CVE-2022-1107 (GCVE-0-2022-1107)

Vulnerability from cvelistv5 – Published: 2022-04-22 20:30 – Updated: 2024-08-02 23:55
VLAI?
Summary
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.
Severity ?
6.7 (Medium)
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE
  • CWE-20 - Improper Input Validation
Assigner
References
Impacted products
Vendor Product Version
Lenovo ThinkPad BIOS Affected: various
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:55:24.201Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-84943"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ThinkPad BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-29T14:00:16",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-84943"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-84943."
        }
      ],
      "source": {
        "advisory": "LEN-84943",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "ID": "CVE-2022-1107",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "ThinkPad BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "various"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Lenovo"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20 Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-84943",
              "refsource": "MISC",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-84943"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-84943."
          }
        ],
        "source": {
          "advisory": "LEN-84943",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2022-1107",
    "datePublished": "2022-04-22T20:30:50",
    "dateReserved": "2022-03-27T00:00:00",
    "dateUpdated": "2024-08-02T23:55:24.201Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_11e_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n15et78w\", \"matchCriteriaId\": \"C62AE4D9-03D9-4C46-ABAA-630ADA4C7E93\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_11e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"247E4294-2547-4A1D-942A-170DA5DDB388\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_helix_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n17eta8w\", \"matchCriteriaId\": \"EABD535C-4802-4046-9C48-360E502182CC\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_helix:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9BD5DB5D-4ADF-4AC9-9774-8F36B3F2BDBF\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_l560_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1het85w\", \"matchCriteriaId\": \"79500B6C-7820-4D3D-B877-D1DEDF157AE4\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_l560:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4FDA2BC8-0ABC-41EA-80BF-00B36564F0A1\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_l570_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1xet65w\", \"matchCriteriaId\": \"0C758545-4CB9-4C32-88BB-68A328D4E953\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_l570:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"61CD2E9F-18D9-4D04-BA83-42653424A006\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_p50s_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1ket46w\", \"matchCriteriaId\": \"8D755316-52CC-4B1C-B74F-765CE8DD2909\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_p50s:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F583B121-A68C-463B-9D72-06061F74D007\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_p51s_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1vet50w\", \"matchCriteriaId\": \"D83AB324-9B0D-48AE-8BF7-3B8EB1BE2263\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A84E6D8C-CB5E-4B50-B364-4E8AB4985A57\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_p52s_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n27et36w\", \"matchCriteriaId\": \"582A7C14-6E3E-4325-AD88-3651C327DE9E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FF0A6498-072B-4541-87E5-379ECC36EC77\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_s540_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"gpet80ww\", \"matchCriteriaId\": \"4ED0783E-DF3F-4471-A511-7A5FAC2CE3BF\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_s540:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A9A8D286-D464-44C9-9716-2AC73328E9C7\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_t550_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n11et50w\", \"matchCriteriaId\": \"F34BE364-9A30-494E-B952-FE37B327DE4D\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9D79966D-08A3-428F-B4EC-CAAC8F4CF435\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_t560_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1ket46w\", \"matchCriteriaId\": \"09664C87-5CE2-4137-9B69-A5704F60A808\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"84478711-E030-42CD-9B8A-0C54C8DB8128\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_t570_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1vet50w\", \"matchCriteriaId\": \"D5DBA9C5-A462-4193-AC52-1BF3D17A3A7E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BEC1A912-C9FA-4D12-97A3-1D53B8209314\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_t580_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n27et36w\", \"matchCriteriaId\": \"9391590D-0F7E-4103-8027-39E96014811B\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7D90A3FD-A8FA-43E1-AB52-9F4B0960BDC0\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_1_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1let86w\", \"matchCriteriaId\": \"93C64E55-CDB6-457A-94F5-94921FC0C650\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_1:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C6E9591E-5A71-4BBD-9C25-CDDF8DB500F3\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_2_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