CVE-2022-1107

{"id": "CVE-2022-1107", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}, {"type": "Secondary", "source": "psirt@lenovo.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2022-04-22T21:15:10.300", "references": [{"url": "https://support.lenovo.com/us/en/product_security/LEN-84943", "tags": ["Vendor Advisory"], "source": "psirt@lenovo.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-269"}]}, {"type": "Secondary", "source": "psirt@lenovo.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code."}, {"lang": "es", "value": "Durante una auditor\u00eda de seguridad interna del producto se descubri\u00f3 una posible vulnerabilidad debida al uso de los servicios de arranque en el manejador SMI SmmOEMInt15 en algunos modelos de ThinkPad que podr\u00eda ser explotada por un atacante con privilegios elevados que podr\u00eda permitir la ejecuci\u00f3n de c\u00f3digo"}], "lastModified": "2022-05-12T13:42:48.583", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_11e_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C62AE4D9-03D9-4C46-ABAA-630ADA4C7E93", "versionEndExcluding": "n15et78w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_11e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "247E4294-2547-4A1D-942A-170DA5DDB388"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_helix_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EABD535C-4802-4046-9C48-360E502182CC", "versionEndExcluding": "n17eta8w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_helix:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9BD5DB5D-4ADF-4AC9-9774-8F36B3F2BDBF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_l560_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79500B6C-7820-4D3D-B877-D1DEDF157AE4", "versionEndExcluding": "n1het85w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_l560:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4FDA2BC8-0ABC-41EA-80BF-00B36564F0A1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_l570_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C758545-4CB9-4C32-88BB-68A328D4E953", "versionEndExcluding": "n1xet65w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_l570:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "61CD2E9F-18D9-4D04-BA83-42653424A006"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_p50s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D755316-52CC-4B1C-B74F-765CE8DD2909", "versionEndExcluding": "n1ket46w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_p50s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F583B121-A68C-463B-9D72-06061F74D007"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_p51s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D83AB324-9B0D-48AE-8BF7-3B8EB1BE2263", "versionEndExcluding": "n1vet50w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A84E6D8C-CB5E-4B50-B364-4E8AB4985A57"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_p52s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "582A7C14-6E3E-4325-AD88-3651C327DE9E", "versionEndExcluding": "n27et36w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FF0A6498-072B-4541-87E5-379ECC36EC77"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_s540_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4ED0783E-DF3F-4471-A511-7A5FAC2CE3BF", "versionEndExcluding": "gpet80ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_s540:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A9A8D286-D464-44C9-9716-2AC73328E9C7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_t550_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F34BE364-9A30-494E-B952-FE37B327DE4D", "versionEndExcluding": "n11et50w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9D79966D-08A3-428F-B4EC-CAAC8F4CF435"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_t560_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09664C87-5CE2-4137-9B69-A5704F60A808", "versionEndExcluding": "n1ket46w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "84478711-E030-42CD-9B8A-0C54C8DB8128"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_t570_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5DBA9C5-A462-4193-AC52-1BF3D17A3A7E", "versionEndExcluding": "n1vet50w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BEC1A912-C9FA-4D12-97A3-1D53B8209314"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_t580_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9391590D-0F7E-4103-8027-39E96014811B", "versionEndExcluding": "n27et36w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7D90A3FD-A8FA-43E1-AB52-9F4B0960BDC0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_1_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93C64E55-CDB6-457A-94F5-94921FC0C650", "versionEndExcluding": "n1let86w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_1:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C6E9591E-5A71-4BBD-9C25-CDDF8DB500F3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0EDEB801-9BF8-46E3-82BB-6A696439993D", "versionEndExcluding": "n1oet50w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "61D4520A-47B3-4E2A-9A1D-9738EB8167A6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_w540_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04436B75-6E92-4632-BF03-0802B34EDE23", "versionEndExcluding": "gnet92ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B72A36A5-900B-4FFD-AF2D-FECD35E15AF5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_w541_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF27E2E8-B2DC-4520-96E4-B7F8C9B33FD4", "versionEndExcluding": "gnet92ww"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "86A51FFE-257C-4609-BC14-C0DE0969E7F9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_w550s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C976E2D8-6BCD-44B0-9B55-58A12A9E894F", "versionEndExcluding": "n11et50w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "23267973-5F08-43C5-9C92-F429B84D3245"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_3rd_gen_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3E892D3-95D5-4F3D-87FA-F0415F16FA26", "versionEndExcluding": "n14et52w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_3rd_gen:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "86F4EB0E-B4C9-4FC1-987F-8EE359F17172"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_4th_gen_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4452B8F5-79A9-4A16-9DB2-E0DB4DC0DC92", "versionEndExcluding": "n1fet70w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_4th_gen:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "490D663D-DAE1-483D-A150-5528A057C142"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_kabylake_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "365AADA5-87BB-4C53-B540-9BFCD1F95470", "versionEndExcluding": "n1met55w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_kabylake:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5766DCDC-2CD2-40C1-B686-B896C8730A55"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_skylake_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F13D751-1511-4BFB-9551-BE6786F4578A", "versionEndExcluding": "n1met55w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_skylake:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1DF6298F-C8BF-4DF3-BF08-6394FEC4F436"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC700809-DE88-4997-B5E1-4142E3DE0493", "versionEndExcluding": "n1fet70w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "45044ABC-76BF-475E-9B12-A77901172E5D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_2_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39709F9F-5E58-4689-BB4D-06A96E5D4D67", "versionEndExcluding": "n1net47w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EC29C336-3A92-4A55-8764-0A99CDA9F5F0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_3_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5BBC6FC-2696-4308-9714-28F439E8A338", "versionEndExcluding": "n25et50w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6D9CB267-B2FE-4B2A-BF96-32229FB5B6F7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x250_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5DD98844-9090-4E42-BFC4-BE884E929AC9", "versionEndExcluding": "n10et58w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AEA076E5-D554-4570-B5E3-FE78CEC024B4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x280_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F50957B2-E528-425E-872A-A0FBB3FBAA8E", "versionEndExcluding": "n20et44w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ABEA1745-32A2-4261-8572-12D1565E3A55"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_x390_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EECB7D25-5EDA-4662-BCCE-ED11F1A94143", "versionEndExcluding": "n2let60w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_x390:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2E05FC7-F957-4FE0-A9F1-E125419B7BFD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_11e_yoga_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DE1715E-47E6-4812-86CD-11E86E525516", "versionEndExcluding": "n15et78w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_11e_yoga:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C9F6E6BD-D5BF-47FA-866D-23179362F650"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_yoga_15_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1C33C59-F2F9-4134-8C13-103246896E76", "versionEndExcluding": "n19et61w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_15:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9052750D-3481-46A1-B1C5-EABB56DDD4E0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkpad_yoga_260_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "89713A33-B49B-489F-891D-4EE40298AA8A", "versionEndExcluding": "n1get98w"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_260:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "051E3938-B988-40E3-B8FB-725886A1EA6E"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@lenovo.com"}