Login Request a demo
Medium severity · published Oct 30, 2023
CVE-2022-4575
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and…
6.7
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and elevated privileges the ability to bypass Secure Boot.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
T2
Thinkpad 25 Firmware · Lenovo
before 1.73 · source: NVD
TL
Thinkpad L560 Firmware · Lenovo
before 1.62 · source: NVD
TP
Thinkpad P50 Firmware · Lenovo
before 1.71 · source: NVD
TP
Thinkpad P50s Firmware · Lenovo
before 1.45 · source: NVD
TP
Thinkpad P70 Firmware · Lenovo
before 2.45 · source: NVD
TT
Thinkpad T470 Firmware · Lenovo
before 1.73 · source: NVD
TT
Thinkpad T470s Firmware · Lenovo
before 1.49 · source: NVD
TT
Thinkpad T560 Firmware · Lenovo
before 1.45 · source: NVD
TX
Thinkpad X1 Carbon 4th Gen Firmware · Lenovo
before 1.56 · source: NVD
TX
Thinkpad X1 Yoga 1st Gen Firmware · Lenovo
before 1.56 · source: NVD
TX
Thinkpad X260 Firmware · Lenovo
before 1.50 · source: NVD
TX
Thinkpad X270 Firmware · Lenovo
before 1.47 · source: NVD
Affected product
T2
Thinkpad 25 Firmware
Lenovo
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-4575
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-4575
Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-106014
More from Thinkpad 25 Firmware
7.8
CVE-2019-18619
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-11-15) allows a local user to execute arbitrary…
6.0
CVE-2019-18618
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local…