● CVE — Medium
CVE-2022-4574
VendorlenovoProductthinkpad x13 gen 2 firmware, thinkpad x13 yoga gen 1 firmware, thinkpad x13 yoga gen 2 firmware, thinkpad x1 fold gen 1 firmware, thinkpad x1 titanium firmware, thinkpad x1 yoga 4th gen firmware, thinkpad x13 gen 3 firmware, thinkpad t15g gen 2 firmware, thinkpad t15p gen 1 firmware, thinkpad t15p gen 2 firmware, thinkpad t15p gen 3 firmware, thinkpad t16 gen 1 firmware, thinkpad x13 firmware, thinkpad x1 carbon 10th gen firmware, thinkpad x1 carbon 7th gen firmware, thinkpad x1 carbon 8th gen firmware, thinkpad x1 carbon 9th gen firmware, thinkpad x1 extreme 3rd gen firmware, thinkpad x1 extreme 4th gen firmware, thinkpad x1 extreme gen 5 firmware, thinkpad x1 nano gen 1 firmware, thinkpad x1 nano gen 2 firmware, thinkpad x1 yoga 5th gen firmware, thinkpad x1 yoga 6th gen firmware, thinkpad x1 yoga 7th gen firmwareDiscoveredOct 30, 2023UpdatedNov 21, 2024
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.