1oet50w\", \"matchCriteriaId\": \"0EDEB801-9BF8-46E3-82BB-6A696439993D\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"61D4520A-47B3-4E2A-9A1D-9738EB8167A6\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_w540_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"gnet92ww\", \"matchCriteriaId\": \"04436B75-6E92-4632-BF03-0802B34EDE23\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B72A36A5-900B-4FFD-AF2D-FECD35E15AF5\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_w541_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"gnet92ww\", \"matchCriteriaId\": \"CF27E2E8-B2DC-4520-96E4-B7F8C9B33FD4\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"86A51FFE-257C-4609-BC14-C0DE0969E7F9\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_w550s_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n11et50w\", \"matchCriteriaId\": \"C976E2D8-6BCD-44B0-9B55-58A12A9E894F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"23267973-5F08-43C5-9C92-F429B84D3245\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_x1_carbon_3rd_gen_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n14et52w\", \"matchCriteriaId\": \"E3E892D3-95D5-4F3D-87FA-F0415F16FA26\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_x1_carbon_3rd_gen:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"86F4EB0E-B4C9-4FC1-987F-8EE359F17172\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_x1_carbon_4th_gen_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1fet70w\", \"matchCriteriaId\": \"4452B8F5-79A9-4A16-9DB2-E0DB4DC0DC92\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_x1_carbon_4th_gen:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"490D663D-DAE1-483D-A150-5528A057C142\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_kabylake_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1met55w\", \"matchCriteriaId\": \"365AADA5-87BB-4C53-B540-9BFCD1F95470\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_kabylake:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5766DCDC-2CD2-40C1-B686-B896C8730A55\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_skylake_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1met55w\", \"matchCriteriaId\": \"7F13D751-1511-4BFB-9551-BE6786F4578A\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_skylake:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1DF6298F-C8BF-4DF3-BF08-6394FEC4F436\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1fet70w\", \"matchCriteriaId\": \"CC700809-DE88-4997-B5E1-4142E3DE0493\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"45044ABC-76BF-475E-9B12-A77901172E5D\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_2_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1net47w\", \"matchCriteriaId\": \"39709F9F-5E58-4689-BB4D-06A96E5D4D67\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EC29C336-3A92-4A55-8764-0A99CDA9F5F0\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_3_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n25et50w\", \"matchCriteriaId\": \"E5BBC6FC-2696-4308-9714-28F439E8A338\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_3:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6D9CB267-B2FE-4B2A-BF96-32229FB5B6F7\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_x250_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n10et58w\", \"matchCriteriaId\": \"5DD98844-9090-4E42-BFC4-BE884E929AC9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AEA076E5-D554-4570-B5E3-FE78CEC024B4\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_x280_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n20et44w\", \"matchCriteriaId\": \"F50957B2-E528-425E-872A-A0FBB3FBAA8E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ABEA1745-32A2-4261-8572-12D1565E3A55\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_x390_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n2let60w\", \"matchCriteriaId\": \"EECB7D25-5EDA-4662-BCCE-ED11F1A94143\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_x390:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A2E05FC7-F957-4FE0-A9F1-E125419B7BFD\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_11e_yoga_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n15et78w\", \"matchCriteriaId\": \"1DE1715E-47E6-4812-86CD-11E86E525516\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_11e_yoga:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C9F6E6BD-D5BF-47FA-866D-23179362F650\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_yoga_15_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n19et61w\", \"matchCriteriaId\": \"B1C33C59-F2F9-4134-8C13-103246896E76\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_yoga_15:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9052750D-3481-46A1-B1C5-EABB56DDD4E0\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:thinkpad_yoga_260_firmware:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"n1get98w\", \"matchCriteriaId\": \"89713A33-B49B-489F-891D-4EE40298AA8A\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:thinkpad_yoga_260:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"051E3938-B988-40E3-B8FB-725886A1EA6E\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.\"}, {\"lang\": \"es\", \"value\": \"Durante una auditor\\u00eda de seguridad interna del producto se descubri\\u00f3 una posible vulnerabilidad debida al uso de los servicios de arranque en el manejador SMI SmmOEMInt15 en algunos modelos de ThinkPad que podr\\u00eda ser explotada por un atacante con privilegios elevados que podr\\u00eda permitir la ejecuci\\u00f3n de c\\u00f3digo\"}]",
      "id": "CVE-2022-1107",
