CVE-2022-1107CWE-20

During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad…

Medium · published April 22, 2022

CVSS v3.1
6.7
EPSS
0%
Percentile
18.1
In the wild
Unconfirmed
What it is

During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00269 · 18.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-04-22T20:30Z
EPSS history
Timeline
  • 22 APR 20:30Z
    During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad…
    cvelistv5