CVEvulnerability
CVE-2022-4574
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-10-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-20
Description
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected configurations
• lenovo thinkpad x13 yoga gen 2 firmware (< 1.40)
• lenovo thinkpad x13 yoga gen 1 firmware (< 1.45)
• lenovo thinkpad x13 gen 3 firmware (< 1.33)
• lenovo thinkpad x13 gen 2 firmware (< 1.51)
• lenovo thinkpad x13 firmware (< 1.26)
• lenovo thinkpad x1 yoga 7th gen firmware (< 1.37)
• lenovo thinkpad x1 yoga 6th gen firmware (< 1.59)
• lenovo thinkpad x1 yoga 5th gen firmware (< 1.30)
• lenovo thinkpad x1 yoga 4th gen firmware (< 1.56)
• lenovo thinkpad x1 titanium firmware (< 1.24)
• lenovo thinkpad x1 nano gen 2 firmware (< 1.18)
• lenovo thinkpad x1 nano gen 1 firmware (< 1.55)
• lenovo thinkpad x1 fold gen 1 firmware
• lenovo thinkpad x1 extreme gen 5 firmware (< 1.16)
• lenovo thinkpad x1 extreme 4th gen firmware (< 1.22)
• lenovo thinkpad x1 extreme 3rd gen firmware (< 1.27)
• lenovo thinkpad x1 carbon 9th gen firmware (< 1.59)
• lenovo thinkpad x1 carbon 8th gen firmware (< 1.30)
• lenovo thinkpad x1 carbon 7th gen firmware (< 1.56)
• lenovo thinkpad x1 carbon 10th gen firmware (< 1.37)
• lenovo thinkpad t16 gen 1 firmware (< 1.31)
• lenovo thinkpad t15p gen 3 firmware (< 1.15)
• lenovo thinkpad t15p gen 2 firmware (< 1.19)
• lenovo thinkpad t15p gen 1 firmware (< 1.32)
• lenovo thinkpad t15g gen 2 firmware (< 1.25)
• lenovo thinkpad t15g gen 1 firmware (< 1.32)
• lenovo thinkpad t15 gen 2 firmware
• lenovo thinkpad t14s gen 3 firmware (< 1.33)
• lenovo thinkpad t14s gen 2 firmware (< 1.51)
• lenovo thinkpad t14s firmware (< 1.26)
• lenovo thinkpad t14 gen 3 firmware (< 1.31)
• lenovo thinkpad t14 gen 2 firmware
• lenovo thinkpad t14 gen 1 firmware (< 1.28)
• lenovo thinkpad p17 gen 2 firmware (< 1.25)
• lenovo thinkpad p17 gen 1 firmware (< 1.32)
• lenovo thinkpad p16s gen 1 firmware (< 1.31)
• lenovo thinkpad p16 gen 1 firmware (< 1.17)
• lenovo thinkpad p15v gen 3 firmware (< 1.15)
• lenovo thinkpad p15v gen 2 firmware (< 1.19)
• lenovo thinkpad p15v gen 1 firmware (< 1.32)
• lenovo thinkpad p15s gen 2 firmware
• lenovo thinkpad p15s gen 1 firmware (< 1.28)
• lenovo thinkpad p15 gen 2 firmware (< 1.25)
• lenovo thinkpad p15 gen 1 firmware (< 1.32)
• lenovo thinkpad p14s gen 3 firmware (< 1.31)
• lenovo thinkpad p14s gen 2 firmware
• lenovo thinkpad p14s gen 1 firmware (< 1.28)
• lenovo thinkpad p1 gen 5 firmware (< 1.16)
• lenovo thinkpad p1 gen 4 firmware 1.22
• lenovo thinkpad p1 gen 3 firmware (< 1.27)
• lenovo thinkpad l15 gen 2 firmware
• lenovo thinkpad l15 firmware (< 1.20)
• lenovo thinkpad l14 gen 2 firmware
• lenovo thinkpad l14 firmware (< 1.20)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-106014 Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-106014 Vendor Advisory