CVE-2022-48189 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.7 MEDIUM	LOCAL	LOW	HIGH	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
lenovo	CNA	6.7 MEDIUM	LOCAL	LOW	HIGH	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 4%

Vendor	Product	Version
lenovo	thinkpad_e14_firmware	𝑥 < 1.23
lenovo	thinkpad_e14_gen_2_firmware	𝑥 < 1.55
lenovo	thinkpad_e14_gen_4_firmware	𝑥 < 1.18
lenovo	thinkpad_e14_gen_4_firmware	𝑥 < 1.16
lenovo	thinkpad_e15_firmware	𝑥 < 1.23
lenovo	thinkpad_e15_gen_2_firmware	𝑥 < 1.55
lenovo	thinkpad_e15_gen_4_firmware	𝑥 < 1.18
lenovo	thinkpad_e15_gen_4_firmware	𝑥 < 1.16
lenovo	thinkpad_e490_firmware	𝑥 < 1.34
lenovo	thinkpad_e490s_firmware	𝑥 < 1.34
lenovo	thinkpad_e590_firmware	𝑥 < 1.34
lenovo	thinkpad_l13_gen_3_firmware	𝑥 < 1.14
lenovo	thinkpad_l13_yoga_gen_3_firmware	𝑥 < 1.14
lenovo	thinkpad_l14_firmware	𝑥 < 1.2
lenovo	thinkpad_l14_firmware	𝑥 < 1.3
lenovo	thinkpad_l14_firmware	-
lenovo	thinkpad_l14_firmware	𝑥 < 1.26
lenovo	thinkpad_l15_firmware	𝑥 < 1.2
lenovo	thinkpad_l15_firmware	𝑥 < 1.3
lenovo	thinkpad_l15_gen_2_firmware	-
lenovo	thinkpad_l15_gen_3_firmware	𝑥 < 1.26
lenovo	thinkpad_l490_firmware	𝑥 < 1.32
lenovo	thinkpad_l590_firmware	𝑥 < 1.32
lenovo	thinkpad_p1_gen_2_firmware	𝑥 < 1.46
lenovo	thinkpad_p1_gen_3_firmware	𝑥 < 1.27
lenovo	thinkpad_p1_gen_4_firmware	𝑥 < 1.22
lenovo	thinkpad_p1_gen_5_firmware	𝑥 < 1.16
lenovo	thinkpad_p14s_gen_1_firmware	𝑥 < 1.28
lenovo	thinkpad_p14s_gen_2_firmware	-
lenovo	thinkpad_p14s_gen_2_firmware	𝑥 < 1.34
lenovo	thinkpad_p14s_gen_3_firmware	-
lenovo	thinkpad_p15_gen_1_firmware	𝑥 < 1.32
lenovo	thinkpad_p15_gen_2_firmware	𝑥 < 1.25
lenovo	thinkpad_p15s_gen_1_firmware	𝑥 < 1.28
lenovo	thinkpad_p15s_gen_2_firmware	-
lenovo	thinkpad_p15v_gen_1_firmware	𝑥 < 1.32
lenovo	thinkpad_p15v_gen_2_firmware	𝑥 < 1.19
lenovo	thinkpad_p15v_gen_3_firmware	𝑥 < 1.15
lenovo	thinkpad_p16_gen_1_firmware	𝑥 < 1.17
lenovo	thinkpad_p16s_gen_1_firmware	-
lenovo	thinkpad_p17_gen_1_firmware	𝑥 < 1.32
lenovo	thinkpad_p17_gen_2_firmware	𝑥 < 1.25
lenovo	thinkpad_p43s_firmware	-
lenovo	thinkpad_p53_firmware	𝑥 < 1.4
lenovo	thinkpad_p53s_firmware	-
lenovo	thinkpad_p73_firmware	𝑥 < 1.4
lenovo	thinkpad_t14_gen_1_firmware	𝑥 < 1.28
lenovo	thinkpad_t14_gen_1_firmware	𝑥 < 1.28
lenovo	thinkpad_t14_gen_2_firmware	-
lenovo	thinkpad_t14_gen_2_firmware	𝑥 < 1.34
lenovo	thinkpad_t14_gen_3_firmware	-
lenovo	thinkpad_t14s_firmware	𝑥 < 1.26
lenovo	thinkpad_t14s_gen_2_firmware	𝑥 < 1.51
lenovo	thinkpad_t14s_gen_2_firmware	𝑥 < 1.37
lenovo	thinkpad_t14s_gen_3_firmware	𝑥 < 1.33
lenovo	thinkpad_t15_firmware	𝑥 < 1.28
lenovo	thinkpad_t15_gen_2_firmware	-
lenovo	thinkpad_t15g_gen_1_firmware	𝑥 < 1.32
lenovo	thinkpad_t15g_gen_2_firmware	𝑥 < 1.25
lenovo	thinkpad_t15p_gen_1_firmware	𝑥 < 1.32
lenovo	thinkpad_t15p_gen_2_firmware	𝑥 < 1.19
lenovo	thinkpad_t15p_gen_3_firmware	𝑥 < 1.15
lenovo	thinkpad_t16_gen_1_firmware	-
lenovo	thinkpad_t490_firmware	-
lenovo	thinkpad_t490_firmware	-
lenovo	thinkpad_t490_firmware	-
lenovo	thinkpad_t490s_firmware	-
lenovo	thinkpad_t590_firmware	-
lenovo	thinkpad_thinkpad_r14_gen_2_firmware	𝑥 < 1.55
lenovo	thinkpad_thinkpad_r14_gen_4_firmware	𝑥 < 1.18
lenovo	thinkpad_thinkpad_s3_2nd_gen_firmware	𝑥 < 1.23
lenovo	thinkpad_x1_carbon_10th_gen_firmware	𝑥 < 1.37
lenovo	thinkpad_x1_carbon_7th_gen_firmware	-
lenovo	thinkpad_x1_carbon_7th_gen_firmware	-
lenovo	thinkpad_x1_carbon_8th_gen_firmware	-
lenovo	thinkpad_x1_carbon_9th_gen_firmware	𝑥 < 1.59
lenovo	thinkpad_x1_extreme_2nd_gen_firmware	𝑥 < 1.46
lenovo	thinkpad_x1_extreme_3rd_gen_firmware	𝑥 < 1.27
lenovo	thinkpad_x1_extreme_4th_gen_firmware	𝑥 < 1.22
lenovo	thinkpad_x1_extreme_gen_5_firmware	𝑥 < 1.16
lenovo	thinkpad_x1_nano_gen_1_firmware	𝑥 < 1.55
lenovo	thinkpad_x1_nano_gen_2_firmware	𝑥 < 1.18
lenovo	thinkpad_x1_titanium_firmware	𝑥 < 1.24
lenovo	thinkpad_x1_yoga_4th_gen_firmware	-
lenovo	thinkpad_x1_yoga_4th_gen_firmware	-
lenovo	thinkpad_x1_yoga_5th_gen_firmware	-
lenovo	thinkpad_x1_yoga_6th_gen_firmware	𝑥 < 1.59
lenovo	thinkpad_x1_yoga_7th_gen_firmware	𝑥 < 1.37
lenovo	thinkpad_x12_detachable_gen_1_firmware	𝑥 < 1.28
lenovo	thinkpad_x13_firmware	𝑥 < 1.26
lenovo	thinkpad_x13_gen_2_firmware	𝑥 < 1.51
lenovo	thinkpad_x13_gen_2_firmware	𝑥 < 1.37
lenovo	thinkpad_x13_gen_3_firmware	𝑥 < 1.33
lenovo	thinkpad_x13_yoga_gen_1_firmware	𝑥 < 1.45
lenovo	thinkpad_x13_yoga_gen_2_firmware	𝑥 < 1.4
lenovo	thinkpad_x13_yoga_gen_3_firmware	𝑥 < 1.09
lenovo	thinkpad_x390_firmware	-
lenovo	thinkpad_x390_firmware	-
lenovo	thinkpad_x390_yoga_firmware	𝑥 < 1.95
lenovo	thinkpad_z13_gen_1_firmware	𝑥 < 1.57
lenovo	thinkpad_z16_gen_1_firmware	𝑥 < 1.57

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

https://support.lenovo.com/us/en/product_security/LEN-106014