Input validation error in Lenovo products - CVE-2022-48189

Vulnerability identifier: #VU73735

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-48189

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of user-supplied input in the SMM driver. A local user can execute arbitrary code with elevated privileges.

20QH
ThinkPad T14 Gen 1 20S2
ThinkPad T14 Gen 1 20S3
ThinkPad T14 Gen 2 20W0
ThinkPad T14 Gen 2 20W1
ThinkPad T15 20S6
ThinkPad T15 20S7
ThinkPad T15 Gen 2 20W4
ThinkPad T15 Gen 2 20W5
ThinkPad T15p Gen 3 21DA 21DB
ThinkPad T490 20N2
ThinkPad T490 20N3
ThinkPad T490 20RY
ThinkPad T490 20RX
ThinkPad T490 Type 20Q9
ThinkPad T14 Gen 1 20S1
ThinkPad T590 20N4
ThinkPad T590 20N5
ThinkPad S2 Gen 6 Type 20VM China Only
ThinkPad S2 Yoga Gen 6 Type 20VN China Only
ThinkPad X1 Extreme 4th Gen 20Y5
ThinkPad X1 Extreme 4th Gen 20Y6
ThinkPad X1 Fold Gen 1 20RK
ThinkPad X1 Fold Gen 1 20RL
X13 Yoga Gen 3 21AW (ThinkPad
X13 Yoga Gen 3 21AX (ThinkPad
ThinkPad Z13 Gen 1 21D2
ThinkPad Z13 Gen 1 21D3
ThinkPad Z16 Gen 1 21D4
ThinkPad Z16 Gen 1 21D5
ThinkPad P14s Gen 1 20S4
ThinkPad L13 Gen 2 20VH s
ThinkPad L13 Gen 2 20VJ s
ThinkPad L13 Gen 3 21B3
ThinkPad L13 Gen 3 21B4
ThinkPad L13 Yoga Gen 2 20VL s
ThinkPad L13 Yoga Gen 2 20VK s
ThinkPad L13 Yoga Gen 3 21B5
ThinkPad L13 Yoga Gen 3 21B6
ThinkPad L14 Gen 3 21C1 s
ThinkPad L14 Gen 3 21C2 s
ThinkPad L15 Gen 3 21C3 s
ThinkPad L15 Gen 3 21C4 s
ThinkPad P1 Gen 4 20Y3
ThinkPad P1 Gen 4 20Y4
20TQ
ThinkPad P14s Gen 1 20S5
ThinkPad P14s Gen 2 20VX
ThinkPad P14s Gen 2 20VY
ThinkPad P15s Gen 1 20T4 20T5
ThinkPad P15s Gen 2 20W6
ThinkPad P15s Gen 2 20W7
ThinkPad P15v Gen 3 21D8 21D9
ThinkPad P15v Gen 3 21EN 21EM
ThinkPad P43s 20RH
ThinkPad P43s 20RJ
ThinkPad P53s 20N6
ThinkPad P53s 20N7
ThinkPad T14 Gen 1 20S0
ThinkPad X1 Yoga 4th Gen 20QG
ThinkPad X1 Carbon 7th Gen - 20R2
ThinkPad X1 Carbon 7th Gen - 20R1
ThinkPad X1 Carbon 7th Gen - 20QE
ThinkPad X1 Carbon 7th Gen - 20QD
ThinkPad X1 Yoga 4th Gen 20QF
ThinkPad X1 Yoga 4th Gen 20SA
ThinkPad X1 Yoga 4th Gen 20SB
ThinkPad X390 20SC
ThinkPad X390 20SD
ThinkPad T490s 20NX
ThinkPad T490s 20NY
ThinkPad X390 20Q1
ThinkPad X390 20Q0
ThinkPad X390 Yoga
ThinkPad X1 Titanium 20QB
ThinkPad X1 Titanium 20QA
ThinkPad P53 20QN
Thinkpad P73 20QS
Thinkpad P73 20QR
ThinkPad P53 20QQ
ThinkPad X1 Extreme 2nd Gen 20QV
ThinkPad X1 Extreme 2nd Gen 20QW
ThinkPad P1 Gen 2 20QT
ThinkPad P1 Gen 2 20QU
ThinkPad X1 Nano Gen 1 20UN 20UQ
