CVEvulnerability

CVE-2022-40137

6.7 MEDIUM Published 2023-01-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-01-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120

Description

A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected configurations

• lenovo ideacentre c5-14imb05 firmware o4hkt3aa • lenovo ideacentre e96z firmware m26kt24a • lenovo ideacentre 3 07iab7 firmware m49kt1da • lenovo ideacentre 3-07imb05 firmware m2vkt1fa • lenovo ideacentre 5 14iab7 firmware m42kt40a • lenovo ideacentre 5-14acn6 firmware o5ekt23a • lenovo ideacentre 5-14imb05 firmware o4hkt3aa • lenovo ideacentre 5-14iob6 firmware m3gkt38a • lenovo ideacentre aio 3-22ada6 firmware o5ckt24a • lenovo ideacentre aio 3-22iil5 firmware o56kt22a • lenovo ideacentre aio 3-22itl6 firmware o5akt31a • lenovo ideacentre aio 3-24ada6 firmware o5ckt24a • lenovo ideacentre aio 3-24alc6 firmware o5bkt24a • lenovo ideacentre aio 3-24iil5 firmware o56kt22a • lenovo ideacentre aio 3-24itl6 firmware o5akt31a • lenovo ideacentre aio 3-27alc6 firmware o5bkt24a • lenovo ideacentre aio 3-27itl6 firmware o5akt31a • lenovo ideacentre g5-14imb05 firmware o4hkt3aa • lenovo ideacentre gaming 5 17acn7 firmware o5ekt23a • lenovo ideacentre gaming 5 17iab7 firmware m42kt40a • lenovo ideacentre gaming 5-14acn6 firmware o5ekt23a • lenovo ideacentre gaming 5-14iob6 firmware m3gkt38a • lenovo ideacentre mini 5-01imh05 firmware o4ekt17a • lenovo legion c530-19icb firmware o4bkt21a • lenovo legion t5-26iob6 firmware o54kt20a • lenovo legion t5-28icb05 firmware o4bkt21a • lenovo legion t530-28apr firmware o4gkt17a • lenovo legion t530-28icb firmware o4bkt21a • lenovo legion t7-34imz5 firmware o4lkt1fa • lenovo legion t7-34imz5 firmware o5fkt14a • lenovo ideacentre m60e tiny firmware m3skt21a • lenovo ideacentre m625q firmware m1wkt46a • lenovo ideacentre m630e firmware m28kt39a • lenovo ideacentre m700 tiny firmware fwktbfa • lenovo ideacentre m70a firmware m2skt26a • lenovo ideacentre m70a gen 2 firmware m3nkt21a • lenovo ideacentre m70a gen 3 firmware m4ekt18a • lenovo ideacentre m70c firmware m2vkt1fa • lenovo ideacentre m70q firmware m2wkt55a • lenovo ideacentre m70q gen 2 firmware m3jkt35a • lenovo ideacentre m70q gen 3 firmware m43kt16a • lenovo ideacentre m70s firmware m2tkt50a • lenovo ideacentre m70s gen 3 firmware m41kt2da • lenovo ideacentre m70t firmware m2tkt50a • lenovo ideacentre m70t gen 3 firmware m41kt2da • lenovo ideacentre m710e firmware m1zkt39a • lenovo ideacentre m710q firmware m1akt56a • lenovo ideacentre m710s firmware m16kt69a • lenovo ideacentre m710t firmware m16kt69a • lenovo ideacentre m715q 2nd gen firmware m1xkt58a • lenovo ideacentre m715q firmware m11kt55a • lenovo ideacentre m715s firmware m2ckt4da • lenovo ideacentre m715t firmware m2ckt4da • lenovo ideacentre m720e firmware m30kt27a • lenovo ideacentre m720q firmware m1ukt6ba • lenovo ideacentre m720s firmware m1ukt6ba • lenovo ideacentre m720t firmware m1ukt6ba • lenovo ideacentre m725s firmware m25kt61a • lenovo ideacentre m75n firmware m33kt26a • lenovo ideacentre m75q gen 2 firmware m47kt24a … and 236 more

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References