CVEvulnerability

CVE-2022-48189

6.7 MEDIUM Published 2023-10-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20

Description

An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected configurations

• lenovo thinkpad e14 firmware (< 1.23) • lenovo thinkpad e14 gen 2 firmware (< 1.55) • lenovo thinkpad e14 gen 4 firmware (< 1.18) • lenovo thinkpad e14 gen 4 firmware (< 1.16) • lenovo thinkpad e15 firmware (< 1.23) • lenovo thinkpad e15 gen 2 firmware (< 1.55) • lenovo thinkpad e15 gen 4 firmware (< 1.18) • lenovo thinkpad e15 gen 4 firmware (< 1.16) • lenovo thinkpad e490 firmware (< 1.34) • lenovo thinkpad e490s firmware (< 1.34) • lenovo thinkpad e590 firmware (< 1.34) • lenovo thinkpad l13 gen 3 firmware (< 1.14) • lenovo thinkpad l13 yoga gen 3 firmware (< 1.14) • lenovo thinkpad l14 firmware (< 1.2) • lenovo thinkpad l14 firmware (< 1.3) • lenovo thinkpad l14 firmware • lenovo thinkpad l14 firmware (< 1.26) • lenovo thinkpad l15 firmware (< 1.2) • lenovo thinkpad l15 firmware (< 1.3) • lenovo thinkpad l15 gen 2 firmware • lenovo thinkpad l15 gen 3 firmware (< 1.26) • lenovo thinkpad l490 firmware (< 1.32) • lenovo thinkpad l590 firmware (< 1.32) • lenovo thinkpad p1 gen 2 firmware (< 1.46) • lenovo thinkpad p1 gen 3 firmware (< 1.27) • lenovo thinkpad p1 gen 4 firmware (< 1.22) • lenovo thinkpad p1 gen 5 firmware (< 1.16) • lenovo thinkpad p14s gen 1 firmware (< 1.28) • lenovo thinkpad p14s gen 2 firmware • lenovo thinkpad p14s gen 2 firmware (< 1.34) • lenovo thinkpad p14s gen 3 firmware • lenovo thinkpad p15 gen 1 firmware (< 1.32) • lenovo thinkpad p15 gen 2 firmware (< 1.25) • lenovo thinkpad p15s gen 1 firmware (< 1.28) • lenovo thinkpad p15s gen 2 firmware • lenovo thinkpad p15v gen 1 firmware (< 1.32) • lenovo thinkpad p15v gen 2 firmware (< 1.19) • lenovo thinkpad p15v gen 3 firmware (< 1.15) • lenovo thinkpad p16 gen 1 firmware (< 1.17) • lenovo thinkpad p16s gen 1 firmware • lenovo thinkpad p17 gen 1 firmware (< 1.32) • lenovo thinkpad p17 gen 2 firmware (< 1.25) • lenovo thinkpad p43s firmware • lenovo thinkpad p53 firmware (< 1.4) • lenovo thinkpad p53s firmware • lenovo thinkpad p73 firmware (< 1.4) • lenovo thinkpad t14 gen 1 firmware (< 1.28) • lenovo thinkpad t14 gen 2 firmware • lenovo thinkpad t14 gen 2 firmware (< 1.34) • lenovo thinkpad t14 gen 3 firmware • lenovo thinkpad t14s firmware (< 1.26) • lenovo thinkpad t14s gen 2 firmware (< 1.51) • lenovo thinkpad t14s gen 2 firmware (< 1.37) • lenovo thinkpad t14s gen 3 firmware (< 1.33) • lenovo thinkpad t15 firmware (< 1.28) • lenovo thinkpad t15 gen 2 firmware • lenovo thinkpad t15g gen 1 firmware (< 1.32) • lenovo thinkpad t15g gen 2 firmware (< 1.25) • lenovo thinkpad t15p gen 1 firmware (< 1.32) • lenovo thinkpad t15p gen 2 firmware (< 1.19) … and 35 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References