CVE-2022-4573: Lenovo Thinkpad x1 Fold Gen 1 Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected products

• Lenovo Thinkpad x1 Fold Gen 1 Firmware: affected versions not specified

Published 2023-10-30. Last modified 2026-06-17.