Files
vuln-nvd/data/2022/CVE-2022-1107.json
T

2 lines
16 KiB
JSON

{"affected":[{"affectedData":[{"product":"ThinkPad BIOS","vendor":"Lenovo","versions":[{"status":"affected","version":"various"}]}],"source":"psirt@lenovo.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_11e_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"C62AE4D9-03D9-4C46-ABAA-630ADA4C7E93","versionEndExcluding":"n15et78w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_11e:-:*:*:*:*:*:*:*","matchCriteriaId":"247E4294-2547-4A1D-942A-170DA5DDB388","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_helix_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"EABD535C-4802-4046-9C48-360E502182CC","versionEndExcluding":"n17eta8w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_helix:-:*:*:*:*:*:*:*","matchCriteriaId":"9BD5DB5D-4ADF-4AC9-9774-8F36B3F2BDBF","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_l560_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"79500B6C-7820-4D3D-B877-D1DEDF157AE4","versionEndExcluding":"n1het85w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_l560:-:*:*:*:*:*:*:*","matchCriteriaId":"4FDA2BC8-0ABC-41EA-80BF-00B36564F0A1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_l570_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0C758545-4CB9-4C32-88BB-68A328D4E953","versionEndExcluding":"n1xet65w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_l570:-:*:*:*:*:*:*:*","matchCriteriaId":"61CD2E9F-18D9-4D04-BA83-42653424A006","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_p50s_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8D755316-52CC-4B1C-B74F-765CE8DD2909","versionEndExcluding":"n1ket46w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_p50s:-:*:*:*:*:*:*:*","matchCriteriaId":"F583B121-A68C-463B-9D72-06061F74D007","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_p51s_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"D83AB324-9B0D-48AE-8BF7-3B8EB1BE2263","versionEndExcluding":"n1vet50w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*","matchCriteriaId":"A84E6D8C-CB5E-4B50-B364-4E8AB4985A57","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_p52s_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"582A7C14-6E3E-4325-AD88-3651C327DE9E","versionEndExcluding":"n27et36w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:*","matchCriteriaId":"FF0A6498-072B-4541-87E5-379ECC36EC77","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_s540_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4ED0783E-DF3F-4471-A511-7A5FAC2CE3BF","versionEndExcluding":"gpet80ww","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_s540:-:*:*:*:*:*:*:*","matchCriteriaId":"A9A8D286-D464-44C9-9716-2AC73328E9C7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_t550_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F34BE364-9A30-494E-B952-FE37B327DE4D","versionEndExcluding":"n11et50w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:*","matchCriteriaId":"9D79966D-08A3-428F-B4EC-CAAC8F4CF435","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_t560_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"09664C87-5CE2-4137-9B69-A5704F60A808","versionEndExcluding":"n1ket46w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:*","matchCriteriaId":"84478711-E030-42CD-9B8A-0C54C8DB8128","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_t570_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"D5DBA9C5-A462-4193-AC52-1BF3D17A3A7E","versionEndExcluding":"n1vet50w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*","matchCriteriaId":"BEC1A912-C9FA-4D12-97A3-1D53B8209314","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_t580_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9391590D-0F7E-4103-8027-39E96014811B","versionEndExcluding":"n27et36w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:*","matchCriteriaId":"7D90A3FD-A8FA-43E1-AB52-9F4B0960BDC0","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_1_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"93C64E55-CDB6-457A-94F5-94921FC0C650","versionEndExcluding":"n1let86w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_1:-:*:*:*:*:*:*:*","matchCriteriaId":"C6E9591E-5A71-4BBD-9C25-CDDF8DB500F3","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_2_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0EDEB801-9BF8-46E3-82BB-6A696439993D","versionEndExcluding":"n1oet50w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_2:-:*:*:*:*:*:*:*","matchCriteriaId":"61D4520A-47B3-4E2A-9A1D-9738EB8167A6","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_w540_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"04436B75-6E92-4632-BF03-0802B34EDE23","versionEndExcluding":"gnet92ww","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:*","matchCriteriaId":"B72A36A5-900B-4FFD-AF2D-FECD35E15AF5","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_w541_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"CF27E2E8-B2DC-4520-96E4-B7F8C9B33FD4","versionEndExcluding":"gnet92ww","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:*","matchCriteriaId":"86A51FFE-257C-4609-BC14-C0DE0969E7F9","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_w550s_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"C976E2D8-6BCD-44B0-9B55-58A12A9E894F","versionEndExcluding":"n11et50w