CVE:CVE-2022-48188
CNNVD:CNNVD-202306-264
Lenovo Desktops（联想台式机）和ThinkStation（联想台式工作站）都是中国联想（Lenovo）公司的产品。Lenovo Desktops是台式电脑。ThinkStation是台式工作站
Lenovo Desktops和ThinkStation 的 SecureBootDXE BIOS存在安全漏洞，该漏洞源于驱动程序中存在缓冲区溢出漏洞。攻击者可利用该漏洞提升权限并执行任意代码。
solution:Upgrade lenovo ideacentre_aio_3_21itl7_firmware to a higher version than o5akt33,and avoid the version (,o5akt33); Upgrade lenovo ideacentre_aio_3-22itl6_firmware to a higher version than o5akt33,and avoid the version (,o5akt33); Upgrade lenovo ideacentre_aio_3-24itl6_firmware to a higher version than o5akt33,and avoid the version (,o5akt33); Upgrade lenovo ideacentre_aio_3-27itl6_firmware to a higher version than o5akt33,and avoid the version (,o5akt33); Upgrade lenovo thinkcentre_m720e_firmware to a higher version than m1zkt40a,and avoid the version (,m1zkt40a); Upgrade lenovo thinkcentre_m720q_firmware to a higher version than m1ukt70a,and avoid the version (,m1ukt70a); Upgrade lenovo thinkcentre_m720s_firmware to a higher version than m1ukt70a,and avoid the version (,m1ukt70a); Upgrade lenovo thinkcentre_m720t_firmware to a higher version than m1ukt70a,and avoid the version (,m1ukt70a); Upgrade lenovo thinkcentre_m725s_firmware to a higher version than m25kt63a,and avoid the version (,m25kt63a); Upgrade lenovo thinkcentre_m75s_gen_2_firmware to a higher version than m46kt30a,m3bkt30a,and avoid the version (,m46kt30a),(,m3bkt30a); Upgrade lenovo thinkcentre_m75t_gen_2_firmware to a higher version than m46kt30a,m3akt4ca,and avoid the version (,m46kt30a),(,m3akt4ca); Upgrade lenovo thinkcentre_m920q_firmware to a higher version than m1ukt70a,and avoid the version (,m1ukt70a); Upgrade lenovo thinkcentre_m920s_firmware to a higher version than m1ukt70a,and avoid the version (,m1ukt70a); Upgrade lenovo thinkcentre_m920t_firmware to a higher version than m1ukt70a,and avoid the version (,m1ukt70a); Upgrade lenovo thinkcentre_m920x_firmware to a higher version than m1ukt70a,and avoid the version (,m1ukt70a); Upgrade lenovo thinkcentre_m920z_firmware to a higher version than m1mkt55a,and avoid the version (,m1mkt55a); Upgrade lenovo ideacentre_510s-07icb_firmware to a higher version than m22kt48a,m22kt49a,and avoid the version (,m22kt48a),(,m22kt49a); Upgrade lenovo ideacentre_510s-07ick_firmware to a higher version than m30kt28a,m1zkt40a,and avoid the version (,m30kt28a),(,m1zkt40a); Upgrade lenovo ideacentre_720-18apr_firmware to a higher version than m25kt63a,and avoid the version (,m25kt63a); Upgrade lenovo v30a-22itl_firmware to a higher version than o5akt33,and avoid the version (,o5akt33); Upgrade lenovo v30a-24itl_firmware to a higher version than o5akt33,and avoid the version (,o5akt33); Upgrade lenovo v530s-07icb_firmware to a higher version than m22kt49a,and avoid the version (,m22kt49a); Upgrade lenovo v530s-07icr_firmware to a higher version than m1zkt40a,and avoid the version (,m1zkt40a); Upgrade lenovo thinkstation_p330_tiny_firmware to a higher version than m1ukt70a,and avoid the version (,m1ukt70a); Upgrade lenovo thinkstation_p360_ultra_firmware to a higher version than s0fkt27a,and avoid the version (,s0fkt27a); Upgrade lenovo thinkstation_p520_firmware to a higher version than s03kt58a,and avoid the version (,s03kt58a); Upgrade lenovo thinkstation_p520c_firmware to a higher version than s03kt58a,and avoid the version (,s03kt58a)