CVE-2022-1107
Published Apr 22, 2022
Last updated 3 years ago
Overview
- Description
- During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.
- Source
- psirt@lenovo.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 6.7
- Impact score
- 5.9
- Exploitability score
- 0.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 10
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:C/A:C
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_11e:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "247E4294-2547-4A1D-942A-170DA5DDB388"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_11e_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C62AE4D9-03D9-4C46-ABAA-630ADA4C7E93",
"versionEndExcluding": "n15et78w"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_helix:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9BD5DB5D-4ADF-4AC9-9774-8F36B3F2BDBF"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_helix_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EABD535C-4802-4046-9C48-360E502182CC",
"versionEndExcluding": "n17eta8w"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_l560:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4FDA2BC8-0ABC-41EA-80BF-00B36564F0A1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_l560_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79500B6C-7820-4D3D-B877-D1DEDF157AE4",
"versionEndExcluding": "n1het85w"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_l570:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "61CD2E9F-18D9-4D04-BA83-42653424A006"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_l570_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C758545-4CB9-4C32-88BB-68A328D4E953",
"versionEndExcluding": "n1xet65w"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_p50s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F583B121-A68C-463B-9D72-06061F74D007"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_p50s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D755316-52CC-4B1C-B74F-765CE8DD2909",
"versionEndExcluding": "n1ket46w"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A84E6D8C-CB5E-4B50-B364-4E8AB4985A57"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_p51s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D83AB324-9B0D-48AE-8BF7-3B8EB1BE2263",
"versionEndExcluding": "n1vet50w"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FF0A6498-072B-4541-87E5-379ECC36EC77"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_p52s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "582A7C14-6E3E-4325-AD88-3651C327DE9E",
"versionEndExcluding": "n27et36w"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_s540:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A9A8D286-D464-44C9-9716-2AC73328E9C7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_s540_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4ED0783E-DF3F-4471-A511-7A5FAC2CE3BF",
"versionEndExcluding": "gpet80ww"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_t550_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F34BE364-9A30-494E-B952-FE37B327DE4D",
"versionEndExcluding": "n11et50w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9D79966D-08A3-428F-B4EC-CAAC8F4CF435"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_t560_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09664C87-5CE2-4137-9B69-A5704F60A808",
"versionEndExcluding": "n1ket46w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "84478711-E030-42CD-9B8A-0C54C8DB8128"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_t570_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5DBA9C5-A462-4193-AC52-1BF3D17A3A7E",
"versionEndExcluding": "n1vet50w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BEC1A912-C9FA-4D12-97A3-1D53B8209314"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_t580_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9391590D-0F7E-4103-8027-39E96014811B",
"versionEndExcluding": "n27et36w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7D90A3FD-A8FA-43E1-AB52-9F4B0960BDC0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_1_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93C64E55-CDB6-457A-94F5-94921FC0C650",
"versionEndExcluding": "n1let86w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_1:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C6E9591E-5A71-4BBD-9C25-CDDF8DB500F3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EDEB801-9BF8-46E3-82BB-6A696439993D",
"versionEndExcluding": "n1oet50w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "61D4520A-47B3-4E2A-9A1D-9738EB8167A6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_w540_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04436B75-6E92-4632-BF03-0802B34EDE23",
"versionEndExcluding": "gnet92ww"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B72A36A5-900B-4FFD-AF2D-FECD35E15AF5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_w541_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF27E2E8-B2DC-4520-96E4-B7F8C9B33FD4",
"versionEndExcluding": "gnet92ww"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "86A51FFE-257C-4609-BC14-C0DE0969E7F9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_w550s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C976E2D8-6BCD-44B0-9B55-58A12A9E894F",
"versionEndExcluding": "n11et50w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "23267973-5F08-43C5-9C92-F429B84D3245"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_3rd_gen_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3E892D3-95D5-4F3D-87FA-F0415F16FA26",
"versionEndExcluding": "n14et52w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_3rd_gen:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "86F4EB0E-B4C9-4FC1-987F-8EE359F17172"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_4th_gen_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4452B8F5-79A9-4A16-9DB2-E0DB4DC0DC92",
"versionEndExcluding": "n1fet70w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_4th_gen:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "490D663D-DAE1-483D-A150-5528A057C142"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_kabylake_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "365AADA5-87BB-4C53-B540-9BFCD1F95470",
"versionEndExcluding": "n1met55w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_kabylake:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5766DCDC-2CD2-40C1-B686-B896C8730A55"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_skylake_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F13D751-1511-4BFB-9551-BE6786F4578A",
"versionEndExcluding": "n1met55w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_skylake:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1DF6298F-C8BF-4DF3-BF08-6394FEC4F436"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC700809-DE88-4997-B5E1-4142E3DE0493",
"versionEndExcluding": "n1fet70w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "45044ABC-76BF-475E-9B12-A77901172E5D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_2_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39709F9F-5E58-4689-BB4D-06A96E5D4D67",
"versionEndExcluding": "n1net47w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EC29C336-3A92-4A55-8764-0A99CDA9F5F0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5BBC6FC-2696-4308-9714-28F439E8A338",
"versionEndExcluding": "n25et50w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6D9CB267-B2FE-4B2A-BF96-32229FB5B6F7"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x250_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DD98844-9090-4E42-BFC4-BE884E929AC9",
"versionEndExcluding": "n10et58w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AEA076E5-D554-4570-B5E3-FE78CEC024B4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x280_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F50957B2-E528-425E-872A-A0FBB3FBAA8E",
"versionEndExcluding": "n20et44w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ABEA1745-32A2-4261-8572-12D1565E3A55"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x390_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EECB7D25-5EDA-4662-BCCE-ED11F1A94143",
"versionEndExcluding": "n2let60w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x390:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A2E05FC7-F957-4FE0-A9F1-E125419B7BFD"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_11e_yoga_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DE1715E-47E6-4812-86CD-11E86E525516",
"versionEndExcluding": "n15et78w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_11e_yoga:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C9F6E6BD-D5BF-47FA-866D-23179362F650"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_yoga_15_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1C33C59-F2F9-4134-8C13-103246896E76",
"versionEndExcluding": "n19et61w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_15:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9052750D-3481-46A1-B1C5-EABB56DDD4E0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_yoga_260_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89713A33-B49B-489F-891D-4EE40298AA8A",
"versionEndExcluding": "n1get98w"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_260:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "051E3938-B988-40E3-B8FB-725886A1EA6E"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]