Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2022-40136: An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

CVE-2022-40136 · published 3 years ago

Summary

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

What to do

Update lenovo ideacentre_c5-14imb05_firmware to version o4hkt38a or later.
Update lenovo thinkcentre_e96z_firmware to version m26kt22a or later.
Update lenovo ideacentre_3_07iab7_firmware to version m49kt1da or later.
Update lenovo ideacentre_3-07imb05_firmware to version m2vkt1da or later.
Update lenovo ideacentre_5_14iab7_firmware to version m42kt40a or later.
Update lenovo ideacentre_5-14acn6_firmware to version o5ekt21a or later.
Update lenovo ideacentre_5-14imb05_firmware to version o4hkt38a or later.
Update lenovo ideacentre_5-14iob6_firmware to version m3gkt33a or later.
Update lenovo ideacentre_g5-14imb05_firmware to version o4hkt38a or later.
Update lenovo ideacentre_gaming_5_17acn7_firmware to version o5ekt21a or later.
Update lenovo ideacentre_gaming_5_17iab7_firmware to version m42kt40a or later.
Update lenovo ideacentre_gaming_5-14acn6_firmware to version o5ekt21a or later.
Update lenovo ideacentre_gaming_5-14iob6_firmware to version m3gkt33a or later.
Update lenovo legion_c530-19icb_firmware to version o4bkt20a or later.
Update lenovo legion_t5-26iob6_firmware to version o54kt1da or later.
Update lenovo legion_t5-28icb05_firmware to version o4bkt20a or later.
Update lenovo legion_t530-28apr_firmware to version o4gkt16a or later.
Update lenovo legion_t530-28icb_firmware to version o4bkt20a or later.
Update lenovo legion_t7-34imz5_firmware to version o4lkt1ea or later.
Update lenovo thinkcentre_m70q_gen_2_firmware to version m2wkt57a or later.
Update lenovo thinkcentre_m710t_firmware to version m16kt68a or later.
Update lenovo thinkcentre_m60e_tiny_firmware to version m3skt21a or later.
Update lenovo thinkcentre_m625q_firmware to version m1wkt45a or later.
Update lenovo thinkcentre_m630e_firmware to version m28kt37a or later.
Update lenovo thinkcentre_m70a_firmware to version m2skt25a or later.
Update lenovo thinkcentre_m70a_gen_2_firmware to version m3nkt20a or later.
Update lenovo thinkcentre_m70c_firmware to version m2vkt1da or later.
Update lenovo thinkcentre_m70q_firmware to version m2wkt57a or later.
Update lenovo thinkcentre_m70q_gen_3_firmware to version m43kt16a or later.
Update lenovo thinkcentre_m70s_gen_3_firmware to version m41kt2da or later.
Update lenovo thinkcentre_m70t_gen_3_firmware to version m41kt2da or later.
Update lenovo thinkcentre_m710e_firmware to version m1zkt38a or later.
Update lenovo thinkcentre_m710q_firmware to version m1akt56a or later.
Update lenovo thinkcentre_m710s_firmware to version m16kt68a or later.
Update lenovo thinkcentre_m715q_firmware to version m11kt54a or later.
Update lenovo thinkcentre_m715t_firmware to version m2ckt4da or later.
Update lenovo thinkcentre_m720e_firmware to version m30kt26a or later.
Update lenovo thinkcentre_m720q_firmware to version m1ukt67a or later.
Update lenovo thinkcentre_m720s_firmware to version m1ukt67a or later.
Update lenovo thinkcentre_m720t_firmware to version m1ukt67a or later.
Update lenovo thinkcentre_m725s_firmware to version m25kt61a or later.
Update lenovo thinkcentre_m75n_firmware to version m33kt25a or later.
Update lenovo thinkcentre_m75q_gen_2_firmware to version m47kt24a or later.
