:ideapad_1-11igl05:-:::::::*
lenovo	ideapad_1-14ada05	Affected: 0 cpe:2.3:h:lenovo:ideapad_1-14ada05:-:::::::*
lenovo	ideapad_1-14igl05	Affected: 0 cpe:2.3:h:lenovo:ideapad_1-14igl05:-:::::::*
lenovo	ideapad_flex_5_14abr8	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_14abr8:-:::::::*
lenovo	ideapad_flex_5_14alc7	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_14alc7:-:::::::*
lenovo	ideapad_flex_5_14iau7	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_14iau7:-:::::::*
lenovo	ideapad_flex_5_14iru8	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_14iru8:-:::::::*
lenovo	ideapad_flex_5_16abr8	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_16abr8:-:::::::*
lenovo	ideapad_flex_5_16alc7	Affected: 0 cpe:2.3:h:lenovo:ideapad_flex_5_16alc7:-:::::::*
lenovo	flex_7_14iau7_firmware	Affected: 0 cpe:2.3:o:lenovo:flex_7_14iau7_firmware::::::::
lenovo	flex_7_14iru8	Affected: 0 cpe:2.3:h:lenovo:flex_7_14iru8:-:::::::*
lenovo	thinkbook_13s_g2_are	Affected: 0 cpe:2.3:h:lenovo:thinkbook_13s_g2_are:-:::::::*
lenovo	thinkbook_13s_g2_itl	Affected: 0 cpe:2.3:h:lenovo:thinkbook_13s_g2_itl:-:::::::*
lenovo	thinkbook_13s_g3_acn	Affected: 0 cpe:2.3:h:lenovo:thinkbook_13s_g3_acn:-:::::::*
lenovo	thinkbook_13s_g4_iap	Affected: 0 cpe:2.3:h:lenovo:thinkbook_13s_g4_iap:-:::::::*
lenovo	thinkbook_13x_g2_iap	Affected: 0 cpe:2.3:h:lenovo:thinkbook_13x_g2_iap:-:::::::*
lenovo	thinkbook_14s_g2_itl	Affected: 0 cpe:2.3:h:lenovo:thinkbook_14s_g2_itl:-:::::::*
lenovo	yoga_9-15imh5	Affected: 0 cpe:2.3:h:lenovo:yoga_9-15imh5:-:::::::*

Credits

Lenovo thanks Zichuan Li (@Ri7erLi) from Indiana University Bloomington for reporting this vulnerability.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:17:11.498Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-134879"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_16iau7:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_16iau7",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_16iru8:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_16iru8",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:13w_yoga:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "13w_yoga",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "82s1"
              },
              {
                "status": "affected",
                "version": "82s2"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:13w_yoga_gen_2:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "13w_yoga_gen_2",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "82yr"
              },
              {
                "status": "affected",
                "version": "82y2"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_5-14alc05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_5-14alc05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_5-15alc05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_5-15alc05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_5-14are05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_5-14are05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_5-14iil05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_5-14iil05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_5-14itl05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_5-14itl05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_5-15alc05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_5-15alc05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_5-15iil05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_5-15iil05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_5-15itl05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_5-15itl05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_1-11ada05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_1-11ada05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_1-11igl05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_1-11igl05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_1-14ada05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_1-14ada05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_1-14igl05:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_1-14igl05",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_14abr8:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_14abr8",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_14alc7:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_14alc7",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_14iau7:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_14iau7",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_14iru8:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_14iru8",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_16abr8:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_16abr8",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:ideapad_flex_5_16alc7:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ideapad_flex_5_16alc7",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:flex_7_14iau7_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_7_14iau7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:flex_7_14iru8:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "flex_7_14iru8",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:thinkbook_13s_g2_are:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkbook_13s_g2_are",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:thinkbook_13s_g2_itl:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkbook_13s_g2_itl",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:thinkbook_13s_g3_acn:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkbook_13s_g3_acn",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:thinkbook_13s_g4_iap:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkbook_13s_g4_iap",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:thinkbook_13x_g2_iap:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkbook_13x_g2_iap",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:thinkbook_14s_g2_itl:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkbook_14s_g2_itl",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:yoga_9-15imh5:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "yoga_9-15imh5",
            "vendor": "lenovo",
            "versions": [
              {
                "status": "affected",
                "version": "0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-4028",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-08T13:16:57.654067Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-08T13:50:36.650Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo Notebook",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Lenovo thanks Zichuan Li (@Ri7erLi) from Indiana University Bloomington for reporting this vulnerability."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code."
            }
          ],
          "value": "A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-08-17T16:48:06.884Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-134879"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-134879."
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-134879."
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2023-4028",
    "datePublished": "2023-08-17T16:48:06.884Z",
    "dateReserved": "2023-07-31T16:44:11.696Z",
    "dateUpdated": "2024-10-08T13:50:36.650Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1892 (GCVE-0-2022-1892)

Vulnerability from cvelistv5 – Published: 2023-01-23 15:31 – Updated: 2025-04-02 14:37

Summary

A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-02 14:36 UTC

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

lenovo mitre root Scorecard

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…

Impacted products

1 product

Vendor	Product	Version
Lenovo	BIOS	Affected: various

Credits

Lenovo thanks Martin Smolár from ESET for reporting these issues.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:17:00.914Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-91369"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-1892",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:36:42.939310Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T14:37:24.386Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting these issues."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code."
            }
          ],
          "value": "A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-26T06:03:10.975Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-91369"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-91369\u003cbr\u003e"
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-91369\n"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2022-1892",
    "datePublished": "2023-01-23T15:31:19.243Z",
    "dateReserved": "2022-05-25T20:29:39.456Z",
    "dateUpdated": "2025-04-02T14:37:24.386Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}