CVE-2022-48181: Lenovo Ideacentre 3-07ada05 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

Affected products

  • Lenovo Ideacentre 3-07ada05 Firmware: before o4fkt35a (fixed in o4fkt35a); before m4mkt12a (fixed in m4mkt12a)
  • Lenovo Ideacentre 3-07imb05 Firmware: before m2vkt1ea (fixed in m2vkt1ea)
  • Lenovo Ideacentre 3 07ach7 Firmware: before m4mkt12a (fixed in m4mkt12a)
  • Lenovo Ideacentre 3 07iab7 Firmware: before m49kt21a (fixed in m49kt21a)
  • Lenovo Ideacentre 5-14acn6 Firmware: before o5ekt24a (fixed in o5ekt24a)
  • Lenovo Ideacentre 5-14are05 Firmware: before o4zkt2aa (fixed in o4zkt2aa)
  • Lenovo Ideacentre 5-14imb05 Firmware: before o4hkt3aa (fixed in o4hkt3aa)
  • Lenovo Ideacentre 5-14iob6 Firmware: before m3gkt3aa (fixed in m3gkt3aa)
  • Lenovo Ideacentre 510s-07icb Firmware: before m22kt49a (fixed in m22kt49a)
  • Lenovo Ideacentre 510s-07ick Firmware: before m30kt28a (fixed in m30kt28a); before m1zkt40a (fixed in m1zkt40a)
  • Lenovo Ideacentre 5 14iab7 Firmware: before m42kt42a (fixed in m42kt42a)
  • Lenovo Ideacentre 720-18apr Firmware: before m25kt63a (fixed in m25kt63a)
  • Lenovo Ideacentre Aio 3-22imb05 Firmware: before o5nkt32a (fixed in o5nkt32a)
  • Lenovo Ideacentre Aio 3-22itl6 Firmware: before o5akt33 (fixed in o5akt33)
  • Lenovo Ideacentre Aio 3-24alc6 Firmware: before o5bkt25a (fixed in o5bkt25a)
  • Lenovo Ideacentre Aio 3-24imb05 Firmware: before o5nkt32a (fixed in o5nkt32a)
  • Lenovo Ideacentre Aio 3-24itl6 Firmware: before o5akt33 (fixed in o5akt33)
  • Lenovo Ideacentre Aio 3-27alc6 Firmware: before o5bkt25a (fixed in o5bkt25a)
  • Lenovo Ideacentre Aio 3-27imb05 Firmware: before o5nkt32a (fixed in o5nkt32a)
  • Lenovo Ideacentre Aio 3-27itl6 Firmware: before o5akt33 (fixed in o5akt33)
  • Lenovo Ideacentre Aio 3 21itl7 Firmware: before o5akt33 (fixed in o5akt33)
  • Lenovo Ideacentre Aio 3 22iap7 Firmware: before o5nkt32a (fixed in o5nkt32a)
  • Lenovo Ideacentre Aio 3 24iap7 Firmware: before o5nkt32a (fixed in o5nkt32a)
  • Lenovo Ideacentre Aio 3 27iap7 Firmware: before o5nkt32a (fixed in o5nkt32a)
  • Lenovo Ideacentre Aio 5 24iah7 Firmware: before o5rkt39a (fixed in o5rkt39a)
  • and 89 more

Published 2023-06-05. Last modified 2026-06-17.