● CVE — Medium
CVE-2022-48189
VendorlenovoProductthinkpad e14 firmware, thinkpad e15 firmware, thinkpad e490 firmware, thinkpad e490s firmware, thinkpad e590 firmware, thinkpad l490 firmware, thinkpad l590 firmware, thinkpad p1 gen 2 firmware, thinkpad l14 firmware, thinkpad l15 firmware, thinkpad e14 gen 2 firmware, thinkpad e14 gen 4 firmware, thinkpad e15 gen 2 firmware, thinkpad e15 gen 4 firmware, thinkpad l13 gen 3 firmware, thinkpad l13 yoga gen 3 firmware, thinkpad l15 gen 2 firmware, thinkpad l15 gen 3 firmware, thinkpad p14s gen 1 firmware, thinkpad p14s gen 2 firmware, thinkpad p14s gen 3 firmware, thinkpad p15 gen 1 firmware, thinkpad p1 gen 3 firmware, thinkpad p1 gen 4 firmware, thinkpad p1 gen 5 firmwareDiscoveredOct 30, 2023UpdatedNov 21, 2024
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.