Approved changes feed: RSS · Atom

cpe:2.3:h:lenovo:thinkpad_x1_fold_gen_1:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductThinkpad X1 Fold Gen 1 (b48ff100-6848-5a5d-8078-4fe4aca27cf3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4574 not_vulnerable 2026-06-08 05:51:59.819540 Details available
MEDIUM (6.7)
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.  
Published: 2023-10-30T14:36:23.273Z
Updated: 2024-09-09T16:51:57.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4573 not_vulnerable 2026-06-08 05:51:59.791992 Details available
MEDIUM (6.7)
An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileges to execute arbitrary code.
Published: 2023-10-30T14:34:32.525Z
Updated: 2024-09-06T20:41:56.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4573 vulnerable 2026-06-08 05:51:59.790448 Details available
MEDIUM (6.7)
An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileges to execute arbitrary code.
Published: 2023-10-30T14:34:32.525Z
Updated: 2024-09-06T20:41:56.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1108 not_vulnerable 2026-06-08 05:39:12.229405 Details available
MEDIUM (6.7)
A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.
Published: 2022-04-22T20:30:51.000Z
Updated: 2024-08-02T23:55:24.265Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3843 not_vulnerable 2026-06-08 05:33:54.420071 Details available
MEDIUM (6.7)
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Published: 2021-11-12T22:05:56.000Z
Updated: 2024-08-03T17:09:09.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3786 not_vulnerable 2026-06-08 05:33:54.012194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3599 not_vulnerable 2026-06-08 05:33:52.920835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.