Please note: This website includes an accessibility system. Press Control-F11 to adjust the website to the visually impaired who are using a screen reader; Press Control-F10 to open an accessibility menu.

Quectel Wireless WAN Driver Command Injection Vulnerability

Quectel Wireless WAN Driver Command Injection Vulnerability

Quectel Wireless WAN Driver Command Injection Vulnerability

Lenovo Security Advisory: LEN-76563

Potential Impact: An attacker with local access could execute specific adapter commands.

Severity: Medium

Scope of Impact: Industry-wide

CVE Identifier: CVE-2022-40283

Summary Description:

Quectel reported a command injection vulnerability in the Quectel EM05-CE Wireless WAN driver that could allow an attacker with local access to execute specific adapter commands.

 

Mitigation Strategy for Customers (what you should do to protect yourself):

Quectel recommends updating to the Quectel Wireless WAN driver version (or newer) indicated for your model in the Product Impact section below.

 

Product Impact:

To download the version specified for your product below, follow these steps:

Navigate to the Drivers & Software support site for your product:

  1. Search for your product by name or machine type.
  2. Click Drivers & Software on the left menu panel.
  3. Click on Manual Update to browse by Component type.
  4. Compare the minimum fix version for your product from the applicable product table below with the latest version posted on the support site.

Lenovo also offers tools to assist with update management as an alternative to the manual steps described above. Refer to the following for additional help:

PC Products and Software: https://support.lenovo.com/us/en/solutions/ht504759

Server and Enterprise Software: https://support.lenovo.com/us/en/solutions/lnvo-lxcaupd and https://datacentersupport.lenovo.com/us/en/documents/lnvo-center

 

Click below links to view affected products:

ThinkPad

 

Revision History:

Revision Date Description
2 2023-09-28 Updated product impact
1 2022-09-13 Initial release

For a complete list of all Lenovo Product Security Advisories, click here.

For the most up to date information, please remain current with updates and advisories from Lenovo regarding your equipment and software. The information provided in this advisory is provided on an “as is” basis without any warranty or guarantee of any kind. Lenovo reserves the right to change or update this advisory at any time.

 

Product Impact:

ThinkPad

Product Component Minimum Fixed Version
L14 Gen 2 Type 20X1 20X2 Laptops (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad 2.0.0.12
L14 Gen 2 Type 20X1 20X2 Laptops (ThinkPad) Quectel EM05-CE WWAN Software Package for Windows (Version 1903 or later) - ThinkPad L14 Gen 2 (Type: 20X1, 20X2), L15 Gen 2 (Type: 20X3, 20X4) 2.0.0.12
L15 Gen 2 Type 20X3 20X4 Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad 2.0.0.12
L15 Gen 2 Type 20X3 20X4 Laptop (ThinkPad) Quectel EM05-CE WWAN Software Package for Windows (Version 1903 or later) - ThinkPad L14 Gen 2 (Type: 20X1, 20X2), L15 Gen 2 (Type: 20X3, 20X4) 2.0.0.12
P1 Gen 4 (type 20Y3, 20Y4 ) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad 2.0.0.12
P1 Gen 4 (type 20Y3, 20Y4 ) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad P1 Gen 4, ThinkPad X1 Extreme Gen 4 2.0.0.12
P14s Gen 2 (Type 20VX, 20VY) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad 2.0.0.12
P14s Gen 2 (Type 20VX, 20VY) Laptop (ThinkPad) Quectel EM05-CE WWAN Software Package for Windows 10 (Version 1903 or later) - ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, T15 Gen 2 2.0.0.12
P15s Gen 2 (Type 20W6, 20W7) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad 2.0.0.12
P15s Gen 2 (Type 20W6, 20W7) Laptop (ThinkPad) Quectel EM05-CE WWAN Software Package for Windows 10 (Version 1903 or later) - ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, T15 Gen 2 2.0.0.12
T14 Gen 2 (Type 20W0, 20W1) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad 2.0.0.12
T14 Gen 2 (Type 20W0, 20W1) Laptop (ThinkPad) Quectel EM05-CE WWAN Software Package for Windows 10 (Version 1903 or later) - ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, T15 Gen 2 2.0.0.12
T14s Gen 2 (Type 20WM, 20WN) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad 2.0.0.12
T14s Gen 2 (Type 20WM, 20WN) Laptop (ThinkPad) Quectel EM05-CE WWAN Software Package for Windows 10 (Version 1903 or Later) - ThinkPad T14s Gen 2, X13 Gen 2 2.0.0.12
T15 Gen 2 (Type 20W4, 20W5) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad 2.0.0.12
T15 Gen 2 (Type 20W4, 20W5) Laptop (ThinkPad) Quectel EM05-CE WWAN Software Package for Windows 10 (Version 1903 or later) - ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, T15 Gen 2 2.0.0.12
X1 Carbon 8th Gen - (Type 20U9, 20UA) Laptop (ThinkPad) Quectel EM05-CE WWAN Software Package for Windows 11 (Version 21H2 or later), 10 (Version 1903 or later) - ThinkPad X13 Gen 1, X1 Carbon Gen 8 2.0.0.12
X1 Carbon 9th Gen (Type 20XW, 20XX) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad 2.0.0.12
X1 Carbon 9th Gen (Type 20XW, 20XX) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows Windows 11 (Version 21H2 or later) and 10 (Version 1809 or later) - ThinkPad X1 Carbon 9th Gen 2.0.0.12
X1 Extreme 4th Gen (Type 20Y5, 20Y6) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad 2.0.0.12
X1 Extreme 4th Gen (Type 20Y5, 20Y6) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad P1 Gen 4, ThinkPad X1 Extreme Gen 4 2.0.0.12
X1 Nano Gen 1 (Type 20UN 20UQ) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad 2.0.0.12
X1 Nano Gen 1 (Type 20UN 20UQ) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or Later), 10 (Version 1903 or Later) - ThinkPad X1 Nano Gen 1 2.0.0.12
X13 (Type 20T2, 20T3) Laptop (ThinkPad) Quectel EM05-CE WWAN Software Package for Windows 11 (Version 21H2 or later), 10 (Version 1903 or later) - ThinkPad X13 Gen 1, X1 Carbon Gen 8 2.0.0.12
X13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad 2.0.0.12
X13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) Quectel EM05-CE WWAN Software Package for Windows 10 (Version 1903 or Later) - ThinkPad T14s Gen 2, X13 Gen 2 2.0.0.12
X13 Yoga Gen 2 (Type 20W8, 20W9) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 1809 or later) - ThinkPad 2.0.0.12
X13 Yoga Gen 2 (Type 20W8, 20W9) Laptop (ThinkPad) Quectel EM05-CE Wireless WAN Driver for Windows 11 (Version 21H2 or later), 10 (Version 20H2 or later) - ThinkPad X13 Yoga Gen 2 2.0.0.12

Alias Id:LEN-76563
Document ID:PS500515
Original Publish Date:09/14/2022
Last Modified Date:09/28/2023