CVE-2022-4569: Lenovo Thinkpad Hybrid USB-C With USB-A Dock Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation.

Affected products

• Lenovo Thinkpad Hybrid USB-C With USB-A Dock Firmware: before 1.0.35_v2 (fixed in 1.0.35_v2)

Published 2023-06-05. Last modified 2026-06-17.