medium6.7
CVE-2022-1107
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad …
Impact
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkpad 11e Firmware | before n15et78w |
| Lenovo | Thinkpad Helix Firmware | before n17eta8w |
| Lenovo | Thinkpad L560 Firmware | before n1het85w |
| Lenovo | Thinkpad L570 Firmware | before n1xet65w |
| Lenovo | Thinkpad P50s Firmware | before n1ket46w |
| Lenovo | Thinkpad P51s Firmware | before n1vet50w |
| Lenovo | Thinkpad P52s Firmware | before n27et36w |
| Lenovo | Thinkpad S540 Firmware | before gpet80ww |
| Lenovo | Thinkpad T550 Firmware | before n11et50w |
| Lenovo | Thinkpad T560 Firmware | before n1ket46w |
| Lenovo | Thinkpad T570 Firmware | before n1vet50w |
| Lenovo | Thinkpad T580 Firmware | before n27et36w |