← Database
CVE-2022-4575
MEDIUM
CVSS: 6.7
Published: 2023-10-30
Modified: 2026-06-17
Description
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and elevated privileges the ability to bypass Secure Boot.
Affected Platforms
Lenovo Thinkpad X1 Yoga 1St GenLenovo Thinkpad X260Lenovo Thinkpad X1 Yoga 1St Gen FirmwareLenovo Thinkpad T470S FirmwareLenovo Thinkpad X1 Carbon 4Th Gen FirmwareLenovo Thinkpad 25 FirmwareLenovo Thinkpad P70Lenovo Thinkpad T470Lenovo Thinkpad T560 FirmwareLenovo Thinkpad P70 Firmware