CVE-2022-40136

published 2023-01-30

CVE-2022-40136: An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and…

medium 4.4 CVSS 3.1

AV L AC L PR H UI N S U C H I N A N

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Affected

148 ranges · showing 25

Vendor	Product	Version range	Fixed in
lenovo	bios	—	—
lenovo	ideacentre_3-07ada05_firmware	< o4fkt29a	o4fkt29a
lenovo	ideacentre_3-07imb05_firmware	< m2vkt1da	m2vkt1da
lenovo	ideacentre_3_07iab7_firmware	< m49kt1da	m49kt1da
lenovo	ideacentre_5-14acn6_firmware	< o5ekt21a	o5ekt21a
lenovo	ideacentre_5-14are05_firmware	< o4zkt29a	o4zkt29a
lenovo	ideacentre_5-14imb05_firmware	< o4hkt38a	o4hkt38a
lenovo	ideacentre_5-14iob6_firmware	< m3gkt33a	m3gkt33a
lenovo	ideacentre_510-15ick_firmware	< o4kkt16a	o4kkt16a
lenovo	ideacentre_510a-15arr_firmware	< o4dkt43a	o4dkt43a
lenovo	ideacentre_510a-15ick_firmware	< o4kkt16a	o4kkt16a
lenovo	ideacentre_510s-07icb_firmware	< m22kt47a	m22kt47a
lenovo	ideacentre_510s-07ick_firmware	< m30kt26a	m30kt26a
lenovo	ideacentre_5_14iab7_firmware	< m42kt40a	m42kt40a
lenovo	ideacentre_720-18apr_firmware	< m25kt61a	m25kt61a
lenovo	ideacentre_a340-22igm_firmware	< o51kt12a	o51kt12a
lenovo	ideacentre_a340-24igm_firmware	< o51kt12a	o51kt12a
lenovo	ideacentre_c5-14imb05_firmware	< o4hkt38a	o4hkt38a
lenovo	ideacentre_creator_5-14iob6_firmware	<= m3gkt33a	—
lenovo	ideacentre_g5-14amr05_firmware	< o4zkt29a	o4zkt29a
lenovo	ideacentre_g5-14imb05_firmware	< o4hkt38a	o4hkt38a
lenovo	ideacentre_gaming_5-14acn6_firmware	< o5ekt21a	o5ekt21a
lenovo	ideacentre_gaming_5-14iob6_firmware	< m3gkt33a	m3gkt33a
lenovo	ideacentre_gaming_5_17acn7_firmware	< o5ekt21a	o5ekt21a
lenovo	ideacentre_gaming_5_17iab7_firmware	< m42kt40a	m42kt40a

CWE-125