← Database
CVE-2022-48188
MEDIUM
CVSS: 6.7
Published: 2023-06-05
Modified: 2026-06-17
Description
A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code.
Affected Platforms
Lenovo Ideacentre Aio 3-24Itl6 FirmwareLenovo Thinkcentre M720E FirmwareLenovo Thinkcentre M75S Gen 2Lenovo Thinkcentre M720ELenovo Thinkcentre M920TLenovo Thinkstation P520C FirmwareLenovo Thinkstation P330 Tiny FirmwareLenovo Thinkstation P520CLenovo Thinkcentre M920SLenovo Ideacentre 720-18Apr
Weakness Type
CWE-787, CWE-787