6.7

CVE-2022-48189

An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code. 
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Thinkpad E14 Firmware Version < 1.23
   Lenovo ≫ Thinkpad E14 Version -
Lenovo ≫ Thinkpad E14 Gen 2 Firmware Version < 1.55
   Lenovo ≫ Thinkpad E14 Gen 2 Version -
Lenovo ≫ Thinkpad E14 Gen 4 Firmware Version < 1.18
   Lenovo ≫ Thinkpad E14 Gen 4 Version -
Lenovo ≫ Thinkpad E14 Gen 4 Firmware Version < 1.16
   Lenovo ≫ Thinkpad E14 Gen 4 Version -
Lenovo ≫ Thinkpad E15 Firmware Version < 1.23
   Lenovo ≫ Thinkpad E15 Version -
Lenovo ≫ Thinkpad E15 Gen 2 Firmware Version < 1.55
   Lenovo ≫ Thinkpad E15 Gen 2 Version -
Lenovo ≫ Thinkpad E15 Gen 4 Firmware Version < 1.18
   Lenovo ≫ Thinkpad E15 Gen 4 Version -
Lenovo ≫ Thinkpad E15 Gen 4 Firmware Version < 1.16
   Lenovo ≫ Thinkpad E15 Gen 4 Version -
Lenovo ≫ Thinkpad E490 Firmware Version < 1.34
   Lenovo ≫ Thinkpad E490 Version -
Lenovo ≫ Thinkpad E490s Firmware Version < 1.34
   Lenovo ≫ Thinkpad E490s Version -
Lenovo ≫ Thinkpad E590 Firmware Version < 1.34
   Lenovo ≫ Thinkpad E590 Version -
Lenovo ≫ Thinkpad L13 Gen 3 Firmware Version < 1.14
   Lenovo ≫ Thinkpad L13 Gen 3 Version -
Lenovo ≫ Thinkpad L14 Firmware Version < 1.2
   Lenovo ≫ Thinkpad L14 Version -
Lenovo ≫ Thinkpad L14 Firmware Version < 1.3
   Lenovo ≫ Thinkpad L14 Version -
Lenovo ≫ Thinkpad L14 Firmware Version -
   Lenovo ≫ Thinkpad L14 Version -
Lenovo ≫ Thinkpad L14 Firmware Version < 1.26
   Lenovo ≫ Thinkpad L14 Version -
Lenovo ≫ Thinkpad L15 Firmware Version < 1.2
   Lenovo ≫ Thinkpad L15 Version -
Lenovo ≫ Thinkpad L15 Firmware Version < 1.3
   Lenovo ≫ Thinkpad L15 Version -
Lenovo ≫ Thinkpad L15 Gen 2 Firmware Version -
   Lenovo ≫ Thinkpad L15 Gen 2 Version -
Lenovo ≫ Thinkpad L15 Gen 3 Firmware Version < 1.26
   Lenovo ≫ Thinkpad L15 Gen 3 Version -
Lenovo ≫ Thinkpad L490 Firmware Version < 1.32
   Lenovo ≫ Thinkpad L490 Version -
Lenovo ≫ Thinkpad L590 Firmware Version < 1.32
   Lenovo ≫ Thinkpad L590 Version -
Lenovo ≫ Thinkpad P1 Gen 2 Firmware Version < 1.46
   Lenovo ≫ Thinkpad P1 Gen 2 Version -
Lenovo ≫ Thinkpad P1 Gen 3 Firmware Version < 1.27
   Lenovo ≫ Thinkpad P1 Gen 3 Version -
Lenovo ≫ Thinkpad P1 Gen 4 Firmware Version < 1.22
   Lenovo ≫ Thinkpad P1 Gen 4 Version -
Lenovo ≫ Thinkpad P1 Gen 5 Firmware Version < 1.16
   Lenovo ≫ Thinkpad P1 Gen 5 Version -
Lenovo ≫ Thinkpad P14s Gen 1 Firmware Version < 1.28
   Lenovo ≫ Thinkpad P14s Gen 1 Version -
Lenovo ≫ Thinkpad P14s Gen 2 Firmware Version < 1.34
   Lenovo ≫ Thinkpad P14s Gen 2 Version -
Lenovo ≫ Thinkpad P15 Gen 1 Firmware Version < 1.32
   Lenovo ≫ Thinkpad P15 Gen 1 Version -
Lenovo ≫ Thinkpad P15 Gen 2 Firmware Version < 1.25
   Lenovo ≫ Thinkpad P15 Gen 2 Version -
Lenovo ≫ Thinkpad P15s Gen 1 Firmware Version < 1.28
   Lenovo ≫ Thinkpad P15s Gen 1 Version -
Lenovo ≫ Thinkpad P15v Gen 1 Firmware Version < 1.32
   Lenovo ≫ Thinkpad P15v Gen 1 Version -
Lenovo ≫ Thinkpad P15v Gen 2 Firmware Version < 1.19
   Lenovo ≫ Thinkpad P15v Gen 2 Version -
Lenovo ≫ Thinkpad P15v Gen 3 Firmware Version < 1.15
   Lenovo ≫ Thinkpad P15v Gen 3 Version -
Lenovo ≫ Thinkpad P16 Gen 1 Firmware Version < 1.17
   Lenovo ≫ Thinkpad P16 Gen 1 Version -
Lenovo ≫ Thinkpad P17 Gen 1 Firmware Version < 1.32
   Lenovo ≫ Thinkpad P17 Gen 1 Version -
Lenovo ≫ Thinkpad P17 Gen 2 Firmware Version < 1.25
   Lenovo ≫ Thinkpad P17 Gen 2 Version -
