Improper access control in Intel Dynamic Tuning Technology (DTT) - CVE-2022-29470

Vulnerability identifier: #VU79422

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-29470

CWE-ID: CWE-284

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions. A local user can bypass implemented security restrictions and gain elevated privileges on the system.

Intel Dynamic Tuning Technology (DTT)
ThinkCentre M90t
ThinkStation P340 Workstation
ThinkStation P330 Workstation
ThinkPad X1 Extreme 3rd Gen 20TL
ThinkPad X1 Extreme 3rd Gen 20TK
ThinkPad P1 Gen 3 20TJ
ThinkPad P1 Gen 3 20TH
Lenovo V50t-13IMB
ThinkCentre M70a
ThinkCentre M90s
ThinkCentre M90q
ThinkCentre M80t
ThinkCentre M80s
ThinkCentre M80q
ThinkCentre M70t
ThinkCentre M70s
ThinkCentre M70q
ThinkCentre M70q 11E8
Lenovo E41-50
ThinkPad L13 Yoga Gen 2 20VK s
ThinkPad L13 Yoga Gen 2 20VL s
ThinkPad L13 Gen 2 20VJ s
ThinkPad L13 Gen 2 20VH s
Lenovo S14 G2 ITL
ThinkBook 14 G2 ITL
ThinkBook 14 G3 ITL
ThinkBook 14s Yoga ITL
ThinkBook 15 G2 ITL
ThinkBook 15 G3 ITL
Lenovo V14 G2-ITL
Lenovo V15 G2-ITL
Lenovo V17 G2-ITL
ideapad Yoga 9-14ITL5
IdeaPad Gaming 3-15IHU6
Ideapad 5-15ITL05
IdeaPad 5-14ITL05
ideapad 5 Pro-14ITL6
IdeaPad 3-17ITL6
ideapad 3-15ITL6
ideapad 3-14ITL6
ideapad L3-15ITL6
Legion 7 16IAX7
ThinkBook 15 G4 IAP
ThinkBook 14s Yoga G2 IAP
ThinkBook 14 G4 IAP
IdeaPad Gaming 3 16IAH7
Lenovo Legion S7 16IAH7
Yoga Slim 6 14IAP8
IdeaPad Gaming 3 15IAH7
Yoga Slim 7 Carbon 13IRP8
LOQ 16IRH8
Yoga Pro 9 16IRP8
Yoga Book 9 13IRU8
LOQ 15IRH8
Lenovo Slim Pro 9 16IRP8
Lenovo Slim 7 Carbon 13IRP8
IdeaPad Slim 5 14IAH8
IdeaPad Slim 5 16IAH8
IdeaPad Slim 5 14IRL8
IdeaPad Slim 5 16IRL8
Legion S7 16IRH8
Legion Slim 5 16IRH8
Yoga Pro 9 14IRP8
IdeaPad Pro 5 16IRH8
IdeaPad Slim 3 14IAH8
IdeaPad Slim 3 14IRH8
Yoga Slim 6 14IRH8
IdeaPad Slim 3 14IRU8
ThinkBook 16p G4 IRH
Yoga Slim 6 14IRP8
IdeaPad Slim 3 15IRU8
ThinkBook 15 G5 IRL
IdeaPad Slim 3 15IAH8
IdeaPad Slim 3 15IRH8
IdeaPad Slim 3 16IAH8
IdeaPad Slim 3 16IRH8
Lenovo Slim 7 14IRP8
Lenovo Slim Pro 9 14IRP8
IdeaPad Slim 3 16IRU8
ThinkBook 14s Yoga G3 IRU
ThinkBook 14 G5 IRL
Lenovo V14 G3 IAP
IdeaPad 1 14IAU7
IdeaPad 1 15IAU7
IdeaPad 3 14IAU7
IdeaPad 3 15IAU7
Lenovo Flex 7 14IRU8
Lenovo S14 G3 IAP
IdeaPad 3 17IAU7
IdeaPad Flex 5 14IRU8
IdeaPad Flex 5 16IRU8
Lenovo V15 G3 IAP CTO
Lenovo V15 G3 IAP
Lenovo V17 G3 IAP
K14 G2 IRU
ThinkBook 13x G2 IAP
ThinkBook 16 G6 IRL
ThinkBook 14 G6 IRL

Install updates from vendor's website.

