Input validation error in Lenovo products - CVE-2022-4574

Vulnerability identifier: #VU73733

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-4574

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of user-supplied input in the SMI handler. A local user can execute arbitrary code on the target system.

ThinkPad T14 Gen 1 20S2
ThinkPad X1 Fold Gen 1 20RL
ThinkPad X1 Fold Gen 1 20RK
ThinkPad T15p Gen 3 21DA 21DB
ThinkPad T15 Gen 2 20W5
ThinkPad T15 Gen 2 20W4
ThinkPad T15 20S7
ThinkPad T15 20S6
ThinkPad T14 Gen 2 20W1
ThinkPad T14 Gen 2 20W0
ThinkPad T14 Gen 1 20S3
20TQ
ThinkPad T14 Gen 1 20S1
ThinkPad T14 Gen 1 20S0
ThinkPad P15v Gen 3 21D8 21D9
ThinkPad P15s Gen 2 20W7
ThinkPad P15s Gen 2 20W6
ThinkPad P15s Gen 1 20T4 20T5
ThinkPad P14s Gen 2 20VY
ThinkPad P14s Gen 2 20VX
ThinkPad P14s Gen 1 20S5
ThinkPad P14s Gen 1 20S4
ThinkPad X1 Carbon 7th Gen - 20R1
ThinkPad X1 Carbon 7th Gen - 20QE
ThinkPad X1 Carbon 7th Gen - 20QD
ThinkPad X1 Carbon 7th Gen - 20R2
ThinkPad X1 Yoga 4th Gen 20QF
ThinkPad X1 Yoga 4th Gen 20QG
ThinkPad X1 Yoga 4th Gen 20SA
ThinkPad X1 Yoga 4th Gen 20SB
ThinkPad X1 Titanium 20QB
ThinkPad X1 Titanium 20QA
ThinkPad X1 Nano Gen 1 20UN 20UQ
ThinkPad X1 Extreme 3rd Gen 20TL
ThinkPad X1 Extreme 3rd Gen 20TK
ThinkPad P1 Gen 3 20TJ
ThinkPad P1 Gen 3 20TH
ThinkPad X1 Yoga 5th Gen 20UC
ThinkPad X1 Yoga 5th Gen 20UB
ThinkPad X1 Carbon 8th Gen - 20UA
ThinkPad X1 Carbon 8th Gen - 20U9
ThinkPad X13 20T3
ThinkPad T14s 20T0
ThinkPad T14s 20T1
ThinkPad X13 20T2
ThinkPad X1 Yoga 7th Gen 21CE
ThinkPad X1 Carbon 10th Gen 21CB
ThinkPad X1 Yoga 7th Gen 21CD
ThinkPad X1 Carbon 10th Gen 21CC
ThinkPad T16 Gen 1 21BV
ThinkPad T16 Gen 1 21BW
ThinkPad P14s Gen 3 21AK
ThinkPad T14 Gen 3 21AH
ThinkPad P14s Gen 3 21AL
ThinkPad P16s Gen 1 21BT
ThinkPad P16s Gen 1 21BU
ThinkPad T14 Gen 3 21AJ
ThinkPad P16 Gen 1 21D7
ThinkPad P16 Gen 1 21D6
ThinkPad X1 Nano Gen 2 21E8 21E9
ThinkPad X1 Extreme Gen 5 21DE
ThinkPad X1 Extreme Gen 5 21DF
ThinkPad P1 Gen 5 21DC 21DD
ThinkPad X13 Yoga Gen 2 20W8
ThinkPad X13 Yoga Gen 2 20W9
ThinkPad X1 Extreme 4th Gen 20Y6
ThinkPad X1 Extreme 4th Gen 20Y5
ThinkPad P1 Gen 4 20Y3
ThinkPad P1 Gen 4 20Y4
ThinkPad T15p Gen 2 21A8
ThinkPad T15p Gen 2 21A7
ThinkPad P15v Gen 2 21A9 s
ThinkPad P15v Gen 2 21AA s
ThinkPad P15 Gen 2 20YQ s
ThinkPad T15g Gen 2 20YT
ThinkPad T15g Gen 2 20YS
ThinkPad P15 Gen 2 20YR s
ThinkPad P17 Gen 2 20YU s
ThinkPad P17 Gen 2 20YV s
ThinkPad X13 Gen 2 20WL
ThinkPad T14s Gen 2 20WM
ThinkPad T14s Gen 2 20WN
ThinkPad X13 Gen 2 20WK
ThinkPad P17 Gen 1 20SQ
ThinkPad P17 Gen 1 20SN
ThinkPad T15p Gen 1 20TN 20TM
ThinkPad P15 Gen 1 20ST
ThinkPad P15v Gen 1 20TR
ThinkPad T15g Gen 1 20UR 20US
ThinkPad P15 Gen 1 20SU
ThinkPad X1 Carbon 9th Gen 20XX
ThinkPad X1 Yoga 6th Gen 20Y0
ThinkPad X1 Yoga 6th Gen 20XY
ThinkPad X1 Carbon 9th Gen 20XW
ThinkPad X13 Yoga Gen 1
ThinkPad L15 Gen 2 Type 20X3 20X4
ThinkPad L14 Gen 2 Type 20X1 20X2 s
ThinkPad T14s Gen 3 21BR 21BS
ThinkPad X13 Gen 3 21BN 21BQ
ThinkPad L14 20U1 s
ThinkPad L15 20U4
ThinkPad L15 20U3
ThinkPad L14 20U2 s

