medium6.7
CVE-2022-48189
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute a…
Impact
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkpad E14 Firmware | before 1.23 |
| Lenovo | Thinkpad E14 Gen 2 Firmware | before 1.55 |
| Lenovo | Thinkpad E14 Gen 4 Firmware | before 1.18 before 1.16 |
| Lenovo | Thinkpad E15 Firmware | before 1.23 |
| Lenovo | Thinkpad E15 Gen 2 Firmware | before 1.55 |
| Lenovo | Thinkpad E15 Gen 4 Firmware | before 1.18 before 1.16 |
| Lenovo | Thinkpad E490 Firmware | before 1.34 |
| Lenovo | Thinkpad E490s Firmware | before 1.34 |
| Lenovo | Thinkpad E590 Firmware | before 1.34 |
| Lenovo | Thinkpad L13 Gen 3 Firmware | before 1.14 |
| Lenovo | Thinkpad L13 Yoga Gen 3 Firmware | before 1.14 |
| Lenovo | Thinkpad L14 Firmware | before 1.2 before 1.3 All versions before 1.26 |