← back
CVE-2022-1107mediumCWE-20

CVE-2022-1107

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.7epss 0.3%
exploitation probability
0.3%top 81% of all CVEs
observed exploitation
nono source reports it
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Lenovo · ThinkPad BIOS