CVE-2022-1892: Lenovo 100e 2nd Gen Firmware

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Affected products

  • Lenovo 100e 2nd Gen Firmware: before frcn23ww (fixed in frcn23ww)
  • Lenovo 100w Gen 3 Firmware: before gacn38ww (fixed in gacn38ww)
  • Lenovo 13w Yoga Firmware: before jacn31ww (fixed in jacn31ww)
  • Lenovo 14w Gen 2 Firmware: before h0cn21ww (fixed in h0cn21ww)
  • Lenovo 300e 2nd Gen Firmware: before frcn23ww (fixed in frcn23ww)
  • Lenovo 300w Gen 3 Firmware: before gacn38ww (fixed in gacn38ww)
  • Lenovo 500w Gen 3 Firmware: before g6cn40ww (fixed in g6cn40ww)
  • Lenovo 730s-13iml Firmware: before brcn20ww (fixed in brcn20ww)
  • Lenovo Flex 3-11ada05 Firmware: before fpcn26ww (fixed in fpcn26ww)
  • Lenovo Flex 5-14alc05 Firmware: before gjcn27ww (fixed in gjcn27ww)
  • Lenovo Flex 5-14are05 Firmware: before eecn39ww (fixed in eecn39ww)
  • Lenovo Flex 5-14iil05 Firmware: before eecn40ww (fixed in eecn40ww)
  • Lenovo Flex 5-14itl05 Firmware: before fxcn38ww (fixed in fxcn38ww)
  • Lenovo Flex 5-15alc05 Firmware: before gjcn27ww (fixed in gjcn27ww)
  • Lenovo Flex 5-15iil05 Firmware: before eccn40ww (fixed in eccn40ww)
  • Lenovo Flex 5-15itl05 Firmware: before fxcn38ww (fixed in fxcn38ww)
  • Lenovo Ideapad 1-11ada05 Firmware: before fqcn26ww (fixed in fqcn26ww)
  • Lenovo Ideapad 1-11igl05 Firmware: before dwcn24ww (fixed in dwcn24ww)
  • Lenovo Ideapad 1-14ada05 Firmware: before fqcn26ww (fixed in fqcn26ww)
  • Lenovo Ideapad 1-14igl05 Firmware: before dwcn24ww (fixed in dwcn24ww)
  • Lenovo Ideapad 3-14ada05 Firmware: before e8cn36ww (fixed in e8cn36ww)
  • Lenovo Ideapad 3-14ada6 Firmware: before hbcn24ww (fixed in hbcn24ww)
  • Lenovo Ideapad 3-14alc6 Firmware: before glcn48ww (fixed in glcn48ww)
  • Lenovo Ideapad 3-15ada05 Firmware: before e8cn36ww (fixed in e8cn36ww)
  • Lenovo Ideapad 3-15ada6 Firmware: before hbcn24ww (fixed in hbcn24ww)
  • and 45 more

Published 2023-01-26. Last modified 2026-06-17.