Vulnerability-Lookup

BDU:2022-02345 (CVE-2022-1107)

Vulnerability from fstec – Published: 2022-04-18 – Updated: 2022-04-18 – View on bdu.fstec.ru Fixed

Title

Уязвимость обработчика SmmOEMInt15 SMI системы BIOS микропрограммного обеспечения ноутбуков ThinkPad, позволяющая нарушителю выполнить произвольный код с повышенными привилегиями

Summary

Уязвимость обработчика SmmOEMInt15 SMI системы BIOS микропрограммного обеспечения ноутбуков ThinkPad связана с обходом введенных ограничений безопасности. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код с повышенными привилегиями

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:C/A:C

7.8 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Class

Architecture vulnerability

Status

Confirmed by the vendor

Exploitation

Authorization bypass

Incidents

Being clarified

Remediation

Software update

CWE

CWE-264 - Разрешения, привилегии и средства управления доступом
CWE-269 - Небезопасное управление привилегиями

Aliases

CVE-2022-1107, LEN-84943

References

2 references

URL
https://support.lenovo.com/us/en/product_security/LEN-84943#ThinkPad
https://www.cybersecurity-help.cz/vdb/SB2022041313

Impacted products

58 products from 1 vendor

Vendors

Lenovo Group Limited

Products

ThinkPad 11e 20D9, ThinkPad 11e 20DA, ThinkPad Helix 20CG, ThinkPad Helix 20CH, ThinkPad L560, ThinkPad L570 20J8, ThinkPad L570 20J9, ThinkPad L570 20JQ, ThinkPad L570 20JR, ThinkPad P50s, ThinkPad P51s 20HB, ThinkPad P51s 20HC, ThinkPad P51s 20JY, ThinkPad P51s 20K0, ThinkPad P52s 20LB, ThinkPad P52s 20LC, ThinkPad S540, ThinkPad T550, ThinkPad T560, ThinkPad T570 20H9, ThinkPad T570 20HA, ThinkPad T570 20JW, ThinkPad T570 20JX, ThinkPad T580 20L9, ThinkPad T580 20LA, ThinkPad X1 Tablet 1st Gen 20GG, ThinkPad X1 Tablet 1st Gen 20GH, ThinkPad X1 Tablet 2nd Gen 20JB, ThinkPad X1 Tablet 2nd Gen 20JC, ThinkPad W540, ThinkPad W541, ThinkPad W550s, ThinkPad X1 Carbon 3rd Gen 20BS, ThinkPad X1 Carbon 3rd Gen 20BT, ThinkPad X1 Carbon 4th Gen 20FB, ThinkPad X1 Carbon 4th Gen 20FC, ThinkPad X1 Carbon 5th Gen - Kabylake 20HR, ThinkPad X1 Carbon 5th Gen - Kabylake 20HQ, ThinkPad X1 Carbon 5th Gen - Skylake 20K4, ThinkPad X1 Carbon 5th Gen - Skylake 20K3, ThinkPad X1 Yoga 1st Gen 20FQ, ThinkPad X1 Yoga 1st Gen 20FR, ThinkPad X1 Yoga 2nd Gen 20JD, ThinkPad X1 Yoga 2nd Gen 2 0JE, ThinkPad X1 Yoga 2nd Gen 20JF, ThinkPad X1 Yoga 2nd Gen 20JG, ThinkPad X1 Yoga 3rd Gen 20LD, ThinkPad X1 Yoga 3rd Gen 20LE, ThinkPad X1 Yoga 3rd Gen 20LF, ThinkPad X1 Yoga 3rd Gen 20LG, ThinkPad X250, ThinkPad X280 20KF, ThinkPad X280 20KE, ThinkPad X390 Yoga, ThinkPad Yoga 11e 20D9, ThinkPad Yoga 11e 20DA, ThinkPad Yoga 15, ThinkPad Yoga 260