      "lastModified": "2024-11-21T06:40:03.013",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"psirt@lenovo.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 6.7, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 0.8, \"impactScore\": 5.9}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 6.7, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 0.8, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:N/C:C/I:C/A:C\", \"baseScore\": 7.2, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 3.9, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2022-04-22T21:15:10.300",
      "references": "[{\"url\": \"https://support.lenovo.com/us/en/product_security/LEN-84943\", \"source\": \"psirt@lenovo.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.lenovo.com/us/en/product_security/LEN-84943\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "psirt@lenovo.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"psirt@lenovo.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}, {\"lang\": \"en\", \"value\": \"CWE-269\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-1107\",\"sourceIdentifier\":\"psirt@lenovo.com\",\"published\":\"2022-04-22T21:15:10.300\",\"lastModified\":\"2024-11-21T06:40:03.013\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.\"},{\"lang\":\"es\",\"value\":\"Durante una auditor\u00eda de seguridad interna del producto se descubri\u00f3 una posible vulnerabilidad debida al uso de los servicios de arranque en el manejador SMI SmmOEMInt15 en algunos modelos de ThinkPad que podr\u00eda ser explotada por un atacante con privilegios elevados que podr\u00eda permitir la ejecuci\u00f3n de c\u00f3digo\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@lenovo.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":6.7,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":0.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":6.7,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":0.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":7.2,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":3.9,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"psirt@lenovo.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"},{\"lang\":\"en\",\"value\":\"CWE-269\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_11e_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n15et78w\",\"matchCriteriaId\":\"C62AE4D9-03D9-4C46-ABAA-630ADA4C7E93\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_11e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"247E4294-2547-4A1D-942A-170DA5DDB388\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_helix_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n17eta8w\",\"matchCriteriaId\":\"EABD535C-4802-4046-9C48-360E502182CC\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_helix:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BD5DB5D-4ADF-4AC9-9774-8F36B3F2BDBF\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_l560_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1het85w\",\"matchCriteriaId\":\"79500B6C-7820-4D3D-B877-D1DEDF157AE4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_l560:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4FDA2BC8-0ABC-41EA-80BF-00B36564F0A1\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_l570_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1xet65w\",\"matchCriteriaId\":\"0C758545-4CB9-4C32-88BB-68A328D4E953\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_l570:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"61CD2E9F-18D9-4D04-BA83-42653424A006\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_p50s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1ket46w\",\"matchCriteriaId\":\"8D755316-52CC-4B1C-B74F-765CE8DD2909\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_p50s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F583B121-A68C-463B-9D72-06061F74D007\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_p51s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1vet50w\",\"matchCriteriaId\":\"D83AB324-9B0D-48AE-8BF7-3B8EB1BE2263\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A84E6D8C-CB5E-4B50-B364-4E8AB4985A57\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_p52s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n27et36w\",\"matchCriteriaId\":\"582A7C14-6E3E-4325-AD88-3651C327DE9E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF0A6498-072B-4541-87E5-379ECC36EC77\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_s540_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"gpet80ww\",\"matchCriteriaId\":\"4ED0783E-DF3F-4471-A511-7A5FAC2CE3BF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_s540:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9A8D286-D464-44C9-9716-2AC73328E9C7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_t550_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n11et50w\",\"matchCriteriaId\":\"F34BE364-9A30-494E-B952-FE37B327DE4D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D79966D-08A3-428F-B4EC-CAAC8F4CF435\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_t560_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1ket46w\",\"matchCriteriaId\":\"09664C87-5CE2-4137-9B69-A5704F60A808\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"84478711-E030-42CD-9B8A-0C54C8DB8128\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_t570_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1vet50w\",\"matchCriteriaId\":\"D5DBA9C5-A462-4193-AC52-1BF3D17A3A7E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BEC1A912-C9FA-4D12-97A3-1D53B8209314\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_t580_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n27et36w\",\"matchCriteriaId\":\"9391590D-0F7E-4103-8027-39E96014811B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