Medium severity · published Jan 30, 2023
CVE-2022-40134
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory
4.4
CVSS
0.2%
EPSS
No
On KEV
Description
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
I3
Ideacentre 3 07iab7 Firmware · Lenovo
m49kt1da · source: NVD
I3
Ideacentre 3-07imb05 Firmware · Lenovo
m2vkt1da · source: NVD
I5
Ideacentre 5 14iab7 Firmware · Lenovo
m42kt40a · source: NVD
I5
Ideacentre 5-14acn6 Firmware · Lenovo
o5ekt21a · source: NVD
I5
Ideacentre 5-14imb05 Firmware · Lenovo
o4hkt38a · source: NVD
I5
Ideacentre 5-14iob6 Firmware · Lenovo
m3gkt33a · source: NVD
IC
Ideacentre C5-14imb05 Firmware · Lenovo
o4hkt38a · source: NVD
IC
Ideacentre Creator 5-14iob6 Firmware · Lenovo
m3gkt33a · source: NVD
IG
Ideacentre G5-14imb05 Firmware · Lenovo
o4hkt38a · source: NVD
IG
Ideacentre Gaming 5 17acn7 Firmware · Lenovo
o5ekt21a · source: NVD
IG
Ideacentre Gaming 5 17iab7 Firmware · Lenovo
m42kt40a · source: NVD
IG
Ideacentre Gaming 5-14acn6 Firmware · Lenovo
o5ekt21a · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-40134
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-40134
Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-94953
More from Ideacentre 3 07iab7 Firmware
7.8
CVE-2022-48181
An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute…
6.7
CVE-2022-40137
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code
4.4
CVE-2022-40136
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges…
4.4
CVE-2022-40135
An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory