medium4.4
CVE-2022-40136
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and…
Impact
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Ideacentre C5-14imb05 Firmware | before o4hkt38a |
| Lenovo | Thinkcentre E96z Firmware | before m26kt22a |
| Lenovo | Ideacentre 3 07iab7 Firmware | before m49kt1da |
| Lenovo | Ideacentre 3-07imb05 Firmware | before m2vkt1da |
| Lenovo | Ideacentre 5 14iab7 Firmware | before m42kt40a |
| Lenovo | Ideacentre 5-14acn6 Firmware | before o5ekt21a |
| Lenovo | Ideacentre 5-14imb05 Firmware | before o4hkt38a |
| Lenovo | Ideacentre 5-14iob6 Firmware | before m3gkt33a |
| Lenovo | Ideacentre Creator 5-14iob6 Firmware | through m3gkt33a |
| Lenovo | Ideacentre G5-14imb05 Firmware | before o4hkt38a |
| Lenovo | Ideacentre Gaming 5 17acn7 Firmware | before o5ekt21a |
| Lenovo | Ideacentre Gaming 5 17iab7 Firmware | before m42kt40a |