medium4.4
CVE-2022-40134
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privilege…
Impact
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Ideacentre C5-14imb05 Firmware | Version o4hkt38a |
| Lenovo | Thinkcentre E96z Firmware | Version m26kt22a |
| Lenovo | Ideacentre 3 07iab7 Firmware | Version m49kt1da |
| Lenovo | Ideacentre 3-07imb05 Firmware | Version m2vkt1da |
| Lenovo | Ideacentre 5 14iab7 Firmware | Version m42kt40a |
| Lenovo | Ideacentre 5-14acn6 Firmware | Version o5ekt21a |
| Lenovo | Ideacentre 5-14imb05 Firmware | Version o4hkt38a |
| Lenovo | Ideacentre 5-14iob6 Firmware | Version m3gkt33a |
| Lenovo | Ideacentre Creator 5-14iob6 Firmware | Version m3gkt33a |
| Lenovo | Ideacentre G5-14imb05 Firmware | Version o4hkt38a |
| Lenovo | Ideacentre Gaming 5 17acn7 Firmware | Version o5ekt21a |
| Lenovo | Ideacentre Gaming 5 17iab7 Firmware | Version m42kt40a |