ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-4574

—
CVSS 3.1
6.7 medium
EPSS
<1%p9
Published
()
Modified
Description

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.

Vendors
lenovo
Products
thinkpad x13 yoga gen 2 firmware, thinkpad x13 yoga gen 1 firmware, thinkpad x13 gen 3 firmware, thinkpad x13 gen 2 firmware, thinkpad x13 firmware, thinkpad x1 yoga 7th gen firmware, thinkpad x1 yoga 6th gen firmware, thinkpad x1 yoga 5th gen firmware, thinkpad x1 yoga 4th gen firmware, thinkpad x1 titanium firmware, thinkpad x1 nano gen 2 firmware, thinkpad x1 nano gen 1 firmware
Weakness
CWE-20
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.