ThinkPad X1 Extreme 3rd Gen 20TK
ThinkPad P1 Gen 3 20TH
ThinkPad P1 Gen 3 20TJ
ThinkPad X1 Extreme 3rd Gen 20TL
ThinkPad X1 Carbon 8th Gen - 20U9
ThinkPad X1 Yoga 5th Gen 20UC
ThinkPad X1 Yoga 5th Gen 20UB
ThinkPad X1 Carbon 8th Gen - 20UA
ThinkPad T14s 20T1
ThinkPad X13 20T2
ThinkPad X13 20T3
ThinkPad T14s 20T0
ThinkPad X1 Yoga 7th Gen 21CE
ThinkPad X1 Yoga 7th Gen 21CD
ThinkPad X1 Carbon 10th Gen 21CC
ThinkPad X1 Carbon 10th Gen 21CB
ThinkPad P16s Gen 1 21BT
ThinkPad P16s Gen 1 21BU
ThinkPad T16 Gen 1 21BV
ThinkPad T16 Gen 1 21BW
ThinkPad P14s Gen 3 21AL
ThinkPad P14s Gen 3 21AK
ThinkPad T14 Gen 3 21AH
ThinkPad T14 Gen 3 21AJ
ThinkPad P16 Gen 1 21D6
ThinkPad P16 Gen 1 21D7
ThinkPad X1 Nano Gen 2 21E8 21E9
ThinkPad P1 Gen 5 21DC 21DD
ThinkPad X1 Extreme Gen 5 21DE
ThinkPad X1 Extreme Gen 5 21DF
ThinkPad P15v Gen 2 21AA s
ThinkPad T15p Gen 2 21A8
ThinkPad T15p Gen 2 21A7
ThinkPad P15v Gen 2 21A9 s
ThinkPad T15g Gen 2 20YS
ThinkPad T15g Gen 2 20YT
ThinkPad P17 Gen 2 20YU s
ThinkPad P17 Gen 2 20YV s
ThinkPad P15 Gen 2 20YR s
ThinkPad P15 Gen 2 20YQ s
ThinkPad X13 Gen 2 20WL
ThinkPad X13 Gen 2 20WK
ThinkPad T14s Gen 2 20WN
ThinkPad T14s Gen 2 20WM
ThinkPad T15g Gen 1 20UR 20US
ThinkPad P15 Gen 1 20SU
ThinkPad P17 Gen 1 20SQ
ThinkPad P15v Gen 1 20TR
ThinkPad P15 Gen 1 20ST
ThinkPad P17 Gen 1 20SN
ThinkPad T15p Gen 1 20TN 20TM
ThinkPad X13 Yoga Gen 2 20W8
ThinkPad X13 Yoga Gen 2 20W9
ThinkPad X1 Yoga 6th Gen 20Y0
ThinkPad X1 Yoga 6th Gen 20XY
ThinkPad X1 Carbon 9th Gen 20XW
ThinkPad X1 Carbon 9th Gen 20XX
ThinkPad X13 Yoga Gen 1
ThinkPad E490 20N8
ThinkPad E490 20N9
ThinkPad E490s 20NG
ThinkPad E590 20NB
ThinkPad E590 20NC
ThinkPad L490 20Q5 s
ThinkPad L490 20Q6 s
ThinkPad L590 20Q8 s
ThinkPad L590 20Q7 s
ThinkPad X12 Detachable Gen 1 20UV
ThinkPad X12 Detachable Gen 1 20UW
ThinkPad R14 Gen 2 Type 20TC PRC
ThinkPad E14 Gen 2 20TA
ThinkPad E14 Gen 2 20TB
ThinkPad E15 Gen 2 20TD
ThinkPad E15 Gen 2 20TE
ThinkPad L15 Gen 2 Type 20X3 20X4
ThinkPad L14 Gen 2 Type 20X1 20X2 s
ThinkPad E14 Gen 4 21E3 s
ThinkPad E14 Gen 4 21E4 s
ThinkPad E15 Gen 4 21E6 21E7 s
ThinkPad R14 Gen 4 Types 21E5 PRC only
ThinkPad T14s Gen 3 21BR 21BS
ThinkPad X13 Gen 3 21BN 21BQ
ThinkPad S3 2nd Gen type 20RG China only
ThinkPad E14 20RA
ThinkPad E15 20RE
ThinkPad E15 20RD
ThinkPad E14 20RB
ThinkPad L15 20U4
ThinkPad L15 20U3
ThinkPad L14 20U2 s
ThinkPad L14 20U1 s

Install updates from vendor's website.