Intel Dynamic Tuning Technology (DTT) - update to 8.7.10400.15482
Lenovo E41-50 - update to 8.7.10401.16510
ThinkPad L13 Yoga Gen 2 20VK s - update to 8.7.10600.20700
ThinkPad L13 Yoga Gen 2 20VL s - update to 8.7.10600.20700
ThinkPad L13 Gen 2 20VJ s - update to 8.7.10600.20700
ThinkPad L13 Gen 2 20VH s - update to 8.7.10600.20700
Lenovo S14 G2 ITL - update to 8.7.10700.22502
ThinkBook 14 G2 ITL - update to 8.7.10700.22502
ThinkBook 14 G3 ITL - update to 8.7.10700.22502
ThinkBook 14s Yoga ITL - update to 8.7.10700.22502
ThinkBook 15 G2 ITL - update to 8.7.10700.22502
ThinkBook 15 G3 ITL - update to 8.7.10700.22502
Lenovo V14 G2-ITL - update to 8.7.10700.22502
Lenovo V15 G2-ITL - update to 8.7.10700.22502
Lenovo V17 G2-ITL - update to 8.7.10700.22502
ideapad Yoga 9-14ITL5 - update to 8.7.10700.22502
IdeaPad Gaming 3-15IHU6 - update to 8.7.10700.22502
Ideapad 5-15ITL05 - update to 8.7.10700.22502
IdeaPad 5-14ITL05 - update to 8.7.10700.22502
ideapad 5 Pro-14ITL6 - update to 8.7.10700.22502
IdeaPad 3-17ITL6 - update to 8.7.10700.22502
ideapad 3-15ITL6 - update to 8.7.10700.22502
ideapad 3-14ITL6 - update to 8.7.10700.22502
ideapad L3-15ITL6 - update to 8.7.10700.22502_21H2
Legion 7 16IAX7 - update to 9.0.10709.26568
ThinkBook 15 G4 IAP - update to 9.0.10709.26568
ThinkBook 14s Yoga G2 IAP - update to 9.0.10709.26568
ThinkBook 14 G4 IAP - update to 9.0.10709.26568
IdeaPad Gaming 3 16IAH7 - update to 9.0.11000.27915
Lenovo Legion S7 16IAH7 - update to 9.0.11000.27915
Yoga Slim 6 14IAP8 - update to 9.0.11000.27915
IdeaPad Gaming 3 15IAH7 - update to 9.0.11000.27915
Yoga Slim 7 Carbon 13IRP8 - update to 9.0.11101.30293
LOQ 16IRH8 - update to 9.0.11101.30293
Yoga Pro 9 16IRP8 - update to 9.0.11101.30293
Yoga Book 9 13IRU8 - update to 9.0.11101.30293
LOQ 15IRH8 - update to 9.0.11101.30293
Lenovo Slim Pro 9 16IRP8 - update to 9.0.11101.30293
Lenovo Slim 7 Carbon 13IRP8 - update to 9.0.11101.30293
IdeaPad Slim 5 14IAH8 - update to 9.0.11101.30293
IdeaPad Slim 5 16IAH8 - update to 9.0.11101.30293
IdeaPad Slim 5 14IRL8 - update to 9.0.11101.30293
IdeaPad Slim 5 16IRL8 - update to 9.0.11101.30293
Legion S7 16IRH8 - update to 9.0.11101.30293
Legion Slim 5 16IRH8 - update to 9.0.11101.30293
Yoga Pro 9 14IRP8 - update to 9.0.11200.30652
IdeaPad Pro 5 16IRH8 - update to 9.0.11200.30652
IdeaPad Slim 3 14IAH8 - update to 9.0.11200.30652
IdeaPad Slim 3 14IRH8 - update to 9.0.11200.30652
Yoga Slim 6 14IRH8 - update to 9.0.11200.30652
IdeaPad Slim 3 14IRU8 - update to 9.0.11200.30652
ThinkBook 16p G4 IRH - update to 9.0.11200.30652
Yoga Slim 6 14IRP8 - update to 9.0.11200.30652
IdeaPad Slim 3 15IRU8 - update to 9.0.11200.30652
ThinkBook 15 G5 IRL - update to 9.0.11200.30652
IdeaPad Slim 3 15IAH8 - update to 9.0.11200.30652
IdeaPad Slim 3 15IRH8 - update to 9.0.11200.30652
IdeaPad Slim 3 16IAH8 - update to 9.0.11200.30652
IdeaPad Slim 3 16IRH8 - update to 9.0.11200.30652
Lenovo Slim 7 14IRP8 - update to 9.0.11200.30652
Lenovo Slim Pro 9 14IRP8 - update to 9.0.11200.30652
IdeaPad Slim 3 16IRU8 - update to 9.0.11200.30652
ThinkBook 14s Yoga G3 IRU - update to 9.0.11200.30652
ThinkBook 14 G5 IRL - update to 9.0.11200.30652
Lenovo V14 G3 IAP - update to 9.0.11202.31222
IdeaPad 1 14IAU7 - update to 9.0.11202.31222
IdeaPad 1 15IAU7 - update to 9.0.11202.31222
IdeaPad 3 14IAU7 - update to 9.0.11202.31222
IdeaPad 3 15IAU7 - update to 9.0.11202.31222
Lenovo Flex 7 14IRU8 - update to 9.0.11202.31222
Lenovo S14 G3 IAP - update to 9.0.11202.31222
IdeaPad 3 17IAU7 - update to 9.0.11202.31222
IdeaPad Flex 5 14IRU8 - update to 9.0.11202.31222
IdeaPad Flex 5 16IRU8 - update to 9.0.11202.31222
Lenovo V15 G3 IAP CTO - update to 9.0.11202.31222
Lenovo V15 G3 IAP - update to 9.0.11202.31222
Lenovo V17 G3 IAP - update to 9.0.11202.31222
K14 G2 IRU - update to 9.0.11202.31222
ThinkBook 13x G2 IAP - update to 9.0.11202.31222
ThinkBook 16 G6 IRL - update to 9.0.11202.31222
ThinkBook 14 G6 IRL - update to 9.0.11202.31222

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00875.html

• Improper access control in Intel DTT Software
• Lenovo products update for Intel Dynamic Tuning Technolog (DTT)