medium6.7
CVE-2022-4575
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or lo…
Impact
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and elevated privileges the ability to bypass Secure Boot.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkpad 25 Firmware | before 1.73 |
| Lenovo | Thinkpad L560 Firmware | before 1.62 |
| Lenovo | Thinkpad P50 Firmware | before 1.71 |
| Lenovo | Thinkpad P50s Firmware | before 1.45 |
| Lenovo | Thinkpad P70 Firmware | before 2.45 |
| Lenovo | Thinkpad T470 Firmware | before 1.73 |
| Lenovo | Thinkpad T470s Firmware | before 1.49 |
| Lenovo | Thinkpad T560 Firmware | before 1.45 |
| Lenovo | Thinkpad X1 Carbon 4th Gen Firmware | before 1.56 |
| Lenovo | Thinkpad X1 Yoga 1st Gen Firmware | before 1.56 |
| Lenovo | Thinkpad X260 Firmware | before 1.50 |
| Lenovo | Thinkpad X270 Firmware | before 1.47 |