Sign-up

ID

VAR-202301-2329


CVE

CVE-2022-34884


TITLE

plural  Lenovo  Out-of-bounds write vulnerabilities in the product

Trust: 0.8

sources: JVNDB: JVNDB-2022-012569

DESCRIPTION

A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of service. plural Lenovo The product contains a vulnerability related to out-of-bounds writes.Service operation interruption (DoS) It may be in a state

Trust: 1.71

sources: NVD: CVE-2022-34884 // JVNDB: JVNDB-2022-012569 // VULMON: CVE-2022-34884

AFFECTED PRODUCTS

vendor:lenovomodel:thinksystem sr850scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinkagile hx7521scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile hx2321scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile hx2720-escope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinkagile mx3530-hscope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinksystem st250 v2scope:ltversion:1.96_tgbt34x

Trust: 1.0

vendor:lenovomodel:thinksystem sd530scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinksystem st250scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinkagile vx3720scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinksystem sr258 v2scope:ltversion:1.96_tgbt34x

Trust: 1.0

vendor:lenovomodel:thinksystem sr650 v2scope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinkagile hx3721scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinkagile hx3321scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile hx1021scope:ltversion:3.60_tei386m

Trust: 1.0

vendor:lenovomodel:thinksystem st550scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinksystem sr665scope:ltversion:4.10_d8bt38l

Trust: 1.0

vendor:lenovomodel:thinksystem sr150scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinksystem sr250scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinkagile mx3531-fscope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinkagile hx3376scope:ltversion:4.10_d8bt38l

Trust: 1.0

vendor:lenovomodel:thinkagile vx 2u4nscope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinkagile mx3530 fscope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinkagile vx7520 nscope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile mx3531 hscope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinksystem sr670 v2scope:ltversion:2.00_tgbt36o

Trust: 1.0

vendor:lenovomodel:thinkagile vx7531scope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinkagile vx5530scope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinkagile vx3320scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinksystem sn850scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinkagile mx1021scope:ltversion:3.60_tei386m

Trust: 1.0

vendor:lenovomodel:thinksystem sr645scope:ltversion:4.10_d8bt38l

Trust: 1.0

vendor:lenovomodel:thinksystem st258 v2scope:ltversion:1.96_tgbt34x

Trust: 1.0

vendor:lenovomodel:thinkagile vx 4uscope:ltversion:2.50_psi346l

Trust: 1.0

vendor:lenovomodel:thinkagile hx5521-cscope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinksystem sn550 v2scope:ltversion:2.00_tgbt36o

Trust: 1.0

vendor:lenovomodel:thinkagile vx7520scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinksystem st650 v2scope:ltversion:2.00_tgbt36o

Trust: 1.0

vendor:lenovomodel:thinkagile mx3330-hscope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinksystem sr590scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile mx3331-fscope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinksystem sr630scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile vx1320scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinksystem sr850pscope:ltversion:3.60_tei386m

Trust: 1.0

vendor:lenovomodel:thinksystem sr158scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinkagile vx3520-gscope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile vx7320 nscope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile hx5520scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile hx7820scope:ltversion:2.50_psi346l

Trust: 1.0

vendor:lenovomodel:thinksystem sn550scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinksystem sr650scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinksystem sr860scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinkagile hx3375scope:ltversion:4.10_d8bt38l

Trust: 1.0

vendor:lenovomodel:thinkagile vx2320scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile vx5520scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinksystem sd650 v2scope:ltversion:2.00_tgbt36o

Trust: 1.0

vendor:lenovomodel:thinksystem sr570scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile hx2320-escope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile hx1520-rscope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile hx3320scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile hx3521-gscope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinksystem sr550scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile vx7820scope:ltversion:2.50_psi346l

Trust: 1.0

vendor:lenovomodel:thinkagile hx7821scope:ltversion:2.50_psi346l

Trust: 1.0

vendor:lenovomodel:thinkagile hx3520-gscope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinksystem sr950scope:ltversion:2.50_psi346l

Trust: 1.0

vendor:lenovomodel:thinkagile mx1020scope:lteversion:3.60_tei386m

Trust: 1.0

vendor:lenovomodel:thinkagile hx1320scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile hx5521scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile vx3530-gscope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinkagile hx1321scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinksystem sd650-n v2scope:ltversion:2.00_tgbt36o

Trust: 1.0

vendor:lenovomodel:thinksystem sr670scope:ltversion:3.60_tei386m

Trust: 1.0

vendor:lenovomodel:thinkagile mx3331-hscope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinksystem sr860 v2scope:ltversion:2.00_tgbt36o

Trust: 1.0

vendor:lenovomodel:thinksystem st258scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinksystem st658 v2scope:ltversion:2.00_tgbt36o

Trust: 1.0

vendor:lenovomodel:thinksystem sr850 v2scope:ltversion:2.00_tgbt36o

Trust: 1.0

vendor:lenovomodel:thinkagile hx3720scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinkstation p920scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile hx5520-cscope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile hx enclosure certified nodescope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinkagile vx7330scope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinkagile vx7530scope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinksystem sr250 v2scope:ltversion:1.96_tgbt34x

