Lucene search
LenovoCVELIST:CVE-2022-1107HistoryApr 22, 2022 - 8:30 p.m.
CVE-2022-1107
2022-04-2220:30:50
CWE-20
lenovo
www.cve.org
2
internal audit
product security
boot services
smmoemint15
thinkpad
elevated privileges
code execution
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
12.6%
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.
CNA Affected
[
{
"product": "ThinkPad BIOS",
"vendor": "Lenovo",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
]Related
prion
prion
Code injection
2022-04-22 21:15:00
cve
cve
CVE-2022-1107
2022-04-22 21:15:10
nvd
nvd
CVE-2022-1107
2022-04-22 21:15:10
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
12.6%
Related for CVELIST:CVE-2022-1107