Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-4573

An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileges to execute arbitrary code.

Published

2023-10-30T15:15:39.653

Last Modified

2024-11-21T07:35:31.190

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

Weaknesses

Type: Secondary
CWE-20
Type: Primary
NVD-CWE-noinfo
Type: Secondary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	lenovo	thinkpad_x1_fold_gen_1_firmware	-	Yes
Hardware	lenovo	thinkpad_x1_fold_gen_1	-	No

References

https://support.lenovo.com/us/en/product_security/LEN-106014 Vendor Advisory ([email protected])
https://support.lenovo.com/us/en/product_security/LEN-106014 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)