Versions

до N15ET78W (ThinkPad 11e 20D9), до N15ET78W (ThinkPad 11e 20DA), до N17ETA8W (ThinkPad Helix 20CG), до N17ETA8W (ThinkPad Helix 20CH), до N1HET85W (ThinkPad L560), до N1XET65W (ThinkPad L570 20J8), до N1XET65W (ThinkPad L570 20J9), до N1XET65W (ThinkPad L570 20JQ), до N1XET65W (ThinkPad L570 20JR), до N1KET46W (ThinkPad P50s), до N1VET50W (ThinkPad P51s 20HB), до N1VET50W (ThinkPad P51s 20HC), до N1VET50W (ThinkPad P51s 20JY), до N1VET50W (ThinkPad P51s 20K0), до N27ET36W (ThinkPad P52s 20LB), до N27ET36W (ThinkPad P52s 20LC), до GPET80WW (ThinkPad S540), до N11ET50W (ThinkPad T550), до N1KET46W (ThinkPad T560), до N1VET50W (ThinkPad T570 20H9), до N1VET50W (ThinkPad T570 20HA), до N1VET50W (ThinkPad T570 20JW), до N1VET50W (ThinkPad T570 20JX), до N27ET36W (ThinkPad T580 20L9), до N27ET36W (ThinkPad T580 20LA), до N1LE T86W (ThinkPad X1 Tablet 1st Gen 20GG), до N1LET86W (ThinkPad X1 Tablet 1st Gen 20GH), до N1OET50W (ThinkPad X1 Tablet 2nd Gen 20JB), до N1OET50W (ThinkPad X1 Tablet 2nd Gen 20JC), до GNET92WW (ThinkPad W540), до GNET92WW (ThinkPad W541), до N11ET50W (ThinkPad W550s), до N14ET52 W (ThinkPad X1 Carbon 3rd Gen 20BS), до N14ET52W (ThinkPad X1 Carbon 3rd Gen 20BT), до N1FET70W (ThinkPad X1 Carbon 4th Gen 20FB), до N1FET70W (ThinkPad X1 Carbon 4th Gen 20FC), до N1MET55W (ThinkPad X1 Carbon 5th Gen - Kabylake 20HR), до N1MET55W (ThinkPad X1 Carbon 5th Gen - Kabylake 20HQ), до N1MET55W (ThinkPad X1 Carbon 5th Gen - Skylake 20K4), до N1MET55W (ThinkPad X1 Carbon 5th Gen - Skylake 20K3), до N1FET70W (ThinkPad X1 Yoga 1st Gen 20FQ), до N1FET70W (ThinkPad X1 Yoga 1st Gen 20FR), до N1NET47W (ThinkPad X1 Yoga 2nd Gen 20JD), до N1NET47W (ThinkPad X1 Yoga 2nd Gen 2 0JE), до N1NET47W (ThinkPad X1 Yoga 2nd Gen 20JF), до N1NET47W (ThinkPad X1 Yoga 2nd Gen 20JG), до N25ET50W (ThinkPad X1 Yoga 3rd Gen 20LD), до N25ET50W (ThinkPad X1 Yoga 3rd Gen 20LE), до N25ET50W (ThinkPad X1 Yoga 3rd Gen 20LF), до N25ET50W (ThinkPad X1 Yoga 3rd Gen 20LG), до N10ET58W (ThinkPad X250), до N20ET44W (ThinkPad X280 20KF), до N20ET44W (ThinkPad X280 20KE), до N2LET60W (ThinkPad X390 Yoga), до N15ET78W (ThinkPad Yoga 11e 20D9), до N15ET78W (ThinkPad Yoga 11e 20DA), до N19ET61W (ThinkPad Yoga 15), до N1GET98W (ThinkPad Yoga 260)

Product types

Firmware

Mitigations

Использование рекомендаций производителя: https://support.lenovo.com/us/en/product_security/LEN-84943#ThinkPad