Update lenovo thinkcentre_m75q-1_firmware to version m2fkt2da or later.
Update lenovo thinkcentre_m75s_gen_2_firmware to version m46kt2da or later.
Update lenovo thinkcentre_m75s-1_firmware to version m2ckt4da or later.
Update lenovo thinkcentre_m75t_gen_2_firmware to version m46kt2da or later.
Update lenovo thinkcentre_m80q_firmware to version m2wkt57a or later.
Update lenovo thinkcentre_m810z_firmware to version m1ckt49a or later.
Update lenovo thinkcentre_m818z_firmware to version m1ekt25a or later.
Update lenovo thinkcentre_m820z_firmware to version m1nkt58a or later.
Update lenovo thinkcentre_m90a_firmware to version m2rkt52a or later.
Update lenovo thinkcentre_m90a_gen2_firmware to version m3lkt26a or later.
Update lenovo thinkcentre_m90q_gen_2_firmware to version m3jkt34a or later.
Update lenovo thinkcentre_m90q_tiny_firmware to version m2wkt57a or later.
Update lenovo thinkcentre_m910q_firmware to version m1akt56a or later.
Update lenovo thinkcentre_m910s_firmware to version m1akt56a or later.
Update lenovo thinkcentre_m910t_firmware to version m1akt56a or later.
Update lenovo thinkcentre_m910x_firmware to version m1akt56a or later.
Update lenovo thinkcentre_m920q_firmware to version m1ukt67a or later.
Update lenovo thinkcentre_m920s_firmware to version m1ukt67a or later.
Update lenovo thinkcentre_m920t_firmware to version m1ukt67a or later.
Update lenovo thinkcentre_m920x_firmware to version m1ukt67a or later.
Update lenovo thinkcentre_neo_50s_gen_3_firmware to version m49kt1da or later.
Update lenovo thinkcentre_neo_50t_gen_3_firmware to version m42kt40a or later.
Update lenovo qitian_a815_firmware to version m1rkt38a or later.
Update lenovo qt_m410_firmware to version m16kt68a or later.
Update lenovo qt_b415_firmware to version m16kt68a or later.
Update lenovo qt_m415_firmware to version m16kt68a or later.
Update lenovo ideacentre_t540-15ama_g_firmware to version m2ckt4da or later.
Update lenovo ideacentre_t540-15ick_firmware to version o4kkt16a or later.
Update lenovo thinkcentre_e75_t\/s_firmware to version m16kt68a or later.
Update lenovo thinkcentre_m610_firmware to version m1akt56a or later.
Update lenovo thinkcentre_m6600q_firmware to version fwktbaa or later.
Update lenovo thinkcentre_m6600t_firmware to version fwktbaa or later.
Update lenovo thinkcentre_m6600s_firmware to version fwktbaa or later.
Update lenovo ideacentre_3-07ada05_firmware to version o4fkt29a or later.
Update lenovo ideacentre_5-14are05_firmware to version o4zkt29a or later.
Update lenovo ideacentre_g5-14amr05_firmware to version o4zkt29a or later.
Update lenovo thinkcentre_m90s_firmware to version m2tkt50a or later.
Update lenovo thinkcentre_m900x_firmware to version fwktbfa or later.
Update lenovo thinkcentre_m900_firmware to version fwktbfa or later.
Update lenovo thinkcentre_m80t_firmware to version m2tkt50a or later.
Update lenovo thinkcentre_m80s_firmware to version m2tkt50a or later.
Update lenovo thinkcentre_m800_firmware to version fwktbfa or later.
Update lenovo thinkcentre_m70t_firmware to version m2tkt50a or later.
Update lenovo thinkcentre_m70s_firmware to version m2tkt50a or later.
Update lenovo ideacentre_510-15ick_firmware to version o4kkt16a or later.
Update lenovo ideacentre_510a-15arr_firmware to version o4dkt43a or later.
Update lenovo ideacentre_510a-15ick_firmware to version o4kkt16a or later.
