MEDIUM🇵🇱 Wersja polska

CVE-2022-40136

CVSS 4.4v3.1pub. 2023-01-30upd. 2024-11-21

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

  • Lenovo Ideacentre 3 07iab7

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 3 07iab7 Firmware

    OS
    Lenovo
    < m49kt1da

  • Lenovo Ideacentre 3 07imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 3 07imb05 Firmware

    OS
    Lenovo
    < m2vkt1da

  • Lenovo Ideacentre 5 14acn6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14acn6 Firmware

    OS
    Lenovo
    < o5ekt21a

  • Lenovo Ideacentre 5 14iab7

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14iab7 Firmware

    OS
    Lenovo
    < m42kt40a

  • Lenovo Ideacentre 5 14imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14imb05 Firmware

    OS
    Lenovo
    < o4hkt38a

  • Lenovo Ideacentre 5 14iob6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14iob6 Firmware

    OS
    Lenovo
    < m3gkt33a

  • Lenovo Ideacentre C5 14imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre C5 14imb05 Firmware

    OS
    Lenovo
    < o4hkt38a

  • Lenovo Ideacentre Creator 5 14iob6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Creator 5 14iob6 Firmware

    OS
    Lenovo
    ≤ m3gkt33a

  • Lenovo Ideacentre G5 14imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre G5 14imb05 Firmware

    OS
    Lenovo
    < o4hkt38a

  • Lenovo Ideacentre Gaming 5 14acn6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Gaming 5 14acn6 Firmware

    OS
    Lenovo
    < o5ekt21a

  • Lenovo Ideacentre Gaming 5 14iob6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Gaming 5 14iob6 Firmware

    OS
    Lenovo
    < m3gkt33a

  • Lenovo Ideacentre Gaming 5 17acn7

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Gaming 5 17acn7 Firmware

    OS
    Lenovo
    < o5ekt21a

  • Lenovo Ideacentre Gaming 5 17iab7

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Gaming 5 17iab7 Firmware

    OS
    Lenovo
    < m42kt40a

  • Lenovo Legion C530 19icb

    HW
    Lenovo
    all versions

  • Lenovo Legion C530 19icb Firmware

    OS
    Lenovo
    < o4bkt20a

  • Lenovo Legion T5 26iob6

    HW
    Lenovo
    all versions

  • Lenovo Legion T5 26iob6 Firmware

    OS
    Lenovo
    < o54kt1da
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-6188CRITICAL9.8PL ✓same product

Lenovo ThinkPad — niesprawny mechanizm wykrywania naruszenia BIOS

CVE-2019-19705HIGH7.8same product

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before ...

CVE-2017-3771HIGH7.5same product

System boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because systems were s...

CVE-2023-43567MEDIUM6.7same product

A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may al...

CVE-2023-43568MEDIUM4.4same product

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may a...