ThinkPad X1 Yoga 4th Gen 20QG - update to N2HUJ49W.exe (N2HET73W)
ThinkPad X1 Carbon 7th Gen - 20R2 - update to N2HUJ49W.exe (N2HET73W)
ThinkPad X1 Carbon 7th Gen - 20R1 - update to N2HUJ49W.exe (N2HET73W)
ThinkPad X1 Carbon 7th Gen - 20QE - update to N2HUJ49W.exe (N2HET73W)
ThinkPad X1 Carbon 7th Gen - 20QD - update to N2HUJ49W.exe (N2HET73W)
ThinkPad X1 Yoga 4th Gen 20QF - update to N2HUJ49W.exe (N2HET73W)
ThinkPad X1 Yoga 4th Gen 20SA - update to N2HUJ49W.exe (N2HET73W)
ThinkPad X1 Yoga 4th Gen 20SB - update to N2HUJ49W.exe (N2HET73W)
ThinkPad X390 20SC - update to N2JUJ38W (N2JETA1W)
ThinkPad X390 20SD - update to N2JUJ38W (N2JETA1W)
ThinkPad T490s 20NX - update to N2JUJ38W (N2JETA1W)
ThinkPad T490s 20NY - update to N2JUJ38W (N2JETA1W)
ThinkPad X390 20Q1 - update to N2JUJ38W (N2JETA1W)
ThinkPad X390 20Q0 - update to N2JUJ38W (N2JETA1W)
ThinkPad X390 Yoga - update to N2LUJ32W.exe(N2LET95W)
ThinkPad X1 Titanium 20QB - update to N2MUJ16W (N2MET59W)
ThinkPad X1 Titanium 20QA - update to N2MUJ16W (N2MET59W)
ThinkPad P53 20QN - update to N2NUJ24W (N2NET55W)
Thinkpad P73 20QS - update to N2NUJ24W (N2NET55W)
Thinkpad P73 20QR - update to N2NUJ24W (N2NET55W)
ThinkPad P53 20QQ - update to N2NUJ24W (N2NET55W)
ThinkPad X1 Extreme 2nd Gen 20QV - update to N2OUJ28W.exe(N2OET59W)
ThinkPad X1 Extreme 2nd Gen 20QW - update to N2OUJ28W.exe(N2OET59W)
ThinkPad P1 Gen 2 20QT - update to N2OUJ28W.exe(N2OET59W)
ThinkPad P1 Gen 2 20QU - update to N2OUJ28W.exe(N2OET59W)
ThinkPad X1 Nano Gen 1 20UN 20UQ - update to N2TUJ20W.exe (N2TET77W)
ThinkPad X1 Extreme 3rd Gen 20TK - update to N2VUJ23W.exe(N2VET42W)
ThinkPad P1 Gen 3 20TH - update to N2VUJ23W.exe(N2VET42W)
ThinkPad P1 Gen 3 20TJ - update to N2VUJ23W.exe(N2VET42W)
ThinkPad X1 Extreme 3rd Gen 20TL - update to N2VUJ23W.exe(N2VET42W)
ThinkPad X1 Carbon 8th Gen - 20U9 - update to N2WUJ26W (N2WET40W)
ThinkPad X1 Yoga 5th Gen 20UC - update to N2WUJ26W (N2WET40W)
ThinkPad X1 Yoga 5th Gen 20UB - update to N2WUJ26W (N2WET40W)
ThinkPad X1 Carbon 8th Gen - 20UA - update to N2WUJ26W (N2WET40W)
ThinkPad T14s 20T1 - update to N2YET37W
ThinkPad X13 20T2 - update to N2YET37W
ThinkPad X13 20T3 - update to N2YET37W
ThinkPad T14s 20T0 - update to N2YET37W
ThinkPad X1 Yoga 7th Gen 21CE - update to N3AUJ17W.exe (N3AET71W)
