medium6.7
CVE-2022-4574
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute …
Impact
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkpad X13 Yoga Gen 2 Firmware | before 1.40 |
| Lenovo | Thinkpad X13 Yoga Gen 1 Firmware | before 1.45 |
| Lenovo | Thinkpad X13 Gen 3 Firmware | before 1.33 |
| Lenovo | Thinkpad X13 Gen 2 Firmware | before 1.51 |
| Lenovo | Thinkpad X13 Firmware | before 1.26 |
| Lenovo | Thinkpad X1 Yoga 7th Gen Firmware | before 1.37 |
| Lenovo | Thinkpad X1 Yoga 6th Gen Firmware | before 1.59 |
| Lenovo | Thinkpad X1 Yoga 5th Gen Firmware | before 1.30 |
| Lenovo | Thinkpad X1 Yoga 4th Gen Firmware | before 1.56 |
| Lenovo | Thinkpad X1 Titanium Firmware | before 1.24 |
| Lenovo | Thinkpad X1 Nano Gen 2 Firmware | before 1.18 |
| Lenovo | Thinkpad X1 Nano Gen 1 Firmware | before 1.55 |