Update lenovo ideacentre_510s-07icb_firmware to version m22kt47a or later.
Update lenovo ideacentre_510s-07ick_firmware to version m30kt26a or later.
Update lenovo ideacentre_720-18apr_firmware to version m25kt61a or later.
Update lenovo ideacentre_a340-22igm_firmware to version o51kt12a or later.
Update lenovo ideacentre_a340-24igm_firmware to version o51kt12a or later.
Update lenovo v30a-22iml_firmware to version m37kt28a or later.
Update lenovo v30a-24iml_firmware to version m37kt28a or later.
Update lenovo v330-20icb_firmware to version m1qkt47a or later.
Update lenovo v35s-07ada_firmware to version o4fkt29a or later.
Update lenovo v50a-22imb_firmware to version m36kt28a or later.
Update lenovo v50a-24imb_firmware to version m36kt28a or later.
Update lenovo v50s-07imb_firmware to version m2vkt1da or later.
Update lenovo v50t-13imb_firmware to version o4hkt38a or later.
Update lenovo v50t-13iob_g2_firmware to version m3gkt33a or later.
Update lenovo v520_firmware to version m16kt68a or later.
Update lenovo v520s_firmware to version m16kt68a or later.
Update lenovo v530-15arr_firmware to version o4dkt43a or later.
Update lenovo v530-15icb_firmware to version m1ykt70a or later.
Update lenovo v530-15icr_firmware to version m2ykt31a or later.
Update lenovo v530-22icb_firmware to version m20kt52a or later.
Update lenovo v530-24icb_firmware to version m20kt52a or later.
Update lenovo v530s-07icb_firmware to version m22kt48a or later.
Update lenovo v530s-07icr_firmware to version m30kt26a or later.
Update lenovo v540-24iwl_firmware to version m29kt39a or later.
Update lenovo v55t_gen_2_13acn_firmware to version o5jkt20a or later.
Update lenovo v55t-15api_firmware to version o4dkt43a or later.
Update lenovo v55t-15are_firmware to version o4dkt43a or later.
Update lenovo yangtian_afq150_firmware to version fwktbaa or later.
Update lenovo yta8900f_firmware to version fwktbaa or later.
Update lenovo yoga_a940-27icb_firmware to version o43kt43a or later.
Update lenovo thinkedge_se30_firmware to version m3fkt29a or later.
Update lenovo thinksmart_hub_teams_firmware to version m2xkt20a or later.
Update lenovo thinksmart_hub_zoom_firmware to version m2xkt20a or later.
Update lenovo thinkstation_p310_firmware to version fwktbaa or later.
Update lenovo thinkstation_p320_tiny_firmware to version m1akt56a or later.
Update lenovo thinkstation_p330_tiny_firmware to version m1ukt67a or later.
Update lenovo thinkstation_p340_tiny_firmware to version m2wkt57a or later.
Update lenovo thinkstation_p340_firmware to version s08kt50a or later.
Update lenovo thinkstation_p348_firmware to version m3kkt34a or later.
Update lenovo thinkstation_p350_tiny_firmware to version m3jkt34a or later.
Update lenovo thinkstation_p520_firmware to version s03kt55a or later.
Update lenovo thinkstation_p520c_firmware to version s03kt55a or later.
Update lenovo thinkstation_p620_firmware to version s07kt25a or later.
Update lenovo stadia_ggp-120_firmware to version s03kt55a or later.
Update lenovo thinkstation_p318_firmware to version m1akt56a or later.
Update lenovo thinkstation_p920_firmware to version s05kt62a or later.
Update lenovo thinkstation_p720_firmware to version s05kt62a or later.
Update lenovo thinkstation_p320_firmware to version s06kt59a or later.
Update lenovo thinksystem_st50_firmware to version ite123e or later.
Update lenovo thinksystem_st58_firmware to version ite123e or later.

Affected software

Vendor	Product	Affected versions
lenovo	ideacentre_c5-14imb05_firmware	< o4hkt38a `cpe:2.3:o:lenovo:ideacentre_c5-14imb05_firmware::::::::`
lenovo	thinkcentre_e96z_firmware	< m26kt22a `cpe:2.3:o:lenovo:thinkcentre_e96z_firmware::::::::`
lenovo	ideacentre_3_07iab7_firmware	< m49kt1da `cpe:2.3:o:lenovo:ideacentre_3_07iab7_firmware::::::::`
lenovo	ideacentre_3-07imb05_firmware	< m2vkt1da `cpe:2.3:o:lenovo:ideacentre_3-07imb05_firmware::::::::`
lenovo	ideacentre_5_14iab7_firmware	< m42kt40a `cpe:2.3:o:lenovo:ideacentre_5_14iab7_firmware::::::::`
lenovo	ideacentre_5-14acn6_firmware	< o5ekt21a `cpe:2.3:o:lenovo:ideacentre_5-14acn6_firmware::::::::`
lenovo	ideacentre_5-14imb05_firmware	< o4hkt38a `cpe:2.3:o:lenovo:ideacentre_5-14imb05_firmware::::::::`
lenovo	ideacentre_5-14iob6_firmware	< m3gkt33a `cpe:2.3:o:lenovo:ideacentre_5-14iob6_firmware::::::::`
lenovo	ideacentre_creator_5-14iob6_firmware	<= m3gkt33a `cpe:2.3:o:lenovo:ideacentre_creator_5-14iob6_firmware::::::::`
lenovo	ideacentre_g5-14imb05_firmware	< o4hkt38a `cpe:2.3:o:lenovo:ideacentre_g5-14imb05_firmware::::::::`
lenovo	ideacentre_gaming_5_17acn7_firmware	< o5ekt21a `cpe:2.3:o:lenovo:ideacentre_gaming_5_17acn7_firmware::::::::`
lenovo	ideacentre_gaming_5_17iab7_firmware	< m42kt40a `cpe:2.3:o:lenovo:ideacentre_gaming_5_17iab7_firmware::::::::`
lenovo	ideacentre_gaming_5-14acn6_firmware	< o5ekt21a `cpe:2.3:o:lenovo:ideacentre_gaming_5-14acn6_firmware::::::::`
lenovo	ideacentre_gaming_5-14iob6_firmware	< m3gkt33a `cpe:2.3:o:lenovo:ideacentre_gaming_5-14iob6_firmware::::::::`
lenovo	legion_c530-19icb_firmware	< o4bkt20a `cpe:2.3:o:lenovo:legion_c530-19icb_firmware::::::::`
lenovo	legion_t5-26iob6_firmware	< o54kt1da `cpe:2.3:o:lenovo:legion_t5-26iob6_firmware::::::::`
lenovo	legion_t5-28icb05_firmware	< o4bkt20a `cpe:2.3:o:lenovo:legion_t5-28icb05_firmware::::::::`
lenovo	legion_t530-28apr_firmware	< o4gkt16a `cpe:2.3:o:lenovo:legion_t530-28apr_firmware::::::::`
lenovo	legion_t530-28icb_firmware	< o4bkt20a `cpe:2.3:o:lenovo:legion_t530-28icb_firmware::::::::`
lenovo	legion_t7-34imz5_firmware	< o4lkt1ea `cpe:2.3:o:lenovo:legion_t7-34imz5_firmware::::::::`
lenovo	thinkcentre_m70q_gen_2_firmware	< m2wkt57a `cpe:2.3:o:lenovo:thinkcentre_m70q_gen_2_firmware::::::::`
lenovo	thinkcentre_m710t_firmware	< m16kt68a `cpe:2.3:o:lenovo:thinkcentre_m710t_firmware::::::::`
lenovo	thinkcentre_m60e_tiny_firmware	< m3skt21a `cpe:2.3:o:lenovo:thinkcentre_m60e_tiny_firmware::::::::`
lenovo	thinkcentre_m625q_firmware	< m1wkt45a `cpe:2.3:o:lenovo:thinkcentre_m625q_firmware::::::::`
lenovo	thinkcentre_m630e_firmware	< m28kt37a `cpe:2.3:o:lenovo:thinkcentre_m630e_firmware::::::::`
lenovo	thinkcentre_m70a_firmware	< m2skt25a `cpe:2.3:o:lenovo:thinkcentre_m70a_firmware::::::::`
lenovo	thinkcentre_m70a_gen_2_firmware	< m3nkt20a `cpe:2.3:o:lenovo:thinkcentre_m70a_gen_2_firmware::::::::`
lenovo	thinkcentre_m70c_firmware	< m2vkt1da `cpe:2.3:o:lenovo:thinkcentre_m70c_firmware::::::::`
lenovo	thinkcentre_m70q_firmware	< m2wkt57a `cpe:2.3:o:lenovo:thinkcentre_m70q_firmware::::::::`
lenovo	thinkcentre_m70q_gen_3_firmware	< m43kt16a `cpe:2.3:o:lenovo:thinkcentre_m70q_gen_3_firmware::::::::`
lenovo	thinkcentre_m70s_gen_3_firmware	< m41kt2da `cpe:2.3:o:lenovo:thinkcentre_m70s_gen_3_firmware::::::::`
lenovo	thinkcentre_m70t_gen_3_firmware	< m41kt2da `cpe:2.3:o:lenovo:thinkcentre_m70t_gen_3_firmware::::::::`
lenovo	thinkcentre_m710e_firmware	< m1zkt38a `cpe:2.3:o:lenovo:thinkcentre_m710e_firmware::::::::`
lenovo	thinkcentre_m710q_firmware	< m1akt56a `cpe:2.3:o:lenovo:thinkcentre_m710q_firmware::::::::`
lenovo	thinkcentre_m710s_firmware	< m16kt68a `cpe:2.3:o:lenovo:thinkcentre_m710s_firmware::::::::`
lenovo	thinkcentre_m715q_firmware	< m11kt54a `cpe:2.3:o:lenovo:thinkcentre_m715q_firmware::::::::`
lenovo	thinkcentre_m715t_firmware	< m2ckt4da `cpe:2.3:o:lenovo:thinkcentre_m715t_firmware::::::::`
lenovo	thinkcentre_m720e_firmware	< m30kt26a `cpe:2.3:o:lenovo:thinkcentre_m720e_firmware::::::::`
lenovo	thinkcentre_m720q_firmware	< m1ukt67a `cpe:2.3:o:lenovo:thinkcentre_m720q_firmware::::::::`
lenovo	thinkcentre_m720s_firmware	< m1ukt67a `cpe:2.3:o:lenovo:thinkcentre_m720s_firmware::::::::`
lenovo	thinkcentre_m720t_firmware	< m1ukt67a `cpe:2.3:o:lenovo:thinkcentre_m720t_firmware::::::::`
lenovo	thinkcentre_m725s_firmware	< m25kt61a `cpe:2.3:o:lenovo:thinkcentre_m725s_firmware::::::::`
lenovo	thinkcentre_m75n_firmware	< m33kt25a `cpe:2.3:o:lenovo:thinkcentre_m75n_firmware::::::::`
lenovo	thinkcentre_m75q_gen_2_firmware	< m47kt24a `cpe:2.3:o:lenovo:thinkcentre_m75q_gen_2_firmware::::::::`
lenovo	thinkcentre_m75q-1_firmware	< m2fkt2da `cpe:2.3:o:lenovo:thinkcentre_m75q-1_firmware::::::::`
lenovo	thinkcentre_m75s_gen_2_firmware	< m46kt2da `cpe:2.3:o:lenovo:thinkcentre_m75s_gen_2_firmware::::::::`
lenovo	thinkcentre_m75s-1_firmware	< m2ckt4da `cpe:2.3:o:lenovo:thinkcentre_m75s-1_firmware::::::::`
lenovo	thinkcentre_m75t_gen_2_firmware	< m46kt2da `cpe:2.3:o:lenovo:thinkcentre_m75t_gen_2_firmware::::::::`
lenovo	thinkcentre_m80q_firmware	< m2wkt57a `cpe:2.3:o:lenovo:thinkcentre_m80q_firmware::::::::`
lenovo	thinkcentre_m810z_firmware	< m1ckt49a `cpe:2.3:o:lenovo:thinkcentre_m810z_firmware::::::::`

Showing 50 of 147. Show the rest

Vendor	Product	Affected versions
lenovo	thinkcentre_m818z_firmware	< m1ekt25a `cpe:2.3:o:lenovo:thinkcentre_m818z_firmware::::::::`
lenovo	thinkcentre_m820z_firmware	< m1nkt58a `cpe:2.3:o:lenovo:thinkcentre_m820z_firmware::::::::`
lenovo	thinkcentre_m90a_firmware	< m2rkt52a `cpe:2.3:o:lenovo:thinkcentre_m90a_firmware::::::::`
lenovo	thinkcentre_m90a_gen2_firmware	< m3lkt26a `cpe:2.3:o:lenovo:thinkcentre_m90a_gen2_firmware::::::::`
lenovo	thinkcentre_m90q_gen_2_firmware	< m3jkt34a `cpe:2.3:o:lenovo:thinkcentre_m90q_gen_2_firmware::::::::`
lenovo	thinkcentre_m90q_tiny_firmware	< m2wkt57a `cpe:2.3:o:lenovo:thinkcentre_m90q_tiny_firmware::::::::`
lenovo	thinkcentre_m910q_firmware	< m1akt56a `cpe:2.3:o:lenovo:thinkcentre_m910q_firmware::::::::`
lenovo	thinkcentre_m910s_firmware	< m1akt56a `cpe:2.3:o:lenovo:thinkcentre_m910s_firmware::::::::`
lenovo	thinkcentre_m910t_firmware	< m1akt56a `cpe:2.3:o:lenovo:thinkcentre_m910t_firmware::::::::`
lenovo	thinkcentre_m910x_firmware	< m1akt56a `cpe:2.3:o:lenovo:thinkcentre_m910x_firmware::::::::`
lenovo	thinkcentre_m920q_firmware	< m1ukt67a `cpe:2.3:o:lenovo:thinkcentre_m920q_firmware::::::::`
lenovo	thinkcentre_m920s_firmware	< m1ukt67a `cpe:2.3:o:lenovo:thinkcentre_m920s_firmware::::::::`
lenovo	thinkcentre_m920t_firmware	< m1ukt67a `cpe:2.3:o:lenovo:thinkcentre_m920t_firmware::::::::`
lenovo	thinkcentre_m920x_firmware	< m1ukt67a `cpe:2.3:o:lenovo:thinkcentre_m920x_firmware::::::::`
lenovo	thinkcentre_neo_50s_gen_3_firmware	< m49kt1da `cpe:2.3:o:lenovo:thinkcentre_neo_50s_gen_3_firmware::::::::`
lenovo	thinkcentre_neo_50t_gen_3_firmware	< m42kt40a `cpe:2.3:o:lenovo:thinkcentre_neo_50t_gen_3_firmware::::::::`
lenovo	qitian_a815_firmware	< m1rkt38a `cpe:2.3:o:lenovo:qitian_a815_firmware::::::::`
lenovo	qt_m410_firmware	< m16kt68a `cpe:2.3:o:lenovo:qt_m410_firmware::::::::`
lenovo	qt_b415_firmware	< m16kt68a `cpe:2.3:o:lenovo:qt_b415_firmware::::::::`
lenovo	qt_m415_firmware	< m16kt68a `cpe:2.3:o:lenovo:qt_m415_firmware::::::::`
lenovo	ideacentre_t540-15ama_g_firmware	< m2ckt4da `cpe:2.3:o:lenovo:ideacentre_t540-15ama_g_firmware::::::::`
lenovo	ideacentre_t540-15ick_firmware	< o4kkt16a `cpe:2.3:o:lenovo:ideacentre_t540-15ick_firmware::::::::`
lenovo	thinkcentre_e75_t\/s_firmware	< m16kt68a `cpe:2.3:o:lenovo:thinkcentre_e75_t\/s_firmware::::::::`
lenovo	thinkcentre_m610_firmware	< m1akt56a `cpe:2.3:o:lenovo:thinkcentre_m610_firmware::::::::`
lenovo	thinkcentre_m6600q_firmware	< fwktbaa `cpe:2.3:o:lenovo:thinkcentre_m6600q_firmware::::::::`
lenovo	thinkcentre_m6600t_firmware	< fwktbaa `cpe:2.3:o:lenovo:thinkcentre_m6600t_firmware::::::::`
lenovo	thinkcentre_m6600s_firmware	< fwktbaa `cpe:2.3:o:lenovo:thinkcentre_m6600s_firmware::::::::`
lenovo	ideacentre_3-07ada05_firmware	< o4fkt29a `cpe:2.3:o:lenovo:ideacentre_3-07ada05_firmware::::::::`
lenovo	ideacentre_5-14are05_firmware	< o4zkt29a `cpe:2.3:o:lenovo:ideacentre_5-14are05_firmware::::::::`
lenovo	ideacentre_g5-14amr05_firmware	< o4zkt29a `cpe:2.3:o:lenovo:ideacentre_g5-14amr05_firmware::::::::`
lenovo	thinkcentre_m90s_firmware	< m2tkt50a `cpe:2.3:o:lenovo:thinkcentre_m90s_firmware::::::::`
lenovo	thinkcentre_m900x_firmware	< fwktbfa `cpe:2.3:o:lenovo:thinkcentre_m900x_firmware::::::::`
lenovo	thinkcentre_m900_firmware	< fwktbfa `cpe:2.3:o:lenovo:thinkcentre_m900_firmware::::::::`
lenovo	thinkcentre_m80t_firmware	< m2tkt50a `cpe:2.3:o:lenovo:thinkcentre_m80t_firmware::::::::`
lenovo	thinkcentre_m80s_firmware	< m2tkt50a `cpe:2.3:o:lenovo:thinkcentre_m80s_firmware::::::::`
lenovo	thinkcentre_m800_firmware	< fwktbfa `cpe:2.3:o:lenovo:thinkcentre_m800_firmware::::::::`
lenovo	thinkcentre_m70t_firmware	< m2tkt50a `cpe:2.3:o:lenovo:thinkcentre_m70t_firmware::::::::`
lenovo	thinkcentre_m70s_firmware	< m2tkt50a `cpe:2.3:o:lenovo:thinkcentre_m70s_firmware::::::::`
lenovo	ideacentre_510-15ick_firmware	< o4kkt16a `cpe:2.3:o:lenovo:ideacentre_510-15ick_firmware::::::::`
lenovo	ideacentre_510a-15arr_firmware	< o4dkt43a `cpe:2.3:o:lenovo:ideacentre_510a-15arr_firmware::::::::`
lenovo	ideacentre_510a-15ick_firmware	< o4kkt16a `cpe:2.3:o:lenovo:ideacentre_510a-15ick_firmware::::::::`
lenovo	ideacentre_510s-07icb_firmware	< m22kt47a `cpe:2.3:o:lenovo:ideacentre_510s-07icb_firmware::::::::`
lenovo	ideacentre_510s-07ick_firmware	< m30kt26a `cpe:2.3:o:lenovo:ideacentre_510s-07ick_firmware::::::::`
lenovo	ideacentre_720-18apr_firmware	< m25kt61a `cpe:2.3:o:lenovo:ideacentre_720-18apr_firmware::::::::`
lenovo	ideacentre_a340-22igm_firmware	< o51kt12a `cpe:2.3:o:lenovo:ideacentre_a340-22igm_firmware::::::::`
lenovo	ideacentre_a340-24igm_firmware	< o51kt12a `cpe:2.3:o:lenovo:ideacentre_a340-24igm_firmware::::::::`
lenovo	v30a-22iml_firmware	< m37kt28a `cpe:2.3:o:lenovo:v30a-22iml_firmware::::::::`
lenovo	v30a-24iml_firmware	< m37kt28a `cpe:2.3:o:lenovo:v30a-24iml_firmware::::::::`
lenovo	v330-20icb_firmware	< m1qkt47a `cpe:2.3:o:lenovo:v330-20icb_firmware::::::::`
lenovo	v35s-07ada_firmware	< o4fkt29a `cpe:2.3:o:lenovo:v35s-07ada_firmware::::::::`
lenovo	v50a-22imb_firmware	< m36kt28a `cpe:2.3:o:lenovo:v50a-22imb_firmware::::::::`
lenovo	v50a-24imb_firmware	< m36kt28a `cpe:2.3:o:lenovo:v50a-24imb_firmware::::::::`
lenovo	v50s-07imb_firmware	< m2vkt1da `cpe:2.3:o:lenovo:v50s-07imb_firmware::::::::`
lenovo	v50t-13imb_firmware	< o4hkt38a `cpe:2.3:o:lenovo:v50t-13imb_firmware::::::::`
lenovo	v50t-13iob_g2_firmware	< m3gkt33a `cpe:2.3:o:lenovo:v50t-13iob_g2_firmware::::::::`
lenovo	v520_firmware	< m16kt68a `cpe:2.3:o:lenovo:v520_firmware::::::::`
lenovo	v520s_firmware	< m16kt68a `cpe:2.3:o:lenovo:v520s_firmware::::::::`
lenovo	v530-15arr_firmware	< o4dkt43a `cpe:2.3:o:lenovo:v530-15arr_firmware::::::::`
lenovo	v530-15icb_firmware	< m1ykt70a `cpe:2.3:o:lenovo:v530-15icb_firmware::::::::`
lenovo	v530-15icr_firmware	< m2ykt31a `cpe:2.3:o:lenovo:v530-15icr_firmware::::::::`
lenovo	v530-22icb_firmware	< m20kt52a `cpe:2.3:o:lenovo:v530-22icb_firmware::::::::`
lenovo	v530-24icb_firmware	< m20kt52a `cpe:2.3:o:lenovo:v530-24icb_firmware::::::::`
lenovo	v530s-07icb_firmware	< m22kt48a `cpe:2.3:o:lenovo:v530s-07icb_firmware::::::::`
lenovo	v530s-07icr_firmware	< m30kt26a `cpe:2.3:o:lenovo:v530s-07icr_firmware::::::::`
lenovo	v540-24iwl_firmware	< m29kt39a `cpe:2.3:o:lenovo:v540-24iwl_firmware::::::::`
lenovo	v55t_gen_2_13acn_firmware	< o5jkt20a `cpe:2.3:o:lenovo:v55t_gen_2_13acn_firmware::::::::`
lenovo	v55t-15api_firmware	< o4dkt43a `cpe:2.3:o:lenovo:v55t-15api_firmware::::::::`
lenovo	v55t-15are_firmware	< o4dkt43a `cpe:2.3:o:lenovo:v55t-15are_firmware::::::::`
lenovo	yangtian_afq150_firmware	< fwktbaa `cpe:2.3:o:lenovo:yangtian_afq150_firmware::::::::`
lenovo	yta8900f_firmware	< fwktbaa `cpe:2.3:o:lenovo:yta8900f_firmware::::::::`
lenovo	yoga_a940-27icb_firmware	< o43kt43a `cpe:2.3:o:lenovo:yoga_a940-27icb_firmware::::::::`
