CVE-2022-4574

Published: Oct 30, 2023Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected (54)

Lenovo

54 products

Thinkpad X13 Yoga Gen 2 Firmware

Thinkpad X13 Yoga Gen 1 Firmware

Thinkpad X13 Gen 3 Firmware

Thinkpad X13 Gen 2 Firmware

Thinkpad X13 Firmware

Thinkpad X1 Yoga 7th Gen Firmware

Thinkpad X1 Yoga 6th Gen Firmware

Thinkpad X1 Yoga 5th Gen Firmware

Thinkpad X1 Yoga 4th Gen Firmware

Thinkpad X1 Titanium Firmware

Thinkpad X1 Nano Gen 2 Firmware

Thinkpad X1 Nano Gen 1 Firmware

Thinkpad X1 Fold Gen 1 Firmware

Thinkpad X1 Extreme Gen 5 Firmware

Thinkpad X1 Extreme 4th Gen Firmware

Thinkpad X1 Extreme 3rd Gen Firmware

Thinkpad X1 Carbon 9th Gen Firmware

Thinkpad X1 Carbon 8th Gen Firmware

Thinkpad X1 Carbon 7th Gen Firmware

Thinkpad X1 Carbon 10th Gen Firmware

Thinkpad T16 Gen 1 Firmware

Thinkpad T15p Gen 3 Firmware

Thinkpad T15p Gen 2 Firmware

Thinkpad T15p Gen 1 Firmware

Thinkpad T15g Gen 2 Firmware

Thinkpad T15g Gen 1 Firmware

Thinkpad T15 Gen 2 Firmware

Thinkpad T14s Gen 3 Firmware

Thinkpad T14s Gen 2 Firmware

Thinkpad T14s Firmware

Thinkpad T14 Gen 3 Firmware

Thinkpad T14 Gen 2 Firmware

Thinkpad T14 Gen 1 Firmware

Thinkpad P17 Gen 2 Firmware

Thinkpad P17 Gen 1 Firmware

Thinkpad P16s Gen 1 Firmware

Thinkpad P16 Gen 1 Firmware

Thinkpad P15v Gen 3 Firmware

Thinkpad P15v Gen 2 Firmware

Thinkpad P15v Gen 1 Firmware

Thinkpad P15s Gen 2 Firmware

Thinkpad P15s Gen 1 Firmware

Thinkpad P15 Gen 2 Firmware

Thinkpad P15 Gen 1 Firmware

Thinkpad P14s Gen 3 Firmware

Thinkpad P14s Gen 2 Firmware

Thinkpad P14s Gen 1 Firmware

Thinkpad P1 Gen 5 Firmware

Thinkpad P1 Gen 4 Firmware

Thinkpad P1 Gen 3 Firmware

Thinkpad L15 Gen 2 Firmware

Thinkpad L15 Firmware

Thinkpad L14 Gen 2 Firmware

Thinkpad L14 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X13 Yoga Gen 2 Firmware	Before 1.40

Running on/with	Platform Versions
Lenovo Thinkpad X13 Yoga Gen 2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X13 Yoga Gen 1 Firmware	Before 1.45

Running on/with	Platform Versions
Lenovo Thinkpad X13 Yoga Gen 1	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X13 Gen 3 Firmware	Before 1.33

Running on/with	Platform Versions
Lenovo Thinkpad X13 Gen 3	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X13 Gen 2 Firmware	Before 1.51

Running on/with	Platform Versions
Lenovo Thinkpad X13 Gen 2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X13 Firmware	Before 1.26

Running on/with	Platform Versions
Lenovo Thinkpad X13	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Yoga 7th Gen Firmware	Before 1.37

Running on/with	Platform Versions
Lenovo Thinkpad X1 Yoga 7th Gen	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Yoga 6th Gen Firmware	Before 1.59

Running on/with	Platform Versions
Lenovo Thinkpad X1 Yoga 6th Gen	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Yoga 5th Gen Firmware	Before 1.30

Running on/with	Platform Versions
Lenovo Thinkpad X1 Yoga 5th Gen	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Yoga 4th Gen Firmware	Before 1.56

Running on/with	Platform Versions
Lenovo Thinkpad X1 Yoga 4th Gen	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Titanium Firmware	Before 1.24

Running on/with	Platform Versions
Lenovo Thinkpad X1 Titanium	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Nano Gen 2 Firmware	Before 1.18

Running on/with	Platform Versions
Lenovo Thinkpad X1 Nano Gen 2	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Nano Gen 1 Firmware	Before 1.55

Running on/with	Platform Versions
Lenovo Thinkpad X1 Nano Gen 1	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Fold Gen 1 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad X1 Fold Gen 1	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Extreme Gen 5 Firmware	Before 1.16

Running on/with	Platform Versions
Lenovo Thinkpad X1 Extreme Gen 5	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Extreme 4th Gen Firmware	Before 1.22

