Security features bypass in Lenovo products - CVE-2022-4575

Vulnerability identifier: #VU73734

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-4575

CWE-ID: CWE-254

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows an attacker to bypass implemented security restrictions.

The vulnerability exists due to improper write protection of UEFI variables. An attacker with physical access to device can bypass the Secure Boot mechanism and compromise the affected system.

ThinkPad X260
ThinkPad P50
ThinkPad X1 Yoga 1st Gen 20FR
ThinkPad X1 Yoga 1st Gen 20FQ
ThinkPad X1 Carbon 4th Gen 20FC
ThinkPad X1 Carbon 4th Gen 20FB
ThinkPad Yoga 260
ThinkPad L560
ThinkPad T560
ThinkPad P50s
ThinkPad T470 20JM
ThinkPad T470 20JN
ThinkPad T470 20HE
ThinkPad T470 20HD
ThinkPad 25 20K7
ThinkPad T470s 20HF
ThinkPad T470s 20HG
ThinkPad T470s 20JS
ThinkPad T470s 20JT
ThinkPad P70
ThinkPad X270 20HN
ThinkPad X270 20HM
ThinkPad X270 20K6
ThinkPad X270 20K5

Install updates from vendor's website.

ThinkPad P50 - update to N1EET98W
ThinkPad X1 Yoga 1st Gen 20FR - update to N1FUJ49W.exe(N1FET82W)
ThinkPad X1 Yoga 1st Gen 20FQ - update to N1FUJ49W.exe(N1FET82W)
ThinkPad X1 Carbon 4th Gen 20FC - update to N1FUJ49W.exe(N1FET82W)
ThinkPad X1 Carbon 4th Gen 20FB - update to N1FUJ49W.exe(N1FET82W)
ThinkPad Yoga 260 - update to N1GUJ43W.exe (N1GETA9W)
ThinkPad L560 - update to N1HUJ45W.exe(N1HET98W)
ThinkPad T560 - update to N1KUJ35W.exe(N1KET58W)
ThinkPad P50s - update to N1KUJ35W.exe(N1KET58W)
ThinkPad T470 20JM - update to N1QET98W
ThinkPad T470 20JN - update to N1QET98W
ThinkPad T470 20HE - update to N1QET98W
ThinkPad T470 20HD - update to N1QET98W
ThinkPad 25 20K7 - update to N1QET98W
ThinkPad T470s 20HF - update to N1WET70W
ThinkPad T470s 20HG - update to N1WET70W
ThinkPad T470s 20JS - update to N1WET70W
ThinkPad T470s 20JT - update to N1WET70W
ThinkPad P70 - update to N1DETB9W
ThinkPad X270 20HN - update to R0IET69W
ThinkPad X270 20HM - update to R0IET69W
ThinkPad X270 20K6 - update to R0IET69W
ThinkPad X270 20K5 - update to R0IET69W

• https://support.lenovo.com/us/en/product_security/LEN-106014

• Multiple vulnerabilities in Lenovo ThinkPad BIOS firmware