Input validation error in Lenovo products - CVE-2022-4574

Vulnerability identifier: #VU73733

CSH Severity: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2022-4574

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
20TQ
ThinkPad P14s Gen 1 20S4
ThinkPad P14s Gen 1 20S5
ThinkPad P14s Gen 2 20VX
ThinkPad P14s Gen 2 20VY
ThinkPad P15s Gen 1 20T4 20T5
ThinkPad P15s Gen 2 20W6
ThinkPad P15s Gen 2 20W7
ThinkPad P15v Gen 3 21D8 21D9
ThinkPad T14 Gen 1 20S0
ThinkPad T14 Gen 1 20S1
ThinkPad T14 Gen 1 20S2
ThinkPad T14 Gen 1 20S3
ThinkPad T14 Gen 2 20W0
ThinkPad T14 Gen 2 20W1
ThinkPad T15 20S6
ThinkPad T15 20S7
ThinkPad T15 Gen 2 20W4
ThinkPad T15 Gen 2 20W5
ThinkPad T15p Gen 3 21DA 21DB
ThinkPad X1 Fold Gen 1 20RK
ThinkPad X1 Fold Gen 1 20RL
ThinkPad L14 20U1 s
ThinkPad L14 20U2 s
ThinkPad L14 Gen 2 Type 20X1 20X2 s
ThinkPad L15 20U3
ThinkPad L15 20U4
ThinkPad L15 Gen 2 Type 20X3 20X4
ThinkPad P1 Gen 3 20TH
ThinkPad P1 Gen 3 20TJ
ThinkPad P1 Gen 4 20Y3
ThinkPad P1 Gen 4 20Y4
ThinkPad P1 Gen 5 21DC 21DD
ThinkPad P14s Gen 3 21AK
ThinkPad P14s Gen 3 21AL
ThinkPad P15 Gen 1 20ST
ThinkPad P15 Gen 1 20SU
ThinkPad P15 Gen 2 20YQ s
ThinkPad P15 Gen 2 20YR s
ThinkPad P15v Gen 1 20TR
ThinkPad P15v Gen 2 21A9 s
ThinkPad P15v Gen 2 21AA s
ThinkPad P16 Gen 1 21D6
ThinkPad P16 Gen 1 21D7
ThinkPad P16s Gen 1 21BT
ThinkPad P16s Gen 1 21BU
ThinkPad P17 Gen 1 20SN
ThinkPad P17 Gen 1 20SQ
ThinkPad P17 Gen 2 20YU s
ThinkPad P17 Gen 2 20YV s
ThinkPad T14 Gen 3 21AH
ThinkPad T14 Gen 3 21AJ
ThinkPad T14s 20T0
ThinkPad T14s 20T1
ThinkPad T14s Gen 2 20WM
ThinkPad T14s Gen 2 20WN
ThinkPad T14s Gen 3 21BR 21BS
ThinkPad T15g Gen 1 20UR 20US
ThinkPad T15g Gen 2 20YS
ThinkPad T15g Gen 2 20YT
ThinkPad T15p Gen 1 20TN 20TM
ThinkPad T15p Gen 2 21A7
ThinkPad T15p Gen 2 21A8
ThinkPad T16 Gen 1 21BV
ThinkPad T16 Gen 1 21BW
ThinkPad X1 Carbon 10th Gen 21CB
ThinkPad X1 Carbon 10th Gen 21CC
ThinkPad X1 Carbon 7th Gen - 20QD
ThinkPad X1 Carbon 7th Gen - 20QE
ThinkPad X1 Carbon 7th Gen - 20R1
ThinkPad X1 Carbon 7th Gen - 20R2
ThinkPad X1 Carbon 8th Gen - 20U9
ThinkPad X1 Carbon 8th Gen - 20UA
ThinkPad X1 Carbon 9th Gen 20XW
ThinkPad X1 Carbon 9th Gen 20XX
ThinkPad X1 Extreme 3rd Gen 20TK
ThinkPad X1 Extreme 3rd Gen 20TL
ThinkPad X1 Extreme 4th Gen 20Y5
ThinkPad X1 Extreme 4th Gen 20Y6
ThinkPad X1 Extreme Gen 5 21DE
ThinkPad X1 Extreme Gen 5 21DF
ThinkPad X1 Nano Gen 1 20UN 20UQ
ThinkPad X1 Nano Gen 2 21E8 21E9
ThinkPad X1 Titanium 20QA
ThinkPad X1 Titanium 20QB
ThinkPad X1 Yoga 4th Gen 20QF
ThinkPad X1 Yoga 4th Gen 20QG
ThinkPad X1 Yoga 4th Gen 20SA
ThinkPad X1 Yoga 4th Gen 20SB
ThinkPad X1 Yoga 5th Gen 20UB
ThinkPad X1 Yoga 5th Gen 20UC
ThinkPad X1 Yoga 6th Gen 20XY
ThinkPad X1 Yoga 6th Gen 20Y0
ThinkPad X1 Yoga 7th Gen 21CD
ThinkPad X1 Yoga 7th Gen 21CE
ThinkPad X13 20T2
ThinkPad X13 20T3
ThinkPad X13 Gen 2 20WK
ThinkPad X13 Gen 2 20WL
ThinkPad X13 Gen 3 21BN 21BQ
ThinkPad X13 Yoga Gen 1
ThinkPad X13 Yoga Gen 2 20W8
ThinkPad X13 Yoga Gen 2 20W9

Software vendor:
Lenovo

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of user-supplied input in the SMI handler. A local user can execute arbitrary code on the target system.

Install updates from vendor's website.

• https://support.lenovo.com/us/en/product_security/LEN-106014