6.7
Moyenne
CVE-2022-1108 A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1…
Description
A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ThinkPad BIOS | Versions non publiées |
Autres CVE de ThinkPad BIOS
Les 10 CVE de ThinkPad BIOS →
CVE-2023-5078
A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated…
6.7
Moyenne
CVE-2022-4575
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models…
6.7
Moyenne
CVE-2022-48189
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local…
6.7
Moyenne
CVE-2022-4574
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local…
6.7
Moyenne