Lenovo ≫ Thinkpad P43s Firmware Version -
   Lenovo ≫ Thinkpad P43s Version -
Lenovo ≫ Thinkpad P53 Firmware Version < 1.4
   Lenovo ≫ Thinkpad P53 Version -
Lenovo ≫ Thinkpad P53s Firmware Version -
   Lenovo ≫ Thinkpad P53s Version -
Lenovo ≫ Thinkpad P73 Firmware Version < 1.4
   Lenovo ≫ Thinkpad P73 Version -
Lenovo ≫ Thinkpad T14 Gen 1 Firmware Version < 1.28
   Lenovo ≫ Thinkpad T14 Gen 1 Version -
Lenovo ≫ Thinkpad T14 Gen 1 Firmware Version < 1.28
   Lenovo ≫ Thinkpad T14 Gen 1 Version -
Lenovo ≫ Thinkpad T14 Gen 2 Firmware Version -
   Lenovo ≫ Thinkpad T14 Gen 2 Version -
Lenovo ≫ Thinkpad T14 Gen 2 Firmware Version < 1.34
   Lenovo ≫ Thinkpad T14 Gen 2 Version -
Lenovo ≫ Thinkpad T14 Gen 3 Firmware Version -
   Lenovo ≫ Thinkpad T14 Gen 3 Version -
Lenovo ≫ Thinkpad T14s Firmware Version < 1.26
   Lenovo ≫ Thinkpad T14s Version -
Lenovo ≫ Thinkpad T14s Gen 2 Firmware Version < 1.51
   Lenovo ≫ Thinkpad T14s Gen 2 Version -
Lenovo ≫ Thinkpad T14s Gen 2 Firmware Version < 1.37
   Lenovo ≫ Thinkpad T14s Gen 2 Version -
Lenovo ≫ Thinkpad T14s Gen 3 Firmware Version < 1.33
   Lenovo ≫ Thinkpad T14s Gen 3 Version -
Lenovo ≫ Thinkpad T15 Firmware Version < 1.28
   Lenovo ≫ Thinkpad T15 Version -
Lenovo ≫ Thinkpad T15 Gen 2 Firmware Version -
   Lenovo ≫ Thinkpad T15 Gen 2 Version -
Lenovo ≫ Thinkpad T15g Gen 1 Firmware Version < 1.32
   Lenovo ≫ Thinkpad T15g Gen 1 Version -
Lenovo ≫ Thinkpad T15g Gen 2 Firmware Version < 1.25
   Lenovo ≫ Thinkpad T15g Gen 2 Version -
Lenovo ≫ Thinkpad T15p Gen 1 Firmware Version < 1.32
   Lenovo ≫ Thinkpad T15p Gen 1 Version -
Lenovo ≫ Thinkpad T15p Gen 2 Firmware Version < 1.19
   Lenovo ≫ Thinkpad T15p Gen 2 Version -
Lenovo ≫ Thinkpad T15p Gen 3 Firmware Version < 1.15
   Lenovo ≫ Thinkpad T15p Gen 3 Version -
Lenovo ≫ Thinkpad T16 Gen 1 Firmware Version -
   Lenovo ≫ Thinkpad T16 Gen 1 Version -
Lenovo ≫ Thinkpad T490 Firmware Version -
   Lenovo ≫ Thinkpad T490 Version -
Lenovo ≫ Thinkpad T490 Firmware Version -
   Lenovo ≫ Thinkpad T490 Version -
Lenovo ≫ Thinkpad T490 Firmware Version -
   Lenovo ≫ Thinkpad T490 Version -
Lenovo ≫ Thinkpad T490s Firmware Version -
   Lenovo ≫ Thinkpad T490s Version -
Lenovo ≫ Thinkpad T590 Firmware Version -
   Lenovo ≫ Thinkpad T590 Version -
Lenovo ≫ Thinkpad X1 Titanium Firmware Version < 1.24
   Lenovo ≫ Thinkpad X1 Titanium Version -
Lenovo ≫ Thinkpad X13 Firmware Version < 1.26
   Lenovo ≫ Thinkpad X13 Version -
Lenovo ≫ Thinkpad X13 Gen 2 Firmware Version < 1.51
   Lenovo ≫ Thinkpad X13 Gen 2 Version -
Lenovo ≫ Thinkpad X13 Gen 2 Firmware Version < 1.37
   Lenovo ≫ Thinkpad X13 Gen 2 Version -
Lenovo ≫ Thinkpad X13 Gen 3 Firmware Version < 1.33
   Lenovo ≫ Thinkpad X13 Gen 3 Version -
Lenovo ≫ Thinkpad X390 Firmware Version -
   Lenovo ≫ Thinkpad X390 Version -
Lenovo ≫ Thinkpad X390 Firmware Version -
   Lenovo ≫ Thinkpad X390 Version -
Lenovo ≫ Thinkpad X390 Yoga Firmware Version < 1.95
   Lenovo ≫ Thinkpad X390 Yoga Version -
Lenovo ≫ Thinkpad Z13 Gen 1 Firmware Version < 1.57
   Lenovo ≫ Thinkpad Z13 Gen 1 Version -
Lenovo ≫ Thinkpad Z16 Gen 1 Firmware Version < 1.57
   Lenovo ≫ Thinkpad Z16 Gen 1 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.092
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lenovo 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://support.lenovo.com/us/en/product_security/LEN-106014
Vendor Advisory