CVEvulnerability

CVE-2022-4574

6.7 MEDIUM Published 2023-10-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20

Description

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.  

Affected configurations

• lenovo thinkpad x13 yoga gen 2 firmware (< 1.40) • lenovo thinkpad x13 yoga gen 1 firmware (< 1.45) • lenovo thinkpad x13 gen 3 firmware (< 1.33) • lenovo thinkpad x13 gen 2 firmware (< 1.51) • lenovo thinkpad x13 firmware (< 1.26) • lenovo thinkpad x1 yoga 7th gen firmware (< 1.37) • lenovo thinkpad x1 yoga 6th gen firmware (< 1.59) • lenovo thinkpad x1 yoga 5th gen firmware (< 1.30) • lenovo thinkpad x1 yoga 4th gen firmware (< 1.56) • lenovo thinkpad x1 titanium firmware (< 1.24) • lenovo thinkpad x1 nano gen 2 firmware (< 1.18) • lenovo thinkpad x1 nano gen 1 firmware (< 1.55) • lenovo thinkpad x1 fold gen 1 firmware • lenovo thinkpad x1 extreme gen 5 firmware (< 1.16) • lenovo thinkpad x1 extreme 4th gen firmware (< 1.22) • lenovo thinkpad x1 extreme 3rd gen firmware (< 1.27) • lenovo thinkpad x1 carbon 9th gen firmware (< 1.59) • lenovo thinkpad x1 carbon 8th gen firmware (< 1.30) • lenovo thinkpad x1 carbon 7th gen firmware (< 1.56) • lenovo thinkpad x1 carbon 10th gen firmware (< 1.37) • lenovo thinkpad t16 gen 1 firmware (< 1.31) • lenovo thinkpad t15p gen 3 firmware (< 1.15) • lenovo thinkpad t15p gen 2 firmware (< 1.19) • lenovo thinkpad t15p gen 1 firmware (< 1.32) • lenovo thinkpad t15g gen 2 firmware (< 1.25) • lenovo thinkpad t15g gen 1 firmware (< 1.32) • lenovo thinkpad t15 gen 2 firmware • lenovo thinkpad t14s gen 3 firmware (< 1.33) • lenovo thinkpad t14s gen 2 firmware (< 1.51) • lenovo thinkpad t14s firmware (< 1.26) • lenovo thinkpad t14 gen 3 firmware (< 1.31) • lenovo thinkpad t14 gen 2 firmware • lenovo thinkpad t14 gen 1 firmware (< 1.28) • lenovo thinkpad p17 gen 2 firmware (< 1.25) • lenovo thinkpad p17 gen 1 firmware (< 1.32) • lenovo thinkpad p16s gen 1 firmware (< 1.31) • lenovo thinkpad p16 gen 1 firmware (< 1.17) • lenovo thinkpad p15v gen 3 firmware (< 1.15) • lenovo thinkpad p15v gen 2 firmware (< 1.19) • lenovo thinkpad p15v gen 1 firmware (< 1.32) • lenovo thinkpad p15s gen 2 firmware • lenovo thinkpad p15s gen 1 firmware (< 1.28) • lenovo thinkpad p15 gen 2 firmware (< 1.25) • lenovo thinkpad p15 gen 1 firmware (< 1.32) • lenovo thinkpad p14s gen 3 firmware (< 1.31) • lenovo thinkpad p14s gen 2 firmware • lenovo thinkpad p14s gen 1 firmware (< 1.28) • lenovo thinkpad p1 gen 5 firmware (< 1.16) • lenovo thinkpad p1 gen 4 firmware 1.22 • lenovo thinkpad p1 gen 3 firmware (< 1.27) • lenovo thinkpad l15 gen 2 firmware • lenovo thinkpad l15 firmware (< 1.20) • lenovo thinkpad l14 gen 2 firmware • lenovo thinkpad l14 firmware (< 1.20)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References