CVE-2022-4574

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.  

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@lenovo.com

Published

2023-10-30

Last modified

2024-09-09

Weaknesses

CWE-20

Affected products

• Thinkpad (Lenovo)
• Thinkpad Bios (Lenovo)
• Thinkpad L14 Firmware (Lenovo)
• Thinkpad L14 Gen 2 Firmware (Lenovo)
• Thinkpad L15 Firmware (Lenovo)
• Thinkpad L15 Gen 2 Firmware (Lenovo)
• Thinkpad P14s Gen 1 Firmware (Lenovo)
• Thinkpad P14s Gen 2 Firmware (Lenovo)
• Thinkpad P14s Gen 3 Firmware (Lenovo)
• Thinkpad P15 Gen 1 Firmware (Lenovo)
• Thinkpad P15 Gen 2 Firmware (Lenovo)
• Thinkpad P15s Gen 1 Firmware (Lenovo)
• Thinkpad P15s Gen 2 Firmware (Lenovo)
• Thinkpad P15v Gen 1 Firmware (Lenovo)
• Thinkpad P15v Gen 2 Firmware (Lenovo)
• Thinkpad P15v Gen 3 Firmware (Lenovo)
• Thinkpad P16 Gen 1 Firmware (Lenovo)
• Thinkpad P16s Gen 1 Firmware (Lenovo)
• Thinkpad P17 Gen 1 Firmware (Lenovo)
• Thinkpad P17 Gen 2 Firmware (Lenovo)
• Thinkpad P1 Gen 3 Firmware (Lenovo)
• Thinkpad P1 Gen 4 Firmware (Lenovo)
• Thinkpad P1 Gen 5 Firmware (Lenovo)
• Thinkpad T14 Gen 1 Firmware (Lenovo)
• Thinkpad T14 Gen 2 Firmware (Lenovo)
• Thinkpad T14 Gen 3 Firmware (Lenovo)
• Thinkpad T14s Firmware (Lenovo)
• Thinkpad T14s Gen 2 Firmware (Lenovo)
• Thinkpad T14s Gen 3 Firmware (Lenovo)
• Thinkpad T15 Gen 2 Firmware (Lenovo)
• Thinkpad T15g Gen 1 Firmware (Lenovo)
• Thinkpad T15g Gen 2 Firmware (Lenovo)
• Thinkpad T15p Gen 1 Firmware (Lenovo)
• Thinkpad T15p Gen 2 Firmware (Lenovo)
• Thinkpad T15p Gen 3 Firmware (Lenovo)
• Thinkpad T16 Gen 1 Firmware (Lenovo)
• Thinkpad X13 Firmware (Lenovo)
• Thinkpad X13 Gen 2 Firmware (Lenovo)
• Thinkpad X13 Gen 3 Firmware (Lenovo)
• Thinkpad X13 Yoga Gen 1 Firmware (Lenovo)
• Thinkpad X13 Yoga Gen 2 Firmware (Lenovo)
• Thinkpad X1 Carbon 10th Gen Firmware (Lenovo)
• Thinkpad X1 Carbon 7th Gen Firmware (Lenovo)
• Thinkpad X1 Carbon 8th Gen Firmware (Lenovo)
• Thinkpad X1 Carbon 9th Gen Firmware (Lenovo)
• Thinkpad X1 Extreme 3rd Gen Firmware (Lenovo)
• Thinkpad X1 Extreme 4th Gen Firmware (Lenovo)
• Thinkpad X1 Extreme Gen 5 Firmware (Lenovo)
• Thinkpad X1 Fold Gen 1 Firmware (Lenovo)
• Thinkpad X1 Nano Gen 1 Firmware (Lenovo)
• Thinkpad X1 Nano Gen 2 Firmware (Lenovo)
• Thinkpad X1 Titanium Firmware (Lenovo)
• Thinkpad X1 Yoga 4th Gen Firmware (Lenovo)
• Thinkpad X1 Yoga 5th Gen Firmware (Lenovo)
• Thinkpad X1 Yoga 6th Gen Firmware (Lenovo)
• Thinkpad X1 Yoga 7th Gen Firmware (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-106014