CVE:CVE-2022-28806
CNNVD:CNNVD-202205-2096
FUJITSU LIEFBOOK devices是日本富士通（FUJITSU）公司的一款笔记本电脑。
FUJITSU  LIEFBOOK多个版本存在缓冲区错误漏洞，该漏洞源于FJGABIFlashCoreAxtractionSMM驱动程序注册了一个软件系统管理中断（SWSMI）处理程序，该处理程序未经过充分验证，无法确保CommBuffer（或任何其他通信缓冲区的嵌套内容）不指向SMRAM内容。攻击者利用该漏洞将固定数据写入SMRAM，导致内存中的数据损坏。以下产品及版本受到影响：Fujitsu LIEFBOOK A3510 1.09 之前版本、Fujitsu LIEFBOOK U9310 2.17之前版本、Fujitsu LIEFBOOK U7511/U7411/U7311 2.30之前版本、Fujitsu LIEFBOOK U9311 2.33之前版本、Fujitsu LIEFBOOK E5510 2.23之前版本、Fujitsu LIEFBOOK U7510/U7410 2.19之前版本、Fujitsu LIEFBOOK U7310 2.13之前版本、Fujitsu LIEFBOOK E459/E449 1.09版本。
solution:Upgrade fujitsu lifebook_a3510_firmware to a higher version than 1.09,and avoid the version (,1.09); Upgrade fujitsu lifebook_u9310_firmware to a higher version than 2.17,and avoid the version (,2.17); Upgrade fujitsu lifebook_u7511_firmware to a higher version than 2.30,and avoid the version (,2.30); Upgrade fujitsu lifebook_u7411_firmware to a higher version than 2.30,and avoid the version (,2.30); Upgrade fujitsu lifebook_u7311_firmware to a higher version than 2.30,and avoid the version (,2.30); Upgrade fujitsu lifebook_u9311_firmware to a higher version than 2.33,and avoid the version (,2.33]; Upgrade fujitsu lifebook_e5510_firmware to a higher version than 2.23,and avoid the version (,2.23); Upgrade fujitsu lifebook_u7510_firmware to a higher version than 2.19,and avoid the version (,2.19); Upgrade fujitsu lifebook_u7410_firmware to a higher version than 2.19,and avoid the version (,2.19); Upgrade fujitsu lifebook_u7310_firmware to a higher version than 2.13,and avoid the version (,2.13); Upgrade fujitsu lifebook_e459_firmware to a higher version than 1.09,and avoid the version (,1.09); Upgrade fujitsu lifebook_e449_firmware to a higher version than 1.09,and avoid the version (,1.09)