Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-1107 Details

Description

During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.7 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:6.7 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.lenovo.com/us/en/product_security/LEN-84943	CVE	Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-84943	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-20	Improper Input Validation	[email protected]
CWE-269	Improper Privilege Management	[email protected]
CWE-20	Improper Input Validation	[email protected]

Affected Products

Product	Versions
lenovo thinkpad 11e firmware	< n15et78w
CPE cpe:2.3:o:lenovo:thinkpad_11e_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad 11e	All versions
CPE cpe:2.3:h:lenovo:thinkpad_11e:-:::::::* Remediation No remediation found in references.
lenovo thinkpad helix firmware	< n17eta8w
CPE cpe:2.3:o:lenovo:thinkpad_helix_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad helix	All versions
CPE cpe:2.3:h:lenovo:thinkpad_helix:-:::::::* Remediation No remediation found in references.
lenovo thinkpad l560 firmware	< n1het85w
CPE cpe:2.3:o:lenovo:thinkpad_l560_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad l560	All versions
CPE cpe:2.3:h:lenovo:thinkpad_l560:-:::::::* Remediation No remediation found in references.
lenovo thinkpad l570 firmware	< n1xet65w
CPE cpe:2.3:o:lenovo:thinkpad_l570_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad l570	All versions
CPE cpe:2.3:h:lenovo:thinkpad_l570:-:::::::* Remediation No remediation found in references.
lenovo thinkpad p50s firmware	< n1ket46w
CPE cpe:2.3:o:lenovo:thinkpad_p50s_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad p50s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_p50s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad p51s firmware	< n1vet50w
CPE cpe:2.3:o:lenovo:thinkpad_p51s_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad p51s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_p51s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad p52s firmware	< n27et36w
CPE cpe:2.3:o:lenovo:thinkpad_p52s_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad p52s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_p52s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad s540 firmware	< gpet80ww
CPE cpe:2.3:o:lenovo:thinkpad_s540_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad s540	All versions
CPE cpe:2.3:h:lenovo:thinkpad_s540:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t550 firmware	< n11et50w
CPE cpe:2.3:o:lenovo:thinkpad_t550_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad t550	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t550:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t560 firmware	< n1ket46w
CPE cpe:2.3:o:lenovo:thinkpad_t560_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad t560	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t560:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t570 firmware	< n1vet50w
CPE cpe:2.3:o:lenovo:thinkpad_t570_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad t570	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t570:-:::::::* Remediation No remediation found in references.
lenovo thinkpad t580 firmware	< n27et36w
CPE cpe:2.3:o:lenovo:thinkpad_t580_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad t580	All versions
CPE cpe:2.3:h:lenovo:thinkpad_t580:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 tablet gen 1 firmware	< n1let86w
CPE cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_1_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 tablet gen 1	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_1:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 tablet gen 2 firmware	< n1oet50w
CPE cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_2_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 tablet gen 2	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_2:-:::::::* Remediation No remediation found in references.
lenovo thinkpad w540 firmware	< gnet92ww
CPE cpe:2.3:o:lenovo:thinkpad_w540_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad w540	All versions
CPE cpe:2.3:h:lenovo:thinkpad_w540:-:::::::* Remediation No remediation found in references.
lenovo thinkpad w541 firmware	< gnet92ww
CPE cpe:2.3:o:lenovo:thinkpad_w541_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad w541	All versions
CPE cpe:2.3:h:lenovo:thinkpad_w541:-:::::::* Remediation No remediation found in references.
lenovo thinkpad w550s firmware	< n11et50w
CPE cpe:2.3:o:lenovo:thinkpad_w550s_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad w550s	All versions
CPE cpe:2.3:h:lenovo:thinkpad_w550s:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 carbon 3rd gen firmware	< n14et52w
CPE cpe:2.3:o:lenovo:thinkpad_x1_carbon_3rd_gen_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 carbon 3rd gen	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_carbon_3rd_gen:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 carbon 4th gen firmware	< n1fet70w
CPE cpe:2.3:o:lenovo:thinkpad_x1_carbon_4th_gen_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 carbon 4th gen	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_carbon_4th_gen:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 carbon 5th gen kabylake firmware	< n1met55w
CPE cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_kabylake_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 carbon 5th gen kabylake	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_kabylake:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 carbon 5th gen skylake firmware	< n1met55w
CPE cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_skylake_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 carbon 5th gen skylake	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_skylake:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 yoga firmware	< n1fet70w
CPE cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 yoga	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 yoga gen 2 firmware	< n1net47w
CPE cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_2_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 yoga gen 2	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_2:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x1 yoga gen 3 firmware	< n25et50w
CPE cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_3_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x1 yoga gen 3	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_3:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x250 firmware	< n10et58w
CPE cpe:2.3:o:lenovo:thinkpad_x250_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x250	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x250:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x280 firmware	< n20et44w
CPE cpe:2.3:o:lenovo:thinkpad_x280_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x280	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x280:-:::::::* Remediation No remediation found in references.
lenovo thinkpad x390 firmware	< n2let60w
CPE cpe:2.3:o:lenovo:thinkpad_x390_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad x390	All versions
CPE cpe:2.3:h:lenovo:thinkpad_x390:-:::::::* Remediation No remediation found in references.
lenovo thinkpad 11e yoga firmware	< n15et78w
CPE cpe:2.3:o:lenovo:thinkpad_11e_yoga_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad 11e yoga	All versions
CPE cpe:2.3:h:lenovo:thinkpad_11e_yoga:-:::::::* Remediation No remediation found in references.
lenovo thinkpad yoga 15 firmware	< n19et61w
CPE cpe:2.3:o:lenovo:thinkpad_yoga_15_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad yoga 15	All versions
CPE cpe:2.3:h:lenovo:thinkpad_yoga_15:-:::::::* Remediation No remediation found in references.
lenovo thinkpad yoga 260 firmware	< n1get98w
CPE cpe:2.3:o:lenovo:thinkpad_yoga_260_firmware:::::::: Remediation No remediation found in references.
lenovo thinkpad yoga 260	All versions
CPE cpe:2.3:h:lenovo:thinkpad_yoga_260:-:::::::* Remediation No remediation found in references.

Change History

7 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
May 12, 2022	Reanalysis	[email protected]
May 5, 2022	Initial Analysis	[email protected]
Apr 29, 2022	CVE Modified	[email protected]
Apr 29, 2022	CVE Modified	[email protected]

CVE-2022-1107 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation