{"containers": {"cna": {"affected": [{"product": "ThinkPad BIOS", "vendor": "Lenovo", "versions": [{"status": "affected", "version": "various"}]}], "descriptions": [{"lang": "en", "value": "During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-04-29T14:00:16", "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://support.lenovo.com/us/en/product_security/LEN-84943"}], "solutions": [{"lang": "en", "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-84943."}], "source": {"advisory": "LEN-84943", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@lenovo.com", "ID": "CVE-2022-1107", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "ThinkPad BIOS", "version": {"version_data": [{"version_affected": "=", "version_value": "various"}]}}]}, "vendor_name": "Lenovo"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-20 Improper Input Validation"}]}]}, "references": {"reference_data": [{"name": "https://support.lenovo.com/us/en/product_security/LEN-84943", "refsource": "MISC", "url": "https://support.lenovo.com/us/en/product_security/LEN-84943"}]}, "solution": [{"lang": "en", "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-84943."}], "source": {"advisory": "LEN-84943", "discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:55:24.201Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://support.lenovo.com/us/en/product_security/LEN-84943"}]}]}, "cveMetadata": {"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "assignerShortName": "lenovo", "cveId": "CVE-2022-1107", "datePublished": "2022-04-22T20:30:50", "dateReserved": "2022-03-27T00:00:00", "dateUpdated": "2024-08-02T23:55:24.201Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_11e:-:*:*:*:*:*:*:*", "matchCriteriaId": "247E4294-2547-4A1D-942A-170DA5DDB388", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_11e_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C62AE4D9-03D9-4C46-ABAA-630ADA4C7E93", "versionEndExcluding": "n15et78w", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_helix:-:*:*:*:*:*:*:*", "matchCriteriaId": "9BD5DB5D-4ADF-4AC9-9774-8F36B3F2BDBF", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_helix_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EABD535C-4802-4046-9C48-360E502182CC", "versionEndExcluding": "n17eta8w", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_l560:-:*:*:*:*:*:*:*", "matchCriteriaId": "4FDA2BC8-0ABC-41EA-80BF-00B36564F0A1", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_l560_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "79500B6C-7820-4D3D-B877-D1DEDF157AE4", "versionEndExcluding": "n1het85w", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_l570:-:*:*:*:*:*:*:*", "matchCriteriaId": "61CD2E9F-18D9-4D04-BA83-42653424A006", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_l570_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0C758545-4CB9-4C32-88BB-68A328D4E953", "versionEndExcluding": "n1xet65w", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_p50s:-:*:*:*:*:*:*:*", "matchCriteriaId": "F583B121-A68C-463B-9D72-06061F74D007", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_p50s_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D755316-52CC-4B1C-B74F-765CE8DD2909", "versionEndExcluding": "n1ket46w", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*", "matchCriteriaId": "A84E6D8C-CB5E-4B50-B364-4E8AB4985A57", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_p51s_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D83AB324-9B0D-48AE-8BF7-3B8EB1BE2263", "versionEndExcluding": "n1vet50w", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF0A6498-072B-4541-87E5-379ECC36EC77", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_p52s_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "582A7C14-6E3E-4325-AD88-3651C327DE9E", "versionEndExcluding": "n27et36w", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_s540:-:*:*:*:*:*:*:*", "matchCriteriaId": "A9A8D286-D464-44C9-9716-2AC73328E9C7", "vulnerable": false}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_s540_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4ED0783E-DF3F-4471-A511-7A5FAC2CE3BF", "versionEndExcluding": "gpet80ww", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_t550_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F34BE364-9A30-494E-B952-FE37B327DE4D", "versionEndExcluding": "n11et50w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D79966D-08A3-428F-B4EC-CAAC8F4CF435", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_t560_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "09664C87-5CE2-4137-9B69-A5704F60A808", "versionEndExcluding": "n1ket46w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:*", "matchCriteriaId": "84478711-E030-42CD-9B8A-0C54C8DB8128", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_t570_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D5DBA9C5-A462-4193-AC52-1BF3D17A3A7E", "versionEndExcluding": "n1vet50w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*", "matchCriteriaId": "BEC1A912-C9FA-4D12-97A3-1D53B8209314", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_t580_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9391590D-0F7E-4103-8027-39E96014811B", "versionEndExcluding": "n27et36w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D90A3FD-A8FA-43E1-AB52-9F4B0960BDC0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "93C64E55-CDB6-457A-94F5-94921FC0C650", "versionEndExcluding": "n1let86w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "C6E9591E-5A71-4BBD-9C25-CDDF8DB500F3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0EDEB801-9BF8-46E3-82BB-6A696439993D", "versionEndExcluding": "n1oet50w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "61D4520A-47B3-4E2A-9A1D-9738EB8167A6