Code injection

2022-04-2221:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.

CPENameOperatorVersion
thinkpad_11e_firmwareeq< n15et78w
thinkpad_11e_yoga_firmwareeq< n15et78w
thinkpad_helix_firmwareeq< n17eta8w
thinkpad_l560_firmwareeq< n1het85w
thinkpad_l570_firmwareeq< n1xet65w
thinkpad_p50s_firmwareeq< n1ket46w
thinkpad_p51s_firmwareeq< n1vet50w
thinkpad_p52s_firmwareeq< n27et36w
thinkpad_s540_firmwareeq< gpet80ww
thinkpad_t550_firmwareeq< n11et50w

Name	Operator	Version
thinkpad_11e_firmware	eq	< n15et78w
thinkpad_11e_yoga_firmware	eq	< n15et78w
thinkpad_helix_firmware	eq	< n17eta8w
thinkpad_l560_firmware	eq	< n1het85w
thinkpad_l570_firmware	eq	< n1xet65w
thinkpad_p50s_firmware	eq	< n1ket46w
thinkpad_p51s_firmware	eq	< n1vet50w
thinkpad_p52s_firmware	eq	< n27et36w
thinkpad_s540_firmware	eq	< gpet80ww
thinkpad_t550_firmware	eq	< n11et50w