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Lenovo Group Limited",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e N15ET78W (ThinkPad 11e 20D9), \u0434\u043e N15ET78W (ThinkPad 11e 20DA), \u0434\u043e N17ETA8W (ThinkPad Helix 20CG), \u0434\u043e N17ETA8W (ThinkPad Helix 20CH), \u0434\u043e N1HET85W (ThinkPad L560), \u0434\u043e N1XET65W (ThinkPad L570 20J8), \u0434\u043e N1XET65W (ThinkPad L570 20J9), \u0434\u043e N1XET65W (ThinkPad L570 20JQ), \u0434\u043e N1XET65W (ThinkPad L570 20JR), \u0434\u043e N1KET46W (ThinkPad P50s), \u0434\u043e N1VET50W (ThinkPad P51s 20HB), \u0434\u043e N1VET50W (ThinkPad P51s 20HC), \u0434\u043e N1VET50W (ThinkPad P51s 20JY), \u0434\u043e N1VET50W (ThinkPad P51s 20K0), \u0434\u043e N27ET36W (ThinkPad P52s 20LB), \u0434\u043e N27ET36W (ThinkPad P52s 20LC), \u0434\u043e GPET80WW (ThinkPad S540), \u0434\u043e N11ET50W (ThinkPad T550), \u0434\u043e N1KET46W (ThinkPad T560), \u0434\u043e N1VET50W (ThinkPad T570 20H9), \u0434\u043e N1VET50W (ThinkPad T570 20HA), \u0434\u043e N1VET50W (ThinkPad T570 20JW), \u0434\u043e N1VET50W (ThinkPad T570 20JX), \u0434\u043e N27ET36W (ThinkPad T580 20L9), \u0434\u043e N27ET36W (ThinkPad T580 20LA), \u0434\u043e N1LE T86W (ThinkPad X1 Tablet 1st Gen 20GG), \u0434\u043e N1LET86W (ThinkPad X1 Tablet 1st Gen 20GH), \u0434\u043e N1OET50W (ThinkPad X1 Tablet 2nd Gen 20JB), \u0434\u043e N1OET50W (ThinkPad X1 Tablet 2nd Gen 20JC), \u0434\u043e GNET92WW (ThinkPad W540), \u0434\u043e GNET92WW (ThinkPad W541), \u0434\u043e N11ET50W (ThinkPad W550s), \u0434\u043e N14ET52 W (ThinkPad X1 Carbon 3rd Gen 20BS), \u0434\u043e N14ET52W (ThinkPad X1 Carbon 3rd Gen 20BT), \u0434\u043e N1FET70W (ThinkPad X1 Carbon 4th Gen 20FB), \u0434\u043e N1FET70W (ThinkPad X1 Carbon 4th Gen 20FC), \u0434\u043e N1MET55W (ThinkPad X1 Carbon 5th Gen - Kabylake 20HR), \u0434\u043e N1MET55W (ThinkPad X1 Carbon 5th Gen - Kabylake 20HQ), \u0434\u043e N1MET55W (ThinkPad X1 Carbon 5th Gen - Skylake 20K4), \u0434\u043e N1MET55W (ThinkPad X1 Carbon 5th Gen - Skylake 20K3), \u0434\u043e N1FET70W (ThinkPad X1 Yoga 1st Gen 20FQ), \u0434\u043e N1FET70W (ThinkPad X1 Yoga 1st Gen 20FR), \u0434\u043e N1NET47W (ThinkPad X1 Yoga 2nd Gen 20JD), \u0434\u043e N1NET47W (ThinkPad X1 Yoga 2nd Gen 2 0JE), \u0434\u043e N1NET47W (ThinkPad X1 Yoga 2nd Gen 20JF), \u0434\u043e N1NET47W (ThinkPad X1 Yoga 2nd Gen 20JG), \u0434\u043e N25ET50W (ThinkPad X1 Yoga 3rd Gen 20LD), \u0434\u043e N25ET50W (ThinkPad X1 Yoga 3rd Gen 20LE), \u0434\u043e N25ET50W (ThinkPad X1 Yoga 3rd Gen 20LF), \u0434\u043e N25ET50W (ThinkPad X1 Yoga 3rd Gen 20LG), \u0434\u043e N10ET58W (ThinkPad X250), \u0434\u043e N20ET44W (ThinkPad X280 20KF), \u0434\u043e N20ET44W (ThinkPad X280 20KE), \u0434\u043e N2LET60W (ThinkPad X390 Yoga), \u0434\u043e N15ET78W (ThinkPad Yoga 11e 20D9), \u0434\u043e N15ET78W (ThinkPad Yoga 11e 20DA), \u0434\u043e N19ET61W (ThinkPad Yoga 15), \u0434\u043e N1GET98W (ThinkPad Yoga 260)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://support.lenovo.com/us/en/product_security/LEN-84943#ThinkPad",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "12.04.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "18.04.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "18.04.2022",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-02345",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2022-1107, LEN-84943",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "ThinkPad 11e 20D9, ThinkPad 11e 20DA, ThinkPad Helix 20CG, ThinkPad Helix 20CH, ThinkPad L560, ThinkPad L570 20J8, ThinkPad L570 20J9, ThinkPad L570 20JQ, ThinkPad L570 20JR, ThinkPad P50s, ThinkPad P51s 20HB, ThinkPad P51s 20HC, ThinkPad P51s 20JY, ThinkPad P51s 20K0, ThinkPad P52s 20LB, ThinkPad P52s 