Medium severity · published Oct 30, 2023
CVE-2022-4574
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code
6.7
CVSS
0.2%
EPSS
No
On KEV
Description
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TB
ThinkPad BIOS · Lenovo
various · source: vendor
TL
Thinkpad L14 Firmware · Lenovo
before 1.20 · source: NVD
TL
Thinkpad L14 Gen 2 Firmware · Lenovo
All versions, or not specified · source: NVD
TL
Thinkpad L15 Firmware · Lenovo
before 1.20 · source: NVD
TL
Thinkpad L15 Gen 2 Firmware · Lenovo
All versions, or not specified · source: NVD
TP
Thinkpad P1 Gen 3 Firmware · Lenovo
before 1.27 · source: NVD
TP
Thinkpad P1 Gen 4 Firmware · Lenovo
1.22 · source: NVD
TP
Thinkpad P1 Gen 5 Firmware · Lenovo
before 1.16 · source: NVD
TP
Thinkpad P14s Gen 1 Firmware · Lenovo
before 1.28 · source: NVD
TP
Thinkpad P14s Gen 2 Firmware · Lenovo
All versions, or not specified · source: NVD
TP
Thinkpad P14s Gen 3 Firmware · Lenovo
before 1.31 · source: NVD
TP
Thinkpad P15 Gen 1 Firmware · Lenovo
before 1.32 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-4574
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-4574
Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-106014
More from ThinkPad BIOS
6.7
CVE-2023-5078
A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware
6.7
CVE-2022-4575
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and…
6.7
CVE-2022-48189
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code
6.7
CVE-2022-1108
A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local…
6.7
CVE-2022-1107
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be…