CVE-2022-1892

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-01-26 · updated 2026-06-17
Weakness: CWE-122

Description

A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Affected products

Lenovo 100E 2Nd Gen Firmware: before frcn23ww — fixed in frcn23ww
Lenovo 100W Gen 3 Firmware: before gacn38ww — fixed in gacn38ww
Lenovo 13W Yoga Firmware: before jacn31ww — fixed in jacn31ww
Lenovo 14W Gen 2 Firmware: before h0cn21ww — fixed in h0cn21ww
Lenovo 300E 2Nd Gen Firmware: before frcn23ww — fixed in frcn23ww
Lenovo 300W Gen 3 Firmware: before gacn38ww — fixed in gacn38ww
Lenovo 500W Gen 3 Firmware: before g6cn40ww — fixed in g6cn40ww
Lenovo 730S-13Iml Firmware: before brcn20ww — fixed in brcn20ww
Lenovo Flex 3-11Ada05 Firmware: before fpcn26ww — fixed in fpcn26ww
Lenovo Flex 5-14Alc05 Firmware: before gjcn27ww — fixed in gjcn27ww
Lenovo Flex 5-14Are05 Firmware: before eecn39ww — fixed in eecn39ww
Lenovo Flex 5-14Iil05 Firmware: before eecn40ww — fixed in eecn40ww
Lenovo Flex 5-14Itl05 Firmware: before fxcn38ww — fixed in fxcn38ww
Lenovo Flex 5-15Alc05 Firmware: before gjcn27ww — fixed in gjcn27ww
Lenovo Flex 5-15Iil05 Firmware: before eccn40ww — fixed in eccn40ww
Lenovo Flex 5-15Itl05 Firmware: before fxcn38ww — fixed in fxcn38ww
Lenovo Ideapad 1-11Ada05 Firmware: before fqcn26ww — fixed in fqcn26ww
Lenovo Ideapad 1-11Igl05 Firmware: before dwcn24ww — fixed in dwcn24ww
Lenovo Ideapad 1-14Ada05 Firmware: before fqcn26ww — fixed in fqcn26ww
Lenovo Ideapad 1-14Igl05 Firmware: before dwcn24ww — fixed in dwcn24ww
Lenovo Ideapad 3-14Ada05 Firmware: before e8cn36ww — fixed in e8cn36ww
Lenovo Ideapad 3-14Ada6 Firmware: before hbcn24ww — fixed in hbcn24ww
Lenovo Ideapad 3-14Alc6 Firmware: before glcn48ww — fixed in glcn48ww
Lenovo Ideapad 3-15Ada05 Firmware: before e8cn36ww — fixed in e8cn36ww
Lenovo Ideapad 3-15Ada6 Firmware: before hbcn24ww — fixed in hbcn24ww
Lenovo Ideapad 3-15Alc6 Firmware: before glcn48ww — fixed in glcn48ww
Lenovo Ideapad 3-17Ada05 Firmware: before hbcn24ww — fixed in hbcn24ww
Lenovo Ideapad 3-17Ada6 Firmware: before glcn48ww — fixed in glcn48ww
Lenovo Ideapad 3-17Alc6 Firmware: before e8cn36ww — fixed in e8cn36ww
Lenovo Ideapad 5-15Alc05 Firmware: before h2cn27ww — fixed in h2cn27ww

How to fix

Upgrade to a fixed version: Lenovo 100E 2Nd Gen Firmware frcn23ww; Lenovo 100W Gen 3 Firmware gacn38ww; Lenovo 13W Yoga Firmware jacn31ww; Lenovo 14W Gen 2 Firmware h0cn21ww; Lenovo 300E 2Nd Gen Firmware frcn23ww; Lenovo 300W Gen 3 Firmware gacn38ww; Lenovo 500W Gen 3 Firmware g6cn40ww; Lenovo 730S-13Iml Firmware brcn20ww; Lenovo Flex 3-11Ada05 Firmware fpcn26ww; Lenovo Flex 5-14Alc05 Firmware gjcn27ww; Lenovo Flex 5-14Are05 Firmware eecn39ww; Lenovo Flex 5-14Iil05 Firmware eecn40ww. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-1892 or the next vulnerability affects your stack