CVEvulnerability
CVE-2022-48189
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-10-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-20
Description
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected configurations
• lenovo thinkpad e14 firmware (< 1.23)
• lenovo thinkpad e14 gen 2 firmware (< 1.55)
• lenovo thinkpad e14 gen 4 firmware (< 1.18)
• lenovo thinkpad e14 gen 4 firmware (< 1.16)
• lenovo thinkpad e15 firmware (< 1.23)
• lenovo thinkpad e15 gen 2 firmware (< 1.55)
• lenovo thinkpad e15 gen 4 firmware (< 1.18)
• lenovo thinkpad e15 gen 4 firmware (< 1.16)
• lenovo thinkpad e490 firmware (< 1.34)
• lenovo thinkpad e490s firmware (< 1.34)
• lenovo thinkpad e590 firmware (< 1.34)
• lenovo thinkpad l13 gen 3 firmware (< 1.14)
• lenovo thinkpad l13 yoga gen 3 firmware (< 1.14)
• lenovo thinkpad l14 firmware (< 1.2)
• lenovo thinkpad l14 firmware (< 1.3)
• lenovo thinkpad l14 firmware
• lenovo thinkpad l14 firmware (< 1.26)
• lenovo thinkpad l15 firmware (< 1.2)
• lenovo thinkpad l15 firmware (< 1.3)
• lenovo thinkpad l15 gen 2 firmware
• lenovo thinkpad l15 gen 3 firmware (< 1.26)
• lenovo thinkpad l490 firmware (< 1.32)
• lenovo thinkpad l590 firmware (< 1.32)
• lenovo thinkpad p1 gen 2 firmware (< 1.46)
• lenovo thinkpad p1 gen 3 firmware (< 1.27)
• lenovo thinkpad p1 gen 4 firmware (< 1.22)
• lenovo thinkpad p1 gen 5 firmware (< 1.16)
• lenovo thinkpad p14s gen 1 firmware (< 1.28)
• lenovo thinkpad p14s gen 2 firmware
• lenovo thinkpad p14s gen 2 firmware (< 1.34)
• lenovo thinkpad p14s gen 3 firmware
• lenovo thinkpad p15 gen 1 firmware (< 1.32)
• lenovo thinkpad p15 gen 2 firmware (< 1.25)
• lenovo thinkpad p15s gen 1 firmware (< 1.28)
• lenovo thinkpad p15s gen 2 firmware
• lenovo thinkpad p15v gen 1 firmware (< 1.32)
• lenovo thinkpad p15v gen 2 firmware (< 1.19)
• lenovo thinkpad p15v gen 3 firmware (< 1.15)
• lenovo thinkpad p16 gen 1 firmware (< 1.17)
• lenovo thinkpad p16s gen 1 firmware
• lenovo thinkpad p17 gen 1 firmware (< 1.32)
• lenovo thinkpad p17 gen 2 firmware (< 1.25)
• lenovo thinkpad p43s firmware
• lenovo thinkpad p53 firmware (< 1.4)
• lenovo thinkpad p53s firmware
• lenovo thinkpad p73 firmware (< 1.4)
• lenovo thinkpad t14 gen 1 firmware (< 1.28)
• lenovo thinkpad t14 gen 2 firmware
• lenovo thinkpad t14 gen 2 firmware (< 1.34)
• lenovo thinkpad t14 gen 3 firmware
• lenovo thinkpad t14s firmware (< 1.26)
• lenovo thinkpad t14s gen 2 firmware (< 1.51)
• lenovo thinkpad t14s gen 2 firmware (< 1.37)
• lenovo thinkpad t14s gen 3 firmware (< 1.33)
• lenovo thinkpad t15 firmware (< 1.28)
• lenovo thinkpad t15 gen 2 firmware
• lenovo thinkpad t15g gen 1 firmware (< 1.32)
• lenovo thinkpad t15g gen 2 firmware (< 1.25)
• lenovo thinkpad t15p gen 1 firmware (< 1.32)
• lenovo thinkpad t15p gen 2 firmware (< 1.19)
… and 35 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-106014 Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-106014 Vendor Advisory