20LC, ThinkPad S540, ThinkPad T550, ThinkPad T560, ThinkPad T570 20H9, ThinkPad T570 20HA, ThinkPad T570 20JW, ThinkPad T570 20JX, ThinkPad T580 20L9, ThinkPad T580 20LA, ThinkPad X1 Tablet 1st Gen 20GG, ThinkPad X1 Tablet 1st Gen 20GH, ThinkPad X1 Tablet 2nd Gen 20JB, ThinkPad X1 Tablet 2nd Gen 20JC, ThinkPad W540, ThinkPad W541, ThinkPad W550s, ThinkPad X1 Carbon 3rd Gen 20BS, ThinkPad X1 Carbon 3rd Gen 20BT, ThinkPad X1 Carbon 4th Gen 20FB, ThinkPad X1 Carbon 4th Gen 20FC, ThinkPad X1 Carbon 5th Gen - Kabylake 20HR, ThinkPad X1 Carbon 5th Gen - Kabylake 20HQ, ThinkPad X1 Carbon 5th Gen - Skylake 20K4, ThinkPad X1 Carbon 5th Gen - Skylake 20K3, ThinkPad X1 Yoga 1st Gen 20FQ, ThinkPad X1 Yoga 1st Gen 20FR, ThinkPad X1 Yoga 2nd Gen 20JD, ThinkPad X1 Yoga 2nd Gen 2 0JE, ThinkPad X1 Yoga 2nd Gen 20JF, ThinkPad X1 Yoga 2nd Gen 20JG, ThinkPad X1 Yoga 3rd Gen 20LD, ThinkPad X1 Yoga 3rd Gen 20LE, ThinkPad X1 Yoga 3rd Gen 20LF, ThinkPad X1 Yoga 3rd Gen 20LG, ThinkPad X250, ThinkPad X280 20KF, ThinkPad X280 20KE, ThinkPad X390 Yoga, ThinkPad Yoga 11e 20D9, ThinkPad Yoga 11e 20DA, ThinkPad Yoga 15, ThinkPad Yoga 260",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 SmmOEMInt15 SMI \u0441\u0438\u0441\u0442\u0435\u043c\u044b BIOS \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 ThinkPad, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (CWE-264), \u041d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (CWE-269)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 SmmOEMInt15 SMI \u0441\u0438\u0441\u0442\u0435\u043c\u044b BIOS \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 ThinkPad \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0445 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.lenovo.com/us/en/product_security/LEN-84943#ThinkPad\nhttps://www.cybersecurity-help.cz/vdb/SB2022041313",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-264, CWE-269",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

CVE-2022-1107 (GCVE-0-2022-1107)

Vulnerability from cvelistv5 – Published: 2022-04-22 20:30 – Updated: 2024-08-02 23:55

Summary

During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-20 - Improper Input Validation

Assigner

lenovo mitre root

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Lenovo	ThinkPad BIOS	Affected: various

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:55:24.201Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-84943"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ThinkPad BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-29T14:00:16.000Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-84943"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-84943."
        }
      ],
      "source": {
        "advisory": "LEN-84943",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "ID": "CVE-2022-1107",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "ThinkPad BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "various"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Lenovo"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20 Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-84943",
              "refsource": "MISC",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-84943"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-84943."
          }
        ],
        "source": {
          "advisory": "LEN-84943",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2022-1107",
    "datePublished": "2022-04-22T20:30:50.000Z",
    "dateReserved": "2022-03-27T00:00:00.000Z",
    "dateUpdated": "2024-08-02T23:55:24.201Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2022-02345 (CVE-2022-1107)

CVE-2022-1107 (GCVE-0-2022-1107)

Tags

Sightings

Nomenclature

Related by attack behaviour