← Database
CVE-2022-1107
MEDIUM
CVSS: 6.7
Published: 2022-04-22
Modified: 2026-06-17
Description
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.
Affected Platforms
Lenovo Thinkpad 11E Yoga FirmwareLenovo Thinkpad W540Lenovo Thinkpad X1 Yoga Gen 2 FirmwareLenovo Thinkpad X1 Yoga FirmwareLenovo Thinkpad L570 FirmwareLenovo Thinkpad X1 Carbon 4Th Gen FirmwareLenovo Thinkpad X1 Carbon 5Th Gen SkylakeLenovo Thinkpad W540 FirmwareLenovo Thinkpad T580Lenovo Thinkpad X1 Yoga Gen 3
Weakness Type
CWE-20, CWE-20, CWE-269