CVE-2022-48189
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD
Description
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected (95)
Products: Lenovo: Thinkpad E14 Firmware, Thinkpad E14 Gen 2 Firmware, Thinkpad E14 Gen 4 Firmware, Thinkpad E15 Firmware, Thinkpad E15 Gen 2 Firmware, Thinkpad E15 Gen 4 Firmware, Thinkpad E490 Firmware, Thinkpad E490s Firmware, Thinkpad E590 Firmware, Thinkpad L13 Gen 3 Firmware, Thinkpad L13 Yoga Gen 3 Firmware, Thinkpad L14 Firmware, Thinkpad L15 Firmware, Thinkpad L15 Gen 2 Firmware, Thinkpad L15 Gen 3 Firmware, Thinkpad L490 Firmware, Thinkpad L590 Firmware, Thinkpad P1 Gen 2 Firmware, Thinkpad P1 Gen 3 Firmware, Thinkpad P1 Gen 4 Firmware, Thinkpad P1 Gen 5 Firmware, Thinkpad P14s Gen 1 Firmware, Thinkpad P14s Gen 2 Firmware, Thinkpad P14s Gen 3 Firmware, Thinkpad P15 Gen 1 Firmware, Thinkpad P15 Gen 2 Firmware, Thinkpad P15s Gen 1 Firmware, Thinkpad P15s Gen 2 Firmware, Thinkpad P15v Gen 1 Firmware, Thinkpad P15v Gen 2 Firmware, Thinkpad P15v Gen 3 Firmware, Thinkpad P16 Gen 1 Firmware, Thinkpad P16s Gen 1 Firmware, Thinkpad P17 Gen 1 Firmware, Thinkpad P17 Gen 2 Firmware, Thinkpad P43s Firmware, Thinkpad P53 Firmware, Thinkpad P53s Firmware, Thinkpad P73 Firmware, Thinkpad T14 Gen 1 Firmware, Thinkpad T14 Gen 2 Firmware, Thinkpad T14 Gen 3 Firmware, Thinkpad T14s Firmware, Thinkpad T14s Gen 2 Firmware, Thinkpad T14s Gen 3 Firmware, Thinkpad T15 Firmware, Thinkpad T15 Gen 2 Firmware, Thinkpad T15g Gen 1 Firmware, Thinkpad T15g Gen 2 Firmware, Thinkpad T15p Gen 1 Firmware, Thinkpad T15p Gen 2 Firmware, Thinkpad T15p Gen 3 Firmware, Thinkpad T16 Gen 1 Firmware, Thinkpad T490 Firmware, Thinkpad T490s Firmware, Thinkpad T590 Firmware, Thinkpad Thinkpad R14 Gen 2 Firmware, Thinkpad Thinkpad R14 Gen 4 Firmware, Thinkpad Thinkpad S3 2nd Gen Firmware, Thinkpad X1 Carbon 10th Gen Firmware, Thinkpad X1 Carbon 7th Gen Firmware, Thinkpad X1 Carbon 8th Gen Firmware, Thinkpad X1 Carbon 9th Gen Firmware, Thinkpad X1 Extreme 2nd Gen Firmware, Thinkpad X1 Extreme 3rd Gen Firmware, Thinkpad X1 Extreme 4th Gen Firmware, Thinkpad X1 Extreme Gen 5 Firmware, Thinkpad X1 Nano Gen 1 Firmware, Thinkpad X1 Nano Gen 2 Firmware, Thinkpad X1 Titanium Firmware, Thinkpad X1 Yoga 4th Gen Firmware, Thinkpad X1 Yoga 5th Gen Firmware, Thinkpad X1 Yoga 6th Gen Firmware, Thinkpad X1 Yoga 7th Gen Firmware, Thinkpad X12 Detachable Gen 1 Firmware, Thinkpad X13 Firmware, Thinkpad X13 Gen 2 Firmware, Thinkpad X13 Gen 3 Firmware, Thinkpad X13 Yoga Gen 1 Firmware, Thinkpad X13 Yoga Gen 2 Firmware, Thinkpad X13 Yoga Gen 3 Firmware, Thinkpad X390 Firmware, Thinkpad X390 Yoga Firmware, Thinkpad Z13 Gen 1 Firmware, Thinkpad Z16 Gen 1 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.23 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad E14 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.55 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad E14 Gen 2 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.18 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.16 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad E14 Gen 4 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.23 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad E15 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.55 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad E15 Gen 2 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.18 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.16 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad E15 Gen 4 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.34 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad E490 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.34 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad E490s | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.34 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad E590 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.14 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad L13 Gen 3 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.14 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad L13 Yoga Gen 3 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2 |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.3 |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.26 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad L14 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.2 |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.3 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad L15 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad L15 Gen 2 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.26 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad L15 Gen 3 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.32 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad L490 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.32 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad L590 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.46 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P1 Gen 2 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.27 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P1 Gen 3 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.22 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P1 Gen 4 | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.16 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P1 Gen 5 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.28 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P14s Gen 1 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.34 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P14s Gen 2 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P14s Gen 3 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.32 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P15 Gen 1 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.25 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P15 Gen 2 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.28 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P15s Gen 1 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P15s Gen 2 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.32 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P15v Gen 1 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.19 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P15v Gen 2 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.15 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P15v Gen 3 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.17 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P16 Gen 1 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P16s Gen 1 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.32 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P17 Gen 1 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.25 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P17 Gen 2 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P43s | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P53 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P53s | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad P73 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.28 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T14 Gen 1 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.34 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T14 Gen 2 | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T14 Gen 3 | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.26 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T14s | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.51 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.37 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T14s Gen 2 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.33 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T14s Gen 3 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.28 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T15 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T15 Gen 2 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.32 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T15g Gen 1 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.25 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T15g Gen 2 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.32 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T15p Gen 1 | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.19 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T15p Gen 2 | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.15 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T15p Gen 3 | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T16 Gen 1 | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T490 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T490s | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad T590 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.55 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad Thinkpad R14 Gen 2 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.18 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad Thinkpad R14 Gen 4 | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.23 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad Thinkpad S3 2nd Gen | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.37 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Carbon 10th Gen | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Carbon 7th Gen | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Carbon 8th Gen | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.59 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Carbon 9th Gen | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.46 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Extreme 2nd Gen | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.27 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Extreme 3rd Gen | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.22 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Extreme 4th Gen | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.16 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Extreme Gen 5 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.55 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Nano Gen 1 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.18 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Nano Gen 2 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.24 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Titanium | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Yoga 4th Gen | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Yoga 5th Gen | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.59 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Yoga 6th Gen | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.37 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X1 Yoga 7th Gen | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.28 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X12 Detachable Gen 1 | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.26 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X13 | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.51 |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.37 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X13 Gen 2 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.33 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X13 Gen 3 | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.45 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X13 Yoga Gen 1 | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.4 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X13 Yoga Gen 2 | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.09 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X13 Yoga Gen 3 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X390 | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.95 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad X390 Yoga | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.57 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad Z13 Gen 1 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.57 |
| Running on/with | Platform Versions |
|---|---|
Lenovo Thinkpad Z16 Gen 1 | All versions |
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.