2 lines
7.7 KiB
JSON
2 lines
7.7 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"ThinkPad BIOS","vendor":"Lenovo","versions":[{"status":"affected","version":"various"}]}],"source":"psirt@lenovo.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_25_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"69482281-C769-4A54-82F9-DDE21352E863","versionEndExcluding":"1.73","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_25:-:*:*:*:*:*:*:*","matchCriteriaId":"1EE4830F-2C86-4DF0-8E37-D2894B4518FF","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_l560_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4362D746-DD0C-470F-B5A9-467F1D7452E1","versionEndExcluding":"1.62","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_l560:-:*:*:*:*:*:*:*","matchCriteriaId":"4FDA2BC8-0ABC-41EA-80BF-00B36564F0A1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_p50_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"604DD8CD-0171-4E37-96A0-57BD476B3236","versionEndExcluding":"1.71","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_p50:-:*:*:*:*:*:*:*","matchCriteriaId":"2A146DB0-4E3D-491B-8D30-EBF0F3BC17B2","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_p50s_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"60B73D7B-F3B4-4538-9948-C6CD77B285C0","versionEndExcluding":"1.45","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_p50s:-:*:*:*:*:*:*:*","matchCriteriaId":"F583B121-A68C-463B-9D72-06061F74D007","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_p70_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"BB0F8FB2-BE50-4BCD-B6DE-ECFEA827131E","versionEndExcluding":"2.45","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_p70:-:*:*:*:*:*:*:*","matchCriteriaId":"A1669BD8-C96F-4302-8E80-53D90EA719CA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_t470_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3E67930D-A5AB-4A3B-856B-24C1318E4ACF","versionEndExcluding":"1.73","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:*","matchCriteriaId":"6515A024-F5A8-494F-BCB6-0DD2D1CA4EA7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_t470s_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"3E151912-165B-4319-9F6B-E1C556E3854A","versionEndExcluding":"1.49","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_t470s:-:*:*:*:*:*:*:*","matchCriteriaId":"A93959B3-4DE0-4AD3-8242-BF0BB45FABF4","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_t560_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4C5103D6-9E75-4DC4-8313-E2B661250835","versionEndExcluding":"1.45","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:*","matchCriteriaId":"84478711-E030-42CD-9B8A-0C54C8DB8128","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x1_carbon_4th_gen_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"118EC48B-FA03-4988-AD83-E38464B342D4","versionEndExcluding":"1.56","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x1_carbon_4th_gen:-:*:*:*:*:*:*:*","matchCriteriaId":"490D663D-DAE1-483D-A150-5528A057C142","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x1_yoga_1st_gen_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"9E586511-8E9D-45AF-904A-115732553505","versionEndExcluding":"1.56","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x1_yoga_1st_gen:-:*:*:*:*:*:*:*","matchCriteriaId":"B1D38511-2973-452B-9DCC-A45945ACFF28","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x260_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0314AA8D-65E0-400F-914E-BF458B5F864B","versionEndExcluding":"1.50","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x260:-:*:*:*:*:*:*:*","matchCriteriaId":"08393A13-D68E-4042-B223-EF80E581EEBC","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_x270_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"4DCB9081-2919-4B4F-89DF-06EBF1B9CB09","versionEndExcluding":"1.47","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_x270:-:*:*:*:*:*:*:*","matchCriteriaId":"94532BBF-D9CF-4164-BACA-AFEA8C35806C","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:thinkpad_yoga_260_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"6391D505-92DF-4511-8A43-5117F6D42D69","versionEndExcluding":"1.88","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:thinkpad_yoga_260:-:*:*:*:*:*:*:*","matchCriteriaId":"051E3938-B988-40E3-B8FB-725886A1EA6E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"\nA vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and elevated privileges the ability to bypass Secure Boot.\n\n"},{"lang":"es","value":"Se informó una vulnerabilidad debido a una protección de escritura inadecuada de las variables UEFI en el BIOS de algunos modelos ThinkPad que podría permitir a un atacante con acceso físico o local y privilegios elevados la capacidad de evitar el Arranque Seguro."}],"id":"CVE-2022-4575","lastModified":"2026-06-17T05:21:14.910","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":5.9,"source":"psirt@lenovo.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2023-10-30T15:15:40.493","references":[{"source":"psirt@lenovo.com","tags":["Vendor Advisory"],"url":"https://support.lenovo.com/us/en/product_security/LEN-106014"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.lenovo.com/us/en/product_security/LEN-106014"}],"sourceIdentifier":"psirt@lenovo.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-276"}],"source":"psirt@lenovo.com","type":"Secondary"}]}
|