Input validation

2023-10-3015:15:00

PRIOn knowledge base

www.prio-n.com

thinkpad

bios

input validation

vulnerability

attacker

execute

arbitrary code

local access

elevated privileges

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.

CPENameOperatorVersion
thinkpad_e14_firmwarelt1.23
thinkpad_e14_gen_2_firmwarelt1.55
thinkpad_e14_gen_4_firmwarelt1.18
thinkpad_e14_gen_4_firmwarelt1.16
thinkpad_e15_firmwarelt1.23
thinkpad_e15_gen_2_firmwarelt1.55
thinkpad_e15_gen_4_firmwarelt1.18
thinkpad_e15_gen_4_firmwarelt1.16
thinkpad_e490_firmwarelt1.34
thinkpad_e490s_firmwarelt1.34

Name	Operator	Version
thinkpad_e14_firmware	lt	1.23
thinkpad_e14_gen_2_firmware	lt	1.55
thinkpad_e14_gen_4_firmware	lt	1.18
thinkpad_e14_gen_4_firmware	lt	1.16
thinkpad_e15_firmware	lt	1.23
thinkpad_e15_gen_2_firmware	lt	1.55
thinkpad_e15_gen_4_firmware	lt	1.18
thinkpad_e15_gen_4_firmware	lt	1.16
thinkpad_e490_firmware	lt	1.34
thinkpad_e490s_firmware	lt	1.34