Running on/with	Platform Versions
Lenovo Thinkpad X1 Extreme 4th Gen	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Extreme 3rd Gen Firmware	Before 1.27

Running on/with	Platform Versions
Lenovo Thinkpad X1 Extreme 3rd Gen	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Carbon 9th Gen Firmware	Before 1.59

Running on/with	Platform Versions
Lenovo Thinkpad X1 Carbon 9th Gen	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Carbon 8th Gen Firmware	Before 1.30

Running on/with	Platform Versions
Lenovo Thinkpad X1 Carbon 8th Gen	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Carbon 7th Gen Firmware	Before 1.56

Running on/with	Platform Versions
Lenovo Thinkpad X1 Carbon 7th Gen	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Carbon 10th Gen Firmware	Before 1.37

Running on/with	Platform Versions
Lenovo Thinkpad X1 Carbon 10th Gen	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T16 Gen 1 Firmware	Before 1.31

Running on/with	Platform Versions
Lenovo Thinkpad T16 Gen 1	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T15p Gen 3 Firmware	Before 1.15

Running on/with	Platform Versions
Lenovo Thinkpad T15p Gen 3	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T15p Gen 2 Firmware	Before 1.19

Running on/with	Platform Versions
Lenovo Thinkpad T15p Gen 2	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T15p Gen 1 Firmware	Before 1.32

Running on/with	Platform Versions
Lenovo Thinkpad T15p Gen 1	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T15g Gen 2 Firmware	Before 1.25

Running on/with	Platform Versions
Lenovo Thinkpad T15g Gen 2	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T15g Gen 1 Firmware	Before 1.32

Running on/with	Platform Versions
Lenovo Thinkpad T15g Gen 1	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T15 Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad T15 Gen 2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14s Gen 3 Firmware	Before 1.33

Running on/with	Platform Versions
Lenovo Thinkpad T14s Gen 3	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14s Gen 2 Firmware	Before 1.51

Running on/with	Platform Versions
Lenovo Thinkpad T14s Gen 2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14s Firmware	Before 1.26

Running on/with	Platform Versions
Lenovo Thinkpad T14s	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14 Gen 3 Firmware	Before 1.31

Running on/with	Platform Versions
Lenovo Thinkpad T14 Gen 3	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14 Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad T14 Gen 2	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14 Gen 1 Firmware	Before 1.28

Running on/with	Platform Versions
Lenovo Thinkpad T14 Gen 1	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P17 Gen 2 Firmware	Before 1.25

Running on/with	Platform Versions
Lenovo Thinkpad P17 Gen 2	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P17 Gen 1 Firmware	Before 1.32

Running on/with	Platform Versions
Lenovo Thinkpad P17 Gen 1	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P16s Gen 1 Firmware	Before 1.31

Running on/with	Platform Versions
Lenovo Thinkpad P16s Gen 1	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P16 Gen 1 Firmware	Before 1.17

Running on/with	Platform Versions
Lenovo Thinkpad P16 Gen 1	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15v Gen 3 Firmware	Before 1.15

Running on/with	Platform Versions
Lenovo Thinkpad P15v Gen 3	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15v Gen 2 Firmware	Before 1.19

Running on/with	Platform Versions
Lenovo Thinkpad P15v Gen 2	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15v Gen 1 Firmware	Before 1.32

Running on/with	Platform Versions
Lenovo Thinkpad P15v Gen 1	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15s Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad P15s Gen 2	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15s Gen 1 Firmware	Before 1.28

Running on/with	Platform Versions
Lenovo Thinkpad P15s Gen 1	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15 Gen 2 Firmware	Before 1.25

Running on/with	Platform Versions
Lenovo Thinkpad P15 Gen 2	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15 Gen 1 Firmware	Before 1.32

Running on/with	Platform Versions
Lenovo Thinkpad P15 Gen 1	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P14s Gen 3 Firmware	Before 1.31

Running on/with	Platform Versions
Lenovo Thinkpad P14s Gen 3	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P14s Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad P14s Gen 2	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P14s Gen 1 Firmware	Before 1.28

Running on/with	Platform Versions
Lenovo Thinkpad P14s Gen 1	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P1 Gen 5 Firmware	Before 1.16

Running on/with	Platform Versions
Lenovo Thinkpad P1 Gen 5	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P1 Gen 4 Firmware	Version 1.22

Running on/with	Platform Versions
Lenovo Thinkpad P1 Gen 4	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P1 Gen 3 Firmware	Before 1.27

Running on/with	Platform Versions
Lenovo Thinkpad P1 Gen 3	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L15 Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad L15 Gen 2	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L15 Firmware	Before 1.20

Running on/with	Platform Versions
Lenovo Thinkpad L15	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L14 Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad L14 Gen 2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L14 Firmware	Before 1.20

Running on/with	Platform Versions
Lenovo Thinkpad L14	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://support.lenovo.com/us/en/product_security/LEN-106014

Source: psirt@lenovo.com

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-106014

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.