ThinkPad X1 Yoga 7th Gen 21CD - update to N3AUJ17W.exe (N3AET71W)
ThinkPad X1 Carbon 10th Gen 21CC - update to N3AUJ17W.exe (N3AET71W)
ThinkPad X1 Carbon 10th Gen 21CB - update to N3AUJ17W.exe (N3AET71W)
ThinkPad P16s Gen 1 21BT - update to N3BUJ09W/N3BUJ09W (N3BET53W/N3MET12W)
ThinkPad P16s Gen 1 21BU - update to N3BUJ09W/N3BUJ09W (N3BET53W/N3MET12W)
ThinkPad T16 Gen 1 21BV - update to N3BUJ09W/N3BUJ09W (N3BET53W/N3MET12W)
ThinkPad T16 Gen 1 21BW - update to N3BUJ09W/N3BUJ09W (N3BET53W/N3MET12W)
ThinkPad P14s Gen 3 21AL - update to N3BUJ09W/N3BUJ09W (N3BET53W/N3MET12W)
ThinkPad P14s Gen 3 21AK - update to N3BUJ09W/N3BUJ09W (N3BET53W/N3MET12W)
ThinkPad T14 Gen 3 21AH - update to N3BUJ09W/N3BUJ09W (N3BET53W/N3MET12W)
ThinkPad T14 Gen 3 21AJ - update to N3BUJ09W/N3BUJ09W (N3BET53W/N3MET12W)
ThinkPad P16 Gen 1 21D6 - update to N3FUJ07W (N3FET32W)
ThinkPad P16 Gen 1 21D7 - update to N3FUJ07W (N3FET32W)
ThinkPad X1 Nano Gen 2 21E8 21E9 - update to N3IUJ10W.exe(N3IET38W)
ThinkPad P1 Gen 5 21DC 21DD - update to N3JUJ09W.exe(N3JET30W)
ThinkPad X1 Extreme Gen 5 21DE - update to N3JUJ09W.exe(N3JET30W)
ThinkPad X1 Extreme Gen 5 21DF - update to N3JUJ09W.exe(N3JET30W)
ThinkPad P15v Gen 2 21AA s - update to N38UJ09W (N38ET37W)
ThinkPad T15p Gen 2 21A8 - update to N38UJ09W (N38ET37W)
ThinkPad T15p Gen 2 21A7 - update to N38UJ09W (N38ET37W)
ThinkPad P15v Gen 2 21A9 s - update to N38UJ09W (N38ET37W)
ThinkPad T15g Gen 2 20YS - update to N37UJ12W (N37ET44W)
ThinkPad T15g Gen 2 20YT - update to N37UJ12W (N37ET44W)
ThinkPad P17 Gen 2 20YU s - update to N37UJ12W (N37ET44W)
ThinkPad P17 Gen 2 20YV s - update to N37UJ12W (N37ET44W)
ThinkPad P15 Gen 2 20YR s - update to N37UJ12W (N37ET44W)
ThinkPad P15 Gen 2 20YQ s - update to N37UJ12W (N37ET44W)
ThinkPad X13 Gen 2 20WL - update to N35UJ13W (N35ET51W)
ThinkPad X13 Gen 2 20WK - update to N35UJ13W (N35ET51W)
ThinkPad T14s Gen 2 20WN - update to N35UJ13W (N35ET51W)
ThinkPad T14s Gen 2 20WM - update to N35UJ13W (N35ET51W)
ThinkPad T15g Gen 1 20UR 20US - update to N30UJ16W (N30ET49W)
ThinkPad P15 Gen 1 20SU - update to N30UJ16W (N30ET49W)
ThinkPad P17 Gen 1 20SQ - update to N30UJ16W (N30ET49W)
ThinkPad P15v Gen 1 20TR - update to N30UJ16W (N30ET49W)
ThinkPad P15 Gen 1 20ST - update to N30UJ16W (N30ET49W)
ThinkPad P17 Gen 1 20SN - update to N30UJ16W (N30ET49W)