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:*","matchCriteriaId":"23267973-5F08-43C5-9C92-F429B84D3245","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x1_carbon_3rd_gen_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E3E892D3-95D5-4F3D-87FA-F0415F16FA26","versionEndExcluding":"n14et52w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x1_carbon_3rd_gen:-:*:*:*:*:*:*:*","matchCriteriaId":"86F4EB0E-B4C9-4FC1-987F-8EE359F17172","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x1_carbon_4th_gen_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4452B8F5-79A9-4A16-9DB2-E0DB4DC0DC92","versionEndExcluding":"n1fet70w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x1_carbon_4th_gen:-:*:*:*:*:*:*:*","matchCriteriaId":"490D663D-DAE1-483D-A150-5528A057C142","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_kabylake_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"365AADA5-87BB-4C53-B540-9BFCD1F95470","versionEndExcluding":"n1met55w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_kabylake:-:*:*:*:*:*:*:*","matchCriteriaId":"5766DCDC-2CD2-40C1-B686-B896C8730A55","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_skylake_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"7F13D751-1511-4BFB-9551-BE6786F4578A","versionEndExcluding":"n1met55w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_skylake:-:*:*:*:*:*:*:*","matchCriteriaId":"1DF6298F-C8BF-4DF3-BF08-6394FEC4F436","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"CC700809-DE88-4997-B5E1-4142E3DE0493","versionEndExcluding":"n1fet70w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:*","matchCriteriaId":"45044ABC-76BF-475E-9B12-A77901172E5D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_2_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"39709F9F-5E58-4689-BB4D-06A96E5D4D67","versionEndExcluding":"n1net47w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_2:-:*:*:*:*:*:*:*","matchCriteriaId":"EC29C336-3A92-4A55-8764-0A99CDA9F5F0","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_3_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E5BBC6FC-2696-4308-9714-28F439E8A338","versionEndExcluding":"n25et50w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_3:-:*:*:*:*:*:*:*","matchCriteriaId":"6D9CB267-B2FE-4B2A-BF96-32229FB5B6F7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x250_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5DD98844-9090-4E42-BFC4-BE884E929AC9","versionEndExcluding":"n10et58w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:*","matchCriteriaId":"AEA076E5-D554-4570-B5E3-FE78CEC024B4","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x280_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F50957B2-E528-425E-872A-A0FBB3FBAA8E","versionEndExcluding":"n20et44w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:*","matchCriteriaId":"ABEA1745-32A2-4261-8572-12D1565E3A55","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x390_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"EECB7D25-5EDA-4662-BCCE-ED11F1A94143","versionEndExcluding":"n2let60w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x390:-:*:*:*:*:*:*:*","matchCriteriaId":"A2E05FC7-F957-4FE0-A9F1-E125419B7BFD","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_11e_yoga_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1DE1715E-47E6-4812-86CD-11E86E525516","versionEndExcluding":"n15et78w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_11e_yoga:-:*:*:*:*:*:*:*","matchCriteriaId":"C9F6E6BD-D5BF-47FA-866D-23179362F650","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_yoga_15_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"B1C33C59-F2F9-4134-8C13-103246896E76","versionEndExcluding":"n19et61w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_yoga_15:-:*:*:*:*:*:*:*","matchCriteriaId":"9052750D-3481-46A1-B1C5-EABB56DDD4E0","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_yoga_260_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"89713A33-B49B-489F-891D-4EE40298AA8A","versionEndExcluding":"n1get98w","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_yoga_260:-:*:*:*:*:*:*:*","matchCriteriaId":"051E3938-B988-40E3-B8FB-725886A1EA6E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code."},{"lang":"es","value":"Durante una auditoría de seguridad interna del producto se descubrió una posible vulnerabilidad debida al uso de los servicios de arranque en el manejador SMI SmmOEMInt15 en algunos modelos de ThinkPad que podría ser explotada por un atacante con privilegios elevados que podría permitir la ejecución de código"}],"id":"CVE-2022-1107","lastModified":"2026-06-17T04:21:50.387","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.2,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":3.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":5.9,"source":"psirt@lenovo.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-04-22T21:15:10.300","references":[{"source":"psirt@lenovo.com","tags":["Vendor Advisory"],"url":"https://support.lenovo.com/us/en/product_security/LEN-84943"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.lenovo.com/us/en/product_security/LEN-84943"}],"sourceIdentifier":"psirt@lenovo.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"psirt@lenovo.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"CWE-269"}],"source":"nvd@nist.gov","type":"Primary"}]}