Install updates from vendor's website.

ThinkPad X1 Carbon 7th Gen - 20R1 - update to N2HUJ48W.exe (N2QET50W)
ThinkPad X1 Carbon 7th Gen - 20QE - update to N2HUJ48W.exe (N2QET50W)
ThinkPad X1 Carbon 7th Gen - 20QD - update to N2HUJ48W.exe (N2QET50W)
ThinkPad X1 Carbon 7th Gen - 20R2 - update to N2HUJ48W.exe (N2QET50W)
ThinkPad X1 Yoga 4th Gen 20QF - update to N2HUJ48W.exe (N2QET50W)
ThinkPad X1 Yoga 4th Gen 20QG - update to N2HUJ48W.exe (N2QET50W)
ThinkPad X1 Yoga 4th Gen 20SA - update to N2HUJ48W.exe (N2QET50W)
ThinkPad X1 Yoga 4th Gen 20SB - update to N2HUJ48W.exe (N2QET50W)
ThinkPad X1 Titanium 20QB - update to N2MUJ15W.exe (N2MET58W)
ThinkPad X1 Titanium 20QA - update to N2MUJ15W.exe (N2MET58W)
ThinkPad X1 Nano Gen 1 20UN 20UQ - update to N2TUJ20W.exe (N2TET76W)
ThinkPad X1 Extreme 3rd Gen 20TL - update to N2VET41W
ThinkPad X1 Extreme 3rd Gen 20TK - update to N2VET41W
ThinkPad P1 Gen 3 20TJ - update to N2VET41W
ThinkPad P1 Gen 3 20TH - update to N2VET41W
ThinkPad X1 Yoga 5th Gen 20UC - update to N2WUJ26W (N2WET40W)
ThinkPad X1 Yoga 5th Gen 20UB - update to N2WUJ26W (N2WET40W)
ThinkPad X1 Carbon 8th Gen - 20UA - update to N2WUJ26W (N2WET40W)
ThinkPad X1 Carbon 8th Gen - 20U9 - update to N2WUJ26W (N2WET40W)
ThinkPad X13 20T3 - update to N2YET37W
ThinkPad T14s 20T0 - update to N2YET37W
ThinkPad T14s 20T1 - update to N2YET37W
ThinkPad X13 20T2 - update to N2YET37W
ThinkPad X1 Yoga 7th Gen 21CE - update to N3AUJ13W.exe (N3AET66W)
ThinkPad X1 Carbon 10th Gen 21CB - update to N3AUJ13W.exe (N3AET66W)
ThinkPad X1 Yoga 7th Gen 21CD - update to N3AUJ13W.exe (N3AET66W)
ThinkPad X1 Carbon 10th Gen 21CC - update to N3AUJ13W.exe (N3AET66W)
ThinkPad T16 Gen 1 21BV - update to N3BUJ09W (N3BET53W)
ThinkPad T16 Gen 1 21BW - update to N3BUJ09W (N3BET53W)
ThinkPad P14s Gen 3 21AK - update to N3BUJ09W (N3BET53W)
ThinkPad T14 Gen 3 21AH - update to N3BUJ09W (N3BET53W)
ThinkPad P14s Gen 3 21AL - update to N3BUJ09W (N3BET53W)
ThinkPad P16s Gen 1 21BT - update to N3BUJ09W (N3BET53W)
ThinkPad P16s Gen 1 21BU - update to N3BUJ09W (N3BET53W)
ThinkPad T14 Gen 3 21AJ - update to N3BUJ09W (N3BET53W)
ThinkPad P16 Gen 1 21D7 - update to N3FUJ07W (N3FET32W)
ThinkPad P16 Gen 1 21D6 - update to N3FUJ07W (N3FET32W)
ThinkPad X1 Nano Gen 2 21E8 21E9 - update to N3IET36W
ThinkPad X1 Extreme Gen 5 21DE - update to N3JET27W
ThinkPad X1 Extreme Gen 5 21DF - update to N3JET27W
ThinkPad P1 Gen 5 21DC 21DD - update to N3JET27W
ThinkPad X13 Yoga Gen 2 20W8 - update to N39ET60W
ThinkPad X13 Yoga Gen 2 20W9 - update to N39ET60W
ThinkPad X1 Extreme 4th Gen 20Y6 - update to N40ET39W
ThinkPad X1 Extreme 4th Gen 20Y5 - update to N40ET39W
ThinkPad P1 Gen 4 20Y3 - update to N40ET39W
ThinkPad P1 Gen 4 20Y4 - update to N40ET39W
ThinkPad T15p Gen 2 21A8 - update to N38UJ08W (N38ET36W)
ThinkPad T15p Gen 2 21A7 - update to N38UJ08W (N38ET36W)
ThinkPad P15v Gen 2 21A9 s - update to N38UJ08W (N38ET36W)
ThinkPad P15v Gen 2 21AA s - update to N38UJ08W (N38ET36W)
ThinkPad P15 Gen 2 20YQ s - update to N37UJ12W (N37ET44W)
ThinkPad T15g Gen 2 20YT - update to N37UJ12W (N37ET44W)
ThinkPad T15g Gen 2 20YS - update to N37UJ12W (N37ET44W)
ThinkPad P15 Gen 2 20YR s - update to N37UJ12W (N37ET44W)
ThinkPad P17 Gen 2 20YU s - update to N37UJ12W (N37ET44W)
ThinkPad P17 Gen 2 20YV s - update to N37UJ12W (N37ET44W)
ThinkPad X13 Gen 2 20WL - update to N35UJ14W (N35ET52W)
ThinkPad T14s Gen 2 20WM - update to N35UJ14W (N35ET52W)
ThinkPad T14s Gen 2 20WN - update to N35UJ14W (N35ET52W)
ThinkPad X13 Gen 2 20WK - update to N35UJ14W (N35ET52W)
ThinkPad P17 Gen 1 20SQ - update to N30UJ16W (N30ET49W)
ThinkPad P17 Gen 1 20SN - update to N30UJ16W (N30ET49W)
ThinkPad T15p Gen 1 20TN 20TM - update to N30UJ16W (N30ET49W)
ThinkPad P15 Gen 1 20ST - update to N30UJ16W (N30ET49W)
ThinkPad P15v Gen 1 20TR - update to N30UJ16W (N30ET49W)
ThinkPad T15g Gen 1 20UR 20US - update to N30UJ16W (N30ET49W)
ThinkPad P15 Gen 1 20SU - update to N30UJ16W (N30ET49W)
ThinkPad X1 Carbon 9th Gen 20XX - update to N32UJ19W.exe (N32ET81W)
ThinkPad X1 Yoga 6th Gen 20Y0 - update to N32UJ19W.exe (N32ET81W)
ThinkPad X1 Yoga 6th Gen 20XY - update to N32UJ19W.exe (N32ET81W)
ThinkPad X1 Carbon 9th Gen 20XW - update to N32UJ19W.exe (N32ET81W)
ThinkPad X13 Yoga Gen 1 - update to N2UET64W
ThinkPad L15 Gen 2 Type 20X3 20X4 - update to R1JET61W
ThinkPad L14 Gen 2 Type 20X1 20X2 s - update to R1JET61W
ThinkPad T14s Gen 3 21BR 21BS - update to N3CUR07W (N3CET52W)
ThinkPad X13 Gen 3 21BN 21BQ - update to N3CUR07W (N3CET52W)
ThinkPad L14 20U1 s - update to R17UJ16W.EXE(R17ET36W)
ThinkPad L15 20U4 - update to R17UJ16W.EXE(R17ET36W)
ThinkPad L15 20U3 - update to R17UJ16W.EXE(R17ET36W)
ThinkPad L14 20U2 s - update to R17UJ16W.EXE(R17ET36W)

• https://support.lenovo.com/us/en/product_security/LEN-106014

• Multiple vulnerabilities in Lenovo ThinkPad BIOS firmware