Trust: 1.0

vendor:lenovomodel:thinksystem sd630 v2scope:ltversion:2.00_tgbt36o

Trust: 1.0

vendor:lenovomodel:thinkagile vx3331scope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinksystem sr530scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile vx 1se certified nodescope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinksystem sr630 v2scope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinkagile hx1521-rscope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile mx3330-fscope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinksystem sd650 dwcscope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinkagile vx2330scope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinkagile vx3330scope:ltversion:1.80_afbt20n

Trust: 1.0

vendor:lenovomodel:thinkedge se450scope:ltversion:1.10_usx304w

Trust: 1.0

vendor:lenovomodel:thinksystem se350scope:ltversion:3.60_tei386m

Trust: 1.0

vendor:lenovomodel:thinksystem sr258scope:ltversion:5.20_tei3c8m

Trust: 1.0

vendor:lenovomodel:thinkagile hx7520scope:ltversion:8.40-cdi394n

Trust: 1.0

vendor:lenovomodel:thinkagile hx1520-rscope: - version: -

Trust: 0.8

vendor:lenovomodel:thinkagile hx1521-rscope: - version: -

Trust: 0.8

vendor:lenovomodel:thinkagile hx1321scope: - version: -

Trust: 0.8

vendor:lenovomodel:thinkagile hx2320-escope: - version: -

Trust: 0.8

vendor:lenovomodel:thinkagile hx2720-escope: - version: -

Trust: 0.8

vendor:lenovomodel:thinkagile vx3331scope: - version: -

Trust: 0.8

vendor:lenovomodel:thinkagile hx enclosure certified nodescope: - version: -

Trust: 0.8

vendor:lenovomodel:thinkagile hx1021scope: - version: -

Trust: 0.8

vendor:lenovomodel:thinkagile hx1320scope: - version: -

Trust: 0.8

vendor:lenovomodel:thinkagile hx2321scope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2022-012569 // NVD: CVE-2022-34884

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2022-34884
value: MEDIUM

Trust: 1.0

psirt@lenovo.com: CVE-2022-34884
value: HIGH

Trust: 1.0

NVD: CVE-2022-34884
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-202301-2379
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-2022-34884
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 3.6
version: 3.1

Trust: 1.0

psirt@lenovo.com: CVE-2022-34884
baseSeverity: HIGH
baseScore: 7.2
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.2
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: CVE-2022-34884
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2022-012569 // CNNVD: CNNVD-202301-2379 // NVD: CVE-2022-34884 // NVD: CVE-2022-34884

PROBLEMTYPE DATA

problemtype:CWE-121

Trust: 1.0

problemtype:CWE-787

Trust: 1.0

problemtype:Out-of-bounds writing (CWE-787) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2022-012569 // NVD: CVE-2022-34884

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202301-2379

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202301-2379

PATCH

title:LEN-87734url:https://support.lenovo.com/us/en/product_security/LEN-87734

Trust: 0.8

title:Lenovo XClarity Controller Buffer error vulnerability fixurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=224342

Trust: 0.6

title: - url:https://github.com/Live-Hack-CVE/CVE-2022-34884

Trust: 0.1

sources: VULMON: CVE-2022-34884 // JVNDB: JVNDB-2022-012569 // CNNVD: CNNVD-202301-2379

EXTERNAL IDS

db:NVDid:CVE-2022-34884

Trust: 3.3

db:LENOVOid:LEN-87734

Trust: 1.7

db:JVNDBid:JVNDB-2022-012569

Trust: 0.8

db:CNNVDid:CNNVD-202301-2379

Trust: 0.6

db:VULMONid:CVE-2022-34884

Trust: 0.1

sources: VULMON: CVE-2022-34884 // JVNDB: JVNDB-2022-012569 // CNNVD: CNNVD-202301-2379 // NVD: CVE-2022-34884

REFERENCES

url:https://support.lenovo.com/us/en/product_security/len-87734

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2022-34884

Trust: 0.8

url:https://cxsecurity.com/cveshow/cve-2022-34884/

Trust: 0.6

url:https://github.com/live-hack-cve/cve-2022-34884

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULMON: CVE-2022-34884 // JVNDB: JVNDB-2022-012569 // CNNVD: CNNVD-202301-2379 // NVD: CVE-2022-34884

SOURCES

db:VULMONid:CVE-2022-34884
db:JVNDBid:JVNDB-2022-012569
db:CNNVDid:CNNVD-202301-2379
db:NVDid:CVE-2022-34884

LAST UPDATE DATE

2024-08-14T15:00:33.521000+00:00


SOURCES UPDATE DATE

db:VULMONid:CVE-2022-34884date:2023-01-31T00:00:00
db:JVNDBid:JVNDB-2022-012569date:2023-08-31T03:30:00
db:CNNVDid:CNNVD-202301-2379date:2023-02-09T00:00:00
db:NVDid:CVE-2022-34884date:2023-02-08T22:17:00.907

SOURCES RELEASE DATE

db:VULMONid:CVE-2022-34884date:2023-01-30T00:00:00
db:JVNDBid:JVNDB-2022-012569date:2023-08-31T00:00:00
db:CNNVDid:CNNVD-202301-2379date:2023-01-30T00:00:00
db:NVDid:CVE-2022-34884date:2023-01-30T22:15:11.770