7D90A3FD-A8FA-43E1-AB52-9F4B0960BDC0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_1_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1let86w\",\"matchCriteriaId\":\"93C64E55-CDB6-457A-94F5-94921FC0C650\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6E9591E-5A71-4BBD-9C25-CDDF8DB500F3\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1oet50w\",\"matchCriteriaId\":\"0EDEB801-9BF8-46E3-82BB-6A696439993D\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"61D4520A-47B3-4E2A-9A1D-9738EB8167A6\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_w540_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"gnet92ww\",\"matchCriteriaId\":\"04436B75-6E92-4632-BF03-0802B34EDE23\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B72A36A5-900B-4FFD-AF2D-FECD35E15AF5\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_w541_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"gnet92ww\",\"matchCriteriaId\":\"CF27E2E8-B2DC-4520-96E4-B7F8C9B33FD4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"86A51FFE-257C-4609-BC14-C0DE0969E7F9\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_w550s_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n11et50w\",\"matchCriteriaId\":\"C976E2D8-6BCD-44B0-9B55-58A12A9E894F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23267973-5F08-43C5-9C92-F429B84D3245\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_x1_carbon_3rd_gen_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n14et52w\",\"matchCriteriaId\":\"E3E892D3-95D5-4F3D-87FA-F0415F16FA26\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_x1_carbon_3rd_gen:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"86F4EB0E-B4C9-4FC1-987F-8EE359F17172\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_x1_carbon_4th_gen_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1fet70w\",\"matchCriteriaId\":\"4452B8F5-79A9-4A16-9DB2-E0DB4DC0DC92\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_x1_carbon_4th_gen:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"490D663D-DAE1-483D-A150-5528A057C142\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_kabylake_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1met55w\",\"matchCriteriaId\":\"365AADA5-87BB-4C53-B540-9BFCD1F95470\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_kabylake:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5766DCDC-2CD2-40C1-B686-B896C8730A55\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_skylake_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1met55w\",\"matchCriteriaId\":\"7F13D751-1511-4BFB-9551-BE6786F4578A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_skylake:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DF6298F-C8BF-4DF3-BF08-6394FEC4F436\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1fet70w\",\"matchCriteriaId\":\"CC700809-DE88-4997-B5E1-4142E3DE0493\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"45044ABC-76BF-475E-9B12-A77901172E5D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_2_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1net47w\",\"matchCriteriaId\":\"39709F9F-5E58-4689-BB4D-06A96E5D4D67\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC29C336-3A92-4A55-8764-0A99CDA9F5F0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_3_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n25et50w\",\"matchCriteriaId\":\"E5BBC6FC-2696-4308-9714-28F439E8A338\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_3:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D9CB267-B2FE-4B2A-BF96-32229FB5B6F7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_x250_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n10et58w\",\"matchCriteriaId\":\"5DD98844-9090-4E42-BFC4-BE884E929AC9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AEA076E5-D554-4570-B5E3-FE78CEC024B4\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_x280_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n20et44w\",\"matchCriteriaId\":\"F50957B2-E528-425E-872A-A0FBB3FBAA8E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABEA1745-32A2-4261-8572-12D1565E3A55\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_x390_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n2let60w\",\"matchCriteriaId\":\"EECB7D25-5EDA-4662-BCCE-ED11F1A94143\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_x390:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2E05FC7-F957-4FE0-A9F1-E125419B7BFD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_11e_yoga_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n15et78w\",\"matchCriteriaId\":\"1DE1715E-47E6-4812-86CD-11E86E525516\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_11e_yoga:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9F6E6BD-D5BF-47FA-866D-23179362F650\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_yoga_15_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n19et61w\",\"matchCriteriaId\":\"B1C33C59-F2F9-4134-8C13-103246896E76\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_yoga_15:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9052750D-3481-46A1-B1C5-EABB56DDD4E0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:thinkpad_yoga_260_firmware:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"n1get98w\",\"matchCriteriaId\":\"89713A33-B49B-489F-891D-4EE40298AA8A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:thinkpad_yoga_260:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"051E3938-B988-40E3-B8FB-725886A1EA6E\"}]}]}],\"references\":[{\"url\":\"https://support.lenovo.com/us/en/product_security/LEN-84943\",\"source\":\"psirt@lenovo.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.lenovo.com/us/en/product_security/LEN-84943\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.