Medium severity · published Jan 30, 2023
CVE-2022-40137
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code
6.7
CVSS
0.2%
EPSS
No
On KEV
Description
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
I3
Ideacentre 3 07iab7 Firmware · Lenovo
m49kt1da · source: NVD
I3
Ideacentre 3-07imb05 Firmware · Lenovo
m2vkt1fa; m2vkt1fa · source: NVD
I5
Ideacentre 5 14iab7 Firmware · Lenovo
m42kt40a · source: NVD
I5
Ideacentre 5-14acn6 Firmware · Lenovo
o5ekt23a · source: NVD
I5
Ideacentre 5-14imb05 Firmware · Lenovo
o4hkt3aa; o4hkt3aa · source: NVD
I5
Ideacentre 5-14iob6 Firmware · Lenovo
m3gkt38a · source: NVD
IA
Ideacentre Aio 3-22ada6 Firmware · Lenovo
o5ckt24a · source: NVD
IA
Ideacentre Aio 3-22iil5 Firmware · Lenovo
o56kt22a · source: NVD
IA
Ideacentre Aio 3-22itl6 Firmware · Lenovo
o5akt31a · source: NVD
IA
Ideacentre Aio 3-24ada6 Firmware · Lenovo
o5ckt24a · source: NVD
IA
Ideacentre Aio 3-24alc6 Firmware · Lenovo
o5bkt24a; o5bkt24a · source: NVD
IA
Ideacentre Aio 3-24iil5 Firmware · Lenovo
o56kt22a · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-40137
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-40137
Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-94953
More from Ideacentre 3 07iab7 Firmware
7.8
CVE-2022-48181
An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute…
4.4
CVE-2022-40136
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges…
4.4
CVE-2022-40135
An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory
4.4
CVE-2022-40134
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory