medium6.7
CVE-2022-40137
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Impact
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Ideacentre C5-14imb05 Firmware | Version o4hkt3aa |
| Lenovo | Ideacentre E96z Firmware | Version m26kt24a |
| Lenovo | Ideacentre 3 07iab7 Firmware | Version m49kt1da |
| Lenovo | Ideacentre 3-07imb05 Firmware | Version m2vkt1fa |
| Lenovo | Ideacentre 5 14iab7 Firmware | Version m42kt40a |
| Lenovo | Ideacentre 5-14acn6 Firmware | Version o5ekt23a |
| Lenovo | Ideacentre 5-14imb05 Firmware | Version o4hkt3aa |
| Lenovo | Ideacentre 5-14iob6 Firmware | Version m3gkt38a |
| Lenovo | Ideacentre Aio 3-22ada6 Firmware | Version o5ckt24a |
| Lenovo | Ideacentre Aio 3-22iil5 Firmware | Version o56kt22a |
| Lenovo | Ideacentre Aio 3-22itl6 Firmware | Version o5akt31a |
| Lenovo | Ideacentre Aio 3-24ada6 Firmware | Version o5ckt24a |