lenovo	thinkedge_se30_firmware	< m3fkt29a `cpe:2.3:o:lenovo:thinkedge_se30_firmware::::::::`
lenovo	thinksmart_core_\&_controller_full_room_kit\	_microsoft_teams_rooms_firmware _zoom_rooms_firmware `cpe:2.3:o:lenovo:thinksmart_core_\&_controller_full_room_kit\:_microsoft_teams_rooms_firmware:-:::::::*`
lenovo	thinksmart_core_\&_controller_kit\	_microsoft_teams_rooms_firmware _zoom_rooms_firmware `cpe:2.3:o:lenovo:thinksmart_core_\&_controller_kit\:_microsoft_teams_rooms_firmware:-:::::::*`
lenovo	thinksmart_core_device_for_logitech_firmware	All versions `cpe:2.3:o:lenovo:thinksmart_core_device_for_logitech_firmware:-:::::::*`
lenovo	thinksmart_core_device_for_poly_firmware	All versions `cpe:2.3:o:lenovo:thinksmart_core_device_for_poly_firmware:-:::::::*`
lenovo	thinksmart_core_device\	_zoom_rooms_firmware `cpe:2.3:o:lenovo:thinksmart_core_device\:_zoom_rooms_firmware:-:::::::*`
lenovo	thinksmart_hub_teams_firmware	< m2xkt20a `cpe:2.3:o:lenovo:thinksmart_hub_teams_firmware::::::::`
lenovo	thinksmart_hub_zoom_firmware	< m2xkt20a `cpe:2.3:o:lenovo:thinksmart_hub_zoom_firmware::::::::`
lenovo	thinkstation_p310_firmware	< fwktbaa `cpe:2.3:o:lenovo:thinkstation_p310_firmware::::::::`
lenovo	thinkstation_p320_tiny_firmware	< m1akt56a `cpe:2.3:o:lenovo:thinkstation_p320_tiny_firmware::::::::`
lenovo	thinkstation_p330_tiny_firmware	< m1ukt67a `cpe:2.3:o:lenovo:thinkstation_p330_tiny_firmware::::::::`
lenovo	thinkstation_p340_tiny_firmware	< m2wkt57a `cpe:2.3:o:lenovo:thinkstation_p340_tiny_firmware::::::::`
lenovo	thinkstation_p340_firmware	< s08kt50a `cpe:2.3:o:lenovo:thinkstation_p340_firmware::::::::`
lenovo	thinkstation_p348_firmware	< m3kkt34a `cpe:2.3:o:lenovo:thinkstation_p348_firmware::::::::`
lenovo	thinkstation_p350_tiny_firmware	< m3jkt34a `cpe:2.3:o:lenovo:thinkstation_p350_tiny_firmware::::::::`
lenovo	thinkstation_p350_firmware	<= s0akt34a `cpe:2.3:o:lenovo:thinkstation_p350_firmware::::::::`
lenovo	thinkstation_p520_firmware	< s03kt55a `cpe:2.3:o:lenovo:thinkstation_p520_firmware::::::::`
lenovo	thinkstation_p520c_firmware	< s03kt55a `cpe:2.3:o:lenovo:thinkstation_p520c_firmware::::::::`
lenovo	thinkstation_p620_firmware	< s07kt25a `cpe:2.3:o:lenovo:thinkstation_p620_firmware::::::::`
lenovo	stadia_ggp-120_firmware	< s03kt55a `cpe:2.3:o:lenovo:stadia_ggp-120_firmware::::::::`
lenovo	thinkstation_p318_firmware	< m1akt56a `cpe:2.3:o:lenovo:thinkstation_p318_firmware::::::::`
lenovo	thinkstation_p920_firmware	< s05kt62a `cpe:2.3:o:lenovo:thinkstation_p920_firmware::::::::`
lenovo	thinkstation_p720_firmware	< s05kt62a `cpe:2.3:o:lenovo:thinkstation_p720_firmware::::::::`
lenovo	thinkstation_p320_firmware	< s06kt59a `cpe:2.3:o:lenovo:thinkstation_p320_firmware::::::::`
lenovo	thinksystem_st50_firmware	< ite123e `cpe:2.3:o:lenovo:thinksystem_st50_firmware::::::::`
lenovo	thinksystem_st58_firmware	< ite123e `cpe:2.3:o:lenovo:thinksystem_st58_firmware::::::::`

Original advisory text

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

References

https://support.lenovo.com/us/en/product_security/LEN-94953 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

4.4 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-125Out-of-bounds Read

Timeline

Published30 Jan 2023

Updated29 Oct 2026

First seen29 Sep 2026

Sources

CVE-2022-40136 · NVD

Track software like this

Free during beta