CVE:CVE-2022-1107
CNNVD:CNNVD-202204-3293
Lenovo ThinkPad是中国联想（Lenovo）公司的一个便携式计算机。
Lenovo ThinkPad BIOS 存在权限许可和访问控制问题漏洞，该漏洞源于在 SmmOEMInt15 SMI 处理程序中使用了引导服务。本地攻击者可以绕过已实施的安全限制并以提升的权限执行任意代码。
solution:Upgrade lenovo thinkpad_11e_firmware to a higher version than n15et78w,and avoid the version (,n15et78w); Upgrade lenovo thinkpad_helix_firmware to a higher version than n17eta8w,and avoid the version (,n17eta8w); Upgrade lenovo thinkpad_l560_firmware to a higher version than n1het85w,and avoid the version (,n1het85w); Upgrade lenovo thinkpad_l570_firmware to a higher version than n1xet65w,and avoid the version (,n1xet65w); Upgrade lenovo thinkpad_p50s_firmware to a higher version than n1ket46w,and avoid the version (,n1ket46w); Upgrade lenovo thinkpad_p51s_firmware to a higher version than n1vet50w,and avoid the version (,n1vet50w); Upgrade lenovo thinkpad_p52s_firmware to a higher version than n27et36w,and avoid the version (,n27et36w); Upgrade lenovo thinkpad_s540_firmware to a higher version than gpet80ww,and avoid the version (,gpet80ww); Upgrade lenovo thinkpad_t550_firmware to a higher version than n11et50w,and avoid the version (,n11et50w); Upgrade lenovo thinkpad_t560_firmware to a higher version than n1ket46w,and avoid the version (,n1ket46w); Upgrade lenovo thinkpad_t570_firmware to a higher version than n1vet50w,and avoid the version (,n1vet50w); Upgrade lenovo thinkpad_t580_firmware to a higher version than n27et36w,and avoid the version (,n27et36w); Upgrade lenovo thinkpad_x1_tablet_gen_1_firmware to a higher version than n1let86w,and avoid the version (,n1let86w); Upgrade lenovo thinkpad_x1_tablet_gen_2_firmware to a higher version than n1oet50w,and avoid the version (,n1oet50w); Upgrade lenovo thinkpad_w540_firmware to a higher version than gnet92ww,and avoid the version (,gnet92ww); Upgrade lenovo thinkpad_w541_firmware to a higher version than gnet92ww,and avoid the version (,gnet92ww); Upgrade lenovo thinkpad_w550s_firmware to a higher version than n11et50w,and avoid the version (,n11et50w); Upgrade lenovo thinkpad_x1_carbon_3rd_gen_firmware to a higher version than n14et52w,and avoid the version (,n14et52w); Upgrade lenovo thinkpad_x1_carbon_4th_gen_firmware to a higher version than n1fet70w,and avoid the version (,n1fet70w); Upgrade lenovo thinkpad_x1_carbon_5th_gen_kabylake_firmware to a higher version than n1met55w,and avoid the version (,n1met55w); Upgrade lenovo thinkpad_x1_carbon_5th_gen_skylake_firmware to a higher version than n1met55w,and avoid the version (,n1met55w); Upgrade lenovo thinkpad_x1_yoga_firmware to a higher version than n1fet70w,and avoid the version (,n1fet70w); Upgrade lenovo thinkpad_x1_yoga_gen_2_firmware to a higher version than n1net47w,and avoid the version (,n1net47w); Upgrade lenovo thinkpad_x1_yoga_gen_3_firmware to a higher version than n25et50w,and avoid the version (,n25et50w); Upgrade lenovo thinkpad_x250_firmware to a higher version than n10et58w,and avoid the version (,n10et58w); Upgrade lenovo thinkpad_x280_firmware to a higher version than n20et44w,and avoid the version (,n20et44w); Upgrade lenovo thinkpad_x390_firmware to a higher version than n2let60w,and avoid the version (,n2let60w); Upgrade lenovo thinkpad_11e_yoga_firmware to a higher version than n15et78w,and avoid the version (,n15et78w); Upgrade lenovo thinkpad_yoga_15_firmware to a higher version than n19et61w,and avoid the version (,n19et61w); Upgrade lenovo thinkpad_yoga_260_firmware to a higher version than n1get98w,and avoid the version (,n1get98w)