CVE-2022-4573

An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileges to execute arbitrary code.

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@lenovo.com

Published

2023-10-30

Last modified

2024-09-06

Weaknesses

CWE-20

Affected products

• Thinkpad X1 Fold Gen 1 (Lenovo)
• Thinkpad X1 Fold Gen 1 Firmware (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-106014