CVEvulnerability

CVE-2022-40134

4.4 MEDIUM Published 2023-01-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-01-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-125

Description

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Affected configurations

• lenovo ideacentre c5-14imb05 firmware o4hkt38a • lenovo thinkcentre e96z firmware m26kt22a • lenovo ideacentre 3 07iab7 firmware m49kt1da • lenovo ideacentre 3-07imb05 firmware m2vkt1da • lenovo ideacentre 5 14iab7 firmware m42kt40a • lenovo ideacentre 5-14acn6 firmware o5ekt21a • lenovo ideacentre 5-14imb05 firmware o4hkt38a • lenovo ideacentre 5-14iob6 firmware m3gkt33a • lenovo ideacentre creator 5-14iob6 firmware m3gkt33a • lenovo ideacentre g5-14imb05 firmware o4hkt38a • lenovo ideacentre gaming 5 17acn7 firmware o5ekt21a • lenovo ideacentre gaming 5 17iab7 firmware m42kt40a • lenovo ideacentre gaming 5-14acn6 firmware o5ekt21a • lenovo ideacentre gaming 5-14iob6 firmware m3gkt33a • lenovo legion c530-19icb firmware o4bkt20a • lenovo legion t5-26iob6 firmware o54kt1da • lenovo legion t5-28icb05 firmware o4bkt20a • lenovo legion t530-28apr firmware o4gkt16a • lenovo legion t530-28icb firmware o4bkt20a • lenovo legion t7-34imz5 firmware o4lkt1ea • lenovo thinkcentre m60e tiny firmware o5fkt14a • lenovo thinkcentre m625q firmware m3skt21a • lenovo thinkcentre m630e firmware m1wkt45a • lenovo thinkcentre m70a firmware m28kt37a • lenovo thinkcentre m70a gen 2 firmware m2skt25a • lenovo thinkcentre m70c firmware m3nkt20a • lenovo thinkcentre m70q firmware m2vkt1da • lenovo thinkcentre m70q gen 2 firmware m2wkt57a • lenovo thinkcentre m70q gen 3 firmware m3jkt34a • lenovo thinkcentre m70s firmware m43kt16a • lenovo thinkcentre m70s gen 3 firmware m2tkt50a • lenovo thinkcentre m70t firmware m41kt2da • lenovo thinkcentre m70t gen 3 firmware m2tkt50a • lenovo thinkcentre m710e firmware m41kt2da • lenovo thinkcentre m710q firmware m1zkt38a • lenovo thinkcentre m710s firmware m1akt56a • lenovo thinkcentre m710t firmware m16kt68a • lenovo thinkcentre m715q firmware m16kt68a • lenovo thinkcentre m720e firmware m11kt54a • lenovo thinkcentre m75n firmware m30kt26a • lenovo thinkcentre m75q gen 2 firmware m33kt25a • lenovo thinkcentre m75t gen 2 firmware m47kt24a • lenovo thinkcentre m80q firmware m46kt2da • lenovo thinkcentre m80s firmware m2wkt57a • lenovo thinkcentre m80s firmware m2tkt50a • lenovo thinkcentre m80t firmware m2tkt50a • lenovo thinkcentre m80t firmware m1ckt49a • lenovo thinkcentre m810z all-in-one firmware m1ekt25a • lenovo thinkcentre m818z firmware m1nkt58a • lenovo thinkcentre m820z all-in-one firmware m2rkt52a • lenovo thinkcentre m90a firmware m3lkt26a • lenovo thinkcentre m90a gen 2 firmware m3jkt34a • lenovo thinkcentre m90q gen 2 firmware m2wkt57a • lenovo thinkcentre m90q tiny firmware m2tkt50a • lenovo thinkcentre m90s firmware m2tkt50a • lenovo thinkcentre m90t firmware m1akt56a • lenovo thinkcentre m910q firmware m1akt56a • lenovo thinkcentre m910s firmware m1akt56a • lenovo thinkcentre m910t firmware m1akt56a • lenovo thinkcentre m910x firmware m49kt1da … and 277 more

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References