CVEDB API

A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 13.9%

CVSS Severity

CVSS v3 Score 6.7

References

Products affected by CVE-2022-1890

Lenovo » Thinkbook 14-Iil » Version: N/A

cpe:2.3:h:lenovo:thinkbook_14-iil:-
Lenovo » Thinkbook 14-Iml » Version: N/A

cpe:2.3:h:lenovo:thinkbook_14-iml:-
Lenovo » Thinkbook 15-Iil » Version: N/A

cpe:2.3:h:lenovo:thinkbook_15-iil:-
Lenovo » Thinkbook 15-Iml » Version: N/A

cpe:2.3:h:lenovo:thinkbook_15-iml:-
Lenovo » Yoga C640-13iml » Version: N/A

cpe:2.3:h:lenovo:yoga_c640-13iml:-
Lenovo » Yoga C640-13iml Lte » Version: N/A

cpe:2.3:h:lenovo:yoga_c640-13iml_lte:-
Lenovo » Thinkbook 14-Iil Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkbook_14-iil_firmware:-
Lenovo » Thinkbook 14-Iml Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkbook_14-iml_firmware:-
Lenovo » Thinkbook 15-Iil Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkbook_15-iil_firmware:-
Lenovo » Thinkbook 15-Iml Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkbook_15-iml_firmware:-
Lenovo » Yoga C640-13iml Firmware » Version: N/A

cpe:2.3:o:lenovo:yoga_c640-13iml_firmware:-
Lenovo » Yoga C640-13iml Lte Firmware » Version: N/A

cpe:2.3:o:lenovo:yoga_c640-13iml_lte_firmware:-