CVE-2022-1107

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-04-22 · updated 2026-06-17
Weakness: CWE-20

Description

During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.

Affected products

Lenovo Thinkpad 11E Firmware: before n15et78w — fixed in n15et78w
Lenovo Thinkpad 11E Yoga Firmware: before n15et78w — fixed in n15et78w
Lenovo Thinkpad Helix Firmware: before n17eta8w — fixed in n17eta8w
Lenovo Thinkpad L560 Firmware: before n1het85w — fixed in n1het85w
Lenovo Thinkpad L570 Firmware: before n1xet65w — fixed in n1xet65w
Lenovo Thinkpad P50S Firmware: before n1ket46w — fixed in n1ket46w
Lenovo Thinkpad P51S Firmware: before n1vet50w — fixed in n1vet50w
Lenovo Thinkpad P52S Firmware: before n27et36w — fixed in n27et36w
Lenovo Thinkpad S540 Firmware: before gpet80ww — fixed in gpet80ww
Lenovo Thinkpad T550 Firmware: before n11et50w — fixed in n11et50w
Lenovo Thinkpad T560 Firmware: before n1ket46w — fixed in n1ket46w
Lenovo Thinkpad T570 Firmware: before n1vet50w — fixed in n1vet50w
Lenovo Thinkpad T580 Firmware: before n27et36w — fixed in n27et36w
Lenovo Thinkpad W540 Firmware: before gnet92ww — fixed in gnet92ww
Lenovo Thinkpad W541 Firmware: before gnet92ww — fixed in gnet92ww
Lenovo Thinkpad W550S Firmware: before n11et50w — fixed in n11et50w
Lenovo Thinkpad X1 Carbon 3Rd Gen Firmware: before n14et52w — fixed in n14et52w
Lenovo Thinkpad X1 Carbon 4Th Gen Firmware: before n1fet70w — fixed in n1fet70w
Lenovo Thinkpad X1 Carbon 5Th Gen Kabylake Firmware: before n1met55w — fixed in n1met55w
Lenovo Thinkpad X1 Carbon 5Th Gen Skylake Firmware: before n1met55w — fixed in n1met55w
Lenovo Thinkpad X1 Tablet Gen 1 Firmware: before n1let86w — fixed in n1let86w
Lenovo Thinkpad X1 Tablet Gen 2 Firmware: before n1oet50w — fixed in n1oet50w
Lenovo Thinkpad X1 Yoga Firmware: before n1fet70w — fixed in n1fet70w
Lenovo Thinkpad X1 Yoga Gen 2 Firmware: before n1net47w — fixed in n1net47w
Lenovo Thinkpad X1 Yoga Gen 3 Firmware: before n25et50w — fixed in n25et50w
Lenovo Thinkpad X250 Firmware: before n10et58w — fixed in n10et58w
Lenovo Thinkpad X280 Firmware: before n20et44w — fixed in n20et44w
Lenovo Thinkpad X390 Firmware: before n2let60w — fixed in n2let60w
Lenovo Thinkpad Yoga 15 Firmware: before n19et61w — fixed in n19et61w
Lenovo Thinkpad Yoga 260 Firmware: before n1get98w — fixed in n1get98w

How to fix

Upgrade to a fixed version: Lenovo Thinkpad 11E Firmware n15et78w; Lenovo Thinkpad 11E Yoga Firmware n15et78w; Lenovo Thinkpad Helix Firmware n17eta8w; Lenovo Thinkpad L560 Firmware n1het85w; Lenovo Thinkpad L570 Firmware n1xet65w; Lenovo Thinkpad P50S Firmware n1ket46w; Lenovo Thinkpad P51S Firmware n1vet50w; Lenovo Thinkpad P52S Firmware n27et36w; Lenovo Thinkpad S540 Firmware gpet80ww; Lenovo Thinkpad T550 Firmware n11et50w; Lenovo Thinkpad T560 Firmware n1ket46w; Lenovo Thinkpad T570 Firmware n1vet50w. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-1107 or the next vulnerability affects your stack