CVE-2022-48188: Lenovo Ideacentre 510s-07icb Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code.

Affected products

  • Lenovo Ideacentre 510s-07icb Firmware: before m22kt48a (fixed in m22kt48a); before m22kt49a (fixed in m22kt49a)
  • Lenovo Ideacentre 510s-07ick Firmware: before m30kt28a (fixed in m30kt28a); before m1zkt40a (fixed in m1zkt40a)
  • Lenovo Ideacentre 720-18apr Firmware: before m25kt63a (fixed in m25kt63a)
  • Lenovo Ideacentre Aio 3-22itl6 Firmware: before o5akt33 (fixed in o5akt33)
  • Lenovo Ideacentre Aio 3-24itl6 Firmware: before o5akt33 (fixed in o5akt33)
  • Lenovo Ideacentre Aio 3-27itl6 Firmware: before o5akt33 (fixed in o5akt33)
  • Lenovo Ideacentre Aio 3 21itl7 Firmware: before o5akt33 (fixed in o5akt33)
  • Lenovo Thinkcentre m720e Firmware: before m1zkt40a (fixed in m1zkt40a)
  • Lenovo Thinkcentre m720q Firmware: before m1ukt70a (fixed in m1ukt70a)
  • Lenovo Thinkcentre m720s Firmware: before m1ukt70a (fixed in m1ukt70a)
  • Lenovo Thinkcentre m720t Firmware: before m1ukt70a (fixed in m1ukt70a)
  • Lenovo Thinkcentre m725s Firmware: before m25kt63a (fixed in m25kt63a)
  • Lenovo Thinkcentre m75s Gen 2 Firmware: before m46kt30a (fixed in m46kt30a); before m3bkt30a (fixed in m3bkt30a)
  • Lenovo Thinkcentre m75t Gen 2 Firmware: before m46kt30a (fixed in m46kt30a); before m3akt4ca (fixed in m3akt4ca)
  • Lenovo Thinkcentre m920q Firmware: before m1ukt70a (fixed in m1ukt70a)
  • Lenovo Thinkcentre m920s Firmware: before m1ukt70a (fixed in m1ukt70a)
  • Lenovo Thinkcentre m920t Firmware: before m1ukt70a (fixed in m1ukt70a)
  • Lenovo Thinkcentre m920x Firmware: before m1ukt70a (fixed in m1ukt70a)
  • Lenovo Thinkcentre m920z Firmware: before m1mkt55a (fixed in m1mkt55a)
  • Lenovo Thinkstation p330 Tiny Firmware: before m1ukt70a (fixed in m1ukt70a)
  • Lenovo Thinkstation p360 Ultra Firmware: before s0fkt27a (fixed in s0fkt27a)
  • Lenovo Thinkstation p520 Firmware: before s03kt58a (fixed in s03kt58a)
  • Lenovo Thinkstation p520c Firmware: before s03kt58a (fixed in s03kt58a)
  • Lenovo v30a-22itl Firmware: before o5akt33 (fixed in o5akt33)
  • Lenovo v30a-24itl Firmware: before o5akt33 (fixed in o5akt33)
  • and 2 more

Published 2023-06-05. Last modified 2026-06-17.