6.7

CVE-2022-4574

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.  
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Thinkpad X13 Gen 3 Firmware Version < 1.33
   Lenovo ≫ Thinkpad X13 Gen 3 Version -
Lenovo ≫ Thinkpad X13 Gen 2 Firmware Version < 1.51
   Lenovo ≫ Thinkpad X13 Gen 2 Version -
Lenovo ≫ Thinkpad X13 Firmware Version < 1.26
   Lenovo ≫ Thinkpad X13 Version -
Lenovo ≫ Thinkpad X1 Titanium Firmware Version < 1.24
   Lenovo ≫ Thinkpad X1 Titanium Version -
Lenovo ≫ Thinkpad T16 Gen 1 Firmware Version < 1.31
   Lenovo ≫ Thinkpad T16 Gen 1 Version -
Lenovo ≫ Thinkpad T15p Gen 3 Firmware Version < 1.15
   Lenovo ≫ Thinkpad T15p Gen 3 Version -
Lenovo ≫ Thinkpad T15p Gen 2 Firmware Version < 1.19
   Lenovo ≫ Thinkpad T15p Gen 2 Version -
Lenovo ≫ Thinkpad T15p Gen 1 Firmware Version < 1.32
   Lenovo ≫ Thinkpad T15p Gen 1 Version -
Lenovo ≫ Thinkpad T15g Gen 2 Firmware Version < 1.25
   Lenovo ≫ Thinkpad T15g Gen 2 Version -
Lenovo ≫ Thinkpad T15g Gen 1 Firmware Version < 1.32
   Lenovo ≫ Thinkpad T15g Gen 1 Version -
Lenovo ≫ Thinkpad T15 Gen 2 Firmware Version -
   Lenovo ≫ Thinkpad T15 Gen 2 Version -
Lenovo ≫ Thinkpad T14s Gen 3 Firmware Version < 1.33
   Lenovo ≫ Thinkpad T14s Gen 3 Version -
Lenovo ≫ Thinkpad T14s Gen 2 Firmware Version < 1.51
   Lenovo ≫ Thinkpad T14s Gen 2 Version -
Lenovo ≫ Thinkpad T14s Firmware Version < 1.26
   Lenovo ≫ Thinkpad T14s Version -
Lenovo ≫ Thinkpad T14 Gen 3 Firmware Version < 1.31
   Lenovo ≫ Thinkpad T14 Gen 3 Version -
Lenovo ≫ Thinkpad T14 Gen 2 Firmware Version -
   Lenovo ≫ Thinkpad T14 Gen 2 Version -
Lenovo ≫ Thinkpad T14 Gen 1 Firmware Version < 1.28
   Lenovo ≫ Thinkpad T14 Gen 1 Version -
Lenovo ≫ Thinkpad P17 Gen 2 Firmware Version < 1.25
   Lenovo ≫ Thinkpad P17 Gen 2 Version -
Lenovo ≫ Thinkpad P17 Gen 1 Firmware Version < 1.32
   Lenovo ≫ Thinkpad P17 Gen 1 Version -
Lenovo ≫ Thinkpad P16s Gen 1 Firmware Version < 1.31
   Lenovo ≫ Thinkpad P16s Gen 1 Version -
Lenovo ≫ Thinkpad P16 Gen 1 Firmware Version < 1.17
   Lenovo ≫ Thinkpad P16 Gen 1 Version -
Lenovo ≫ Thinkpad P15v Gen 3 Firmware Version < 1.15
   Lenovo ≫ Thinkpad P15v Gen 3 Version -
Lenovo ≫ Thinkpad P15v Gen 2 Firmware Version < 1.19
   Lenovo ≫ Thinkpad P15v Gen 2 Version -
Lenovo ≫ Thinkpad P15v Gen 1 Firmware Version < 1.32
   Lenovo ≫ Thinkpad P15v Gen 1 Version -
Lenovo ≫ Thinkpad P15s Gen 1 Firmware Version < 1.28
   Lenovo ≫ Thinkpad P15s Gen 1 Version -
Lenovo ≫ Thinkpad P15 Gen 2 Firmware Version < 1.25
   Lenovo ≫ Thinkpad P15 Gen 2 Version -
Lenovo ≫ Thinkpad P15 Gen 1 Firmware Version < 1.32
   Lenovo ≫ Thinkpad P15 Gen 1 Version -
Lenovo ≫ Thinkpad P14s Gen 3 Firmware Version < 1.31
   Lenovo ≫ Thinkpad P14s Gen 3 Version -
Lenovo ≫ Thinkpad P14s Gen 1 Firmware Version < 1.28
   Lenovo ≫ Thinkpad P14s Gen 1 Version -
Lenovo ≫ Thinkpad P1 Gen 5 Firmware Version < 1.16
   Lenovo ≫ Thinkpad P1 Gen 5 Version -
Lenovo ≫ Thinkpad P1 Gen 4 Firmware Version 1.22
   Lenovo ≫ Thinkpad P1 Gen 4 Version -
Lenovo ≫ Thinkpad P1 Gen 3 Firmware Version < 1.27
   Lenovo ≫ Thinkpad P1 Gen 3 Version -
Lenovo ≫ Thinkpad L15 Gen 2 Firmware Version -
   Lenovo ≫ Thinkpad L15 Gen 2 Version -
Lenovo ≫ Thinkpad L15 Firmware Version < 1.20
   Lenovo ≫ Thinkpad L15 Version -
Lenovo ≫ Thinkpad L14 Gen 2 Firmware Version -
   Lenovo ≫ Thinkpad L14 Gen 2 Version -
Lenovo ≫ Thinkpad L14 Firmware Version < 1.20
   Lenovo ≫ Thinkpad L14 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.088
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lenovo 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://support.lenovo.com/us/en/product_security/LEN-106014
Vendor Advisory