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_w540_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "04436B75-6E92-4632-BF03-0802B34EDE23", "versionEndExcluding": "gnet92ww", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:*", "matchCriteriaId": "B72A36A5-900B-4FFD-AF2D-FECD35E15AF5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_w541_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CF27E2E8-B2DC-4520-96E4-B7F8C9B33FD4", "versionEndExcluding": "gnet92ww", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:*", "matchCriteriaId": "86A51FFE-257C-4609-BC14-C0DE0969E7F9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_w550s_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C976E2D8-6BCD-44B0-9B55-58A12A9E894F", "versionEndExcluding": "n11et50w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:*", "matchCriteriaId": "23267973-5F08-43C5-9C92-F429B84D3245", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_3rd_gen_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E3E892D3-95D5-4F3D-87FA-F0415F16FA26", "versionEndExcluding": "n14et52w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_3rd_gen:-:*:*:*:*:*:*:*", "matchCriteriaId": "86F4EB0E-B4C9-4FC1-987F-8EE359F17172", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_4th_gen_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4452B8F5-79A9-4A16-9DB2-E0DB4DC0DC92", "versionEndExcluding": "n1fet70w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_4th_gen:-:*:*:*:*:*:*:*", "matchCriteriaId": "490D663D-DAE1-483D-A150-5528A057C142", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_kabylake_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "365AADA5-87BB-4C53-B540-9BFCD1F95470", "versionEndExcluding": "n1met55w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_kabylake:-:*:*:*:*:*:*:*", "matchCriteriaId": "5766DCDC-2CD2-40C1-B686-B896C8730A55", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_skylake_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7F13D751-1511-4BFB-9551-BE6786F4578A", "versionEndExcluding": "n1met55w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_skylake:-:*:*:*:*:*:*:*", "matchCriteriaId": "1DF6298F-C8BF-4DF3-BF08-6394FEC4F436", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CC700809-DE88-4997-B5E1-4142E3DE0493", "versionEndExcluding": "n1fet70w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "45044ABC-76BF-475E-9B12-A77901172E5D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "39709F9F-5E58-4689-BB4D-06A96E5D4D67", "versionEndExcluding": "n1net47w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC29C336-3A92-4A55-8764-0A99CDA9F5F0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_3_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E5BBC6FC-2696-4308-9714-28F439E8A338", "versionEndExcluding": "n25et50w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D9CB267-B2FE-4B2A-BF96-32229FB5B6F7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x250_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5DD98844-9090-4E42-BFC4-BE884E929AC9", "versionEndExcluding": "n10et58w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:*", "matchCriteriaId": "AEA076E5-D554-4570-B5E3-FE78CEC024B4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x280_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F50957B2-E528-425E-872A-A0FBB3FBAA8E", "versionEndExcluding": "n20et44w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:*", "matchCriteriaId": "ABEA1745-32A2-4261-8572-12D1565E3A55", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x390_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EECB7D25-5EDA-4662-BCCE-ED11F1A94143", "versionEndExcluding": "n2let60w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x390:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2E05FC7-F957-4FE0-A9F1-E125419B7BFD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_11e_yoga_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1DE1715E-47E6-4812-86CD-11E86E525516", "versionEndExcluding": "n15et78w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_11e_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9F6E6BD-D5BF-47FA-866D-23179362F650", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_yoga_15_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B1C33C59-F2F9-4134-8C13-103246896E76", "versionEndExcluding": "n19et61w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_15:-:*:*:*:*:*:*:*", "matchCriteriaId": "9052750D-3481-46A1-B1C5-EABB56DDD4E0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_yoga_260_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "89713A33-B49B-489F-891D-4EE40298AA8A", "versionEndExcluding": "n1get98w", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_260:-:*:*:*:*:*:*:*", "matchCriteriaId": "051E3938-B988-40E3-B8FB-725886A1EA6E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code."}, {"lang": "es", "value": "Durante una auditor\u00eda de seguridad interna del producto se descubri\u00f3 una posible vulnerabilidad debida al uso de los servicios de arranque en el manejador SMI SmmOEMInt15 en algunos modelos de ThinkPad que podr\u00eda ser explotada por un atacante con privilegios elevados que podr\u00eda permitir la ejecuci\u00f3n de c\u00f3digo"}], "id": "CVE-2022-1107", "lastModified": "2022-05-12T13:42:48.583", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "psirt@lenovo.com", "type": "Secondary"}]}, "published": "2022-04-22T21:15:10.300", "references": [{"source": "psirt@lenovo.com", "tags": ["Vendor Advisory"], "url": "https://support.lenovo.com/us/en/product_security/LEN-84943"}], "sourceIdentifier": "psirt@lenovo.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-269"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "psirt@lenovo.com", "type": "Secondary"}]}

{}