ThinkPad T15p Gen 1 20TN 20TM - update to N30UJ16W (N30ET49W)
ThinkPad X13 Yoga Gen 2 20W8 - update to N39UJ18W.exe(N39ET61W)
ThinkPad X13 Yoga Gen 2 20W9 - update to N39UJ18W.exe(N39ET61W)
ThinkPad X1 Yoga 6th Gen 20Y0 - update to N32UJ20W.exe (N32ET82W)
ThinkPad X1 Yoga 6th Gen 20XY - update to N32UJ20W.exe (N32ET82W)
ThinkPad X1 Carbon 9th Gen 20XW - update to N32UJ20W.exe (N32ET82W)
ThinkPad X1 Carbon 9th Gen 20XX - update to N32UJ20W.exe (N32ET82W)
ThinkPad X13 Yoga Gen 1 - update to N2UUJ26W.exe(N2UET65W)
ThinkPad E490 20N8 - update to R0YET51W
ThinkPad E490 20N9 - update to R0YET51W
ThinkPad E490s 20NG - update to R0YET51W
ThinkPad E590 20NB - update to R0YET51W
ThinkPad E590 20NC - update to R0YET51W
ThinkPad L490 20Q5 s - update to R0ZET54W
ThinkPad L490 20Q6 s - update to R0ZET54W
ThinkPad L590 20Q8 s - update to R0ZET54W
ThinkPad L590 20Q7 s - update to R0ZET54W
ThinkPad X12 Detachable Gen 1 20UV - update to R1GUJ15W.exe(R1GET53W)
ThinkPad X12 Detachable Gen 1 20UW - update to R1GUJ15W.exe(R1GET53W)
ThinkPad R14 Gen 2 Type 20TC PRC - update to R1EET55W
ThinkPad E14 Gen 2 20TA - update to R1EET55W
ThinkPad E14 Gen 2 20TB - update to R1EET55W
ThinkPad E15 Gen 2 20TD - update to R1EET55W
ThinkPad E15 Gen 2 20TE - update to R1EET55W
ThinkPad L15 Gen 2 Type 20X3 20X4 - update to R1JET61W
ThinkPad L14 Gen 2 Type 20X1 20X2 s - update to R1JET61W
ThinkPad E14 Gen 4 21E3 s - update to R1SET46W
ThinkPad E14 Gen 4 21E4 s - update to R1SET46W
ThinkPad E15 Gen 4 21E6 21E7 s - update to R1SET46W
ThinkPad R14 Gen 4 Types 21E5 PRC only - update to R1SET46W
ThinkPad T14s Gen 3 21BR 21BS - update to N3CUR07W (N3CET52W)
ThinkPad X13 Gen 3 21BN 21BQ - update to N3CUR07W (N3CET52W)
ThinkPad S3 2nd Gen type 20RG China only - update to R16UJ20W.EXE(R16ET37W)
ThinkPad E14 20RA - update to R16UJ20W.EXE(R16ET37W)
ThinkPad E15 20RE - update to R16UJ20W.EXE(R16ET37W)
ThinkPad E15 20RD - update to R16UJ20W.EXE(R16ET37W)
ThinkPad E14 20RB - update to R16UJ20W.EXE(R16ET37W)
ThinkPad L15 20U4 - update to R17UJ16W.EXE(R17ET36W)
ThinkPad L15 20U3 - update to R17UJ16W.EXE(R17ET36W)
ThinkPad L14 20U2 s - update to R17UJ16W.EXE(R17ET36W)
ThinkPad L14 20U1 s - update to R17UJ16W.EXE(R17ET36W)

• https://support.lenovo.com/us/en/product_security/LEN-106014

• Multiple vulnerabilities in Lenovo ThinkPad BIOS firmware