Medium severity · published Oct 30, 2023
CVE-2022-4575
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and…
6.7
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and elevated privileges the ability to bypass Secure Boot.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TB
ThinkPad BIOS · Lenovo
various · source: vendor
T2
Thinkpad 25 Firmware · Lenovo
before 1.73 · source: NVD
TL
Thinkpad L560 Firmware · Lenovo
before 1.62 · source: NVD
TP
Thinkpad P50 Firmware · Lenovo
before 1.71 · source: NVD
TP
Thinkpad P50s Firmware · Lenovo
before 1.45 · source: NVD
TP
Thinkpad P70 Firmware · Lenovo
before 2.45 · source: NVD
TT
Thinkpad T470 Firmware · Lenovo
before 1.73 · source: NVD
TT
Thinkpad T470s Firmware · Lenovo
before 1.49 · source: NVD
TT
Thinkpad T560 Firmware · Lenovo
before 1.45 · source: NVD
TX
Thinkpad X1 Carbon 4th Gen Firmware · Lenovo
before 1.56 · source: NVD
TX
Thinkpad X1 Yoga 1st Gen Firmware · Lenovo
before 1.56 · source: NVD
TX
Thinkpad X260 Firmware · Lenovo
before 1.50 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-4575
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-4575
Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-106014
More from ThinkPad BIOS
6.7
CVE-2023-5078
A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware
6.7
CVE-2022-48189
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code
6.7
CVE-2022-4574
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code
6.7
CVE-2022-1108
A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local…
6.7
CVE-2022-1107
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be…