CVE-2022-4573: Input Validation
Published Oct 30, 2023
·Updated
An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected Software
2 affected components
All of the following
Lenovo Thinkpad X1 Fold Gen 1
Lenovo Thinkpad X1 Fold Gen 1 Firmware
Remediation
Information
Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-106014.
Event History
Oct 30, 2023
CVE Published
02:34 PM
Data Sourced
02:34 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-4573?
CVE-2022-4573 is an SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 that could allow an attacker with local access and elevated privileges to execute arbitrary code.
2
What is the severity of CVE-2022-4573?
The severity of CVE-2022-4573 is medium with a CVSS score of 6.7.
3
How can an attacker exploit CVE-2022-4573?
An attacker with local access and elevated privileges can exploit CVE-2022-4573 to execute arbitrary code.
4
How can I fix CVE-2022-4573?
To fix CVE-2022-4573, it is recommended to apply the firmware update provided by Lenovo.
5
Where can I find more information about CVE-2022-4573?
You can find more information about CVE-2022-4573 on the Lenovo support website.