Medium severity · published Oct 30, 2023
CVE-2022-4574
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code
6.7
CVSS
0.2%
EPSS
No
On KEV
Description
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TL
Thinkpad L14 Firmware · Lenovo
before 1.20 · source: NVD
TL
Thinkpad L14 Gen 2 Firmware · Lenovo
All versions, or not specified · source: NVD
TL
Thinkpad L15 Firmware · Lenovo
before 1.20 · source: NVD
TL
Thinkpad L15 Gen 2 Firmware · Lenovo
All versions, or not specified · source: NVD
TP
Thinkpad P1 Gen 3 Firmware · Lenovo
before 1.27 · source: NVD
TP
Thinkpad P1 Gen 4 Firmware · Lenovo
1.22 · source: NVD
TP
Thinkpad P1 Gen 5 Firmware · Lenovo
before 1.16 · source: NVD
TP
Thinkpad P14s Gen 1 Firmware · Lenovo
before 1.28 · source: NVD
TP
Thinkpad P14s Gen 2 Firmware · Lenovo
All versions, or not specified · source: NVD
TP
Thinkpad P14s Gen 3 Firmware · Lenovo
before 1.31 · source: NVD
TP
Thinkpad P15 Gen 1 Firmware · Lenovo
before 1.32 · source: NVD
TP
Thinkpad P15 Gen 2 Firmware · Lenovo
before 1.25 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-4574
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-4574
Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-106014
More from Thinkpad L14 Firmware
6.7
CVE-2022-48189
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code
6.7
CVE-2023-2290
A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code
6.7
CVE-2021-3843
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code
4.6
CVE-2021-3718
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS