CVE-2022-40134
Medium
Description
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
SeverityMedium
CVSS4.4
Exploit probability—
ProductLenovo Ideacentre C5-14imb05 Firmware
PublishedJan 30, 2023
First seenJan 30, 2023
Weakness typeCWE-125Out-of-bounds read
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo ideacentre_c5-14imb05_firmware | o4hkt38a | — |
| lenovo thinkcentre_e96z_firmware | m26kt22a | — |
| lenovo ideacentre_3_07iab7_firmware | m49kt1da | — |
| lenovo ideacentre_3-07imb05_firmware | m2vkt1da | — |
| lenovo ideacentre_5_14iab7_firmware | m42kt40a | — |
| lenovo ideacentre_5-14acn6_firmware | o5ekt21a | — |
| lenovo ideacentre_5-14imb05_firmware | o4hkt38a | — |
| lenovo ideacentre_5-14iob6_firmware | m3gkt33a | — |
| lenovo ideacentre_creator_5-14iob6_firmware | m3gkt33a | — |
| lenovo ideacentre_g5-14imb05_firmware | o4hkt38a | — |
| lenovo ideacentre_gaming_5_17acn7_firmware | o5ekt21a | — |
| lenovo ideacentre_gaming_5_17iab7_firmware | m42kt40a | — |
| lenovo ideacentre_gaming_5-14acn6_firmware | o5ekt21a | — |
| lenovo ideacentre_gaming_5-14iob6_firmware | m3gkt33a | — |
| lenovo legion_c530-19icb_firmware | o4bkt20a | — |
| lenovo legion_t5-26iob6_firmware | o54kt1da | — |
| lenovo legion_t5-28icb05_firmware | o4bkt20a | — |
| lenovo legion_t530-28apr_firmware | o4gkt16a | — |
| lenovo legion_t530-28icb_firmware | o4bkt20a | — |
| lenovo legion_t7-34imz5_firmware | o4lkt1ea | — |
| lenovo thinkcentre_m60e_tiny_firmware | o5fkt14a | — |
| lenovo thinkcentre_m625q_firmware | m3skt21a | — |
| lenovo thinkcentre_m630e_firmware | m1wkt45a | — |
| lenovo thinkcentre_m70a_firmware | m28kt37a | — |
| lenovo thinkcentre_m70a_gen_2_firmware | m2skt25a | — |
| lenovo thinkcentre_m70c_firmware | m3nkt20a | — |
| lenovo thinkcentre_m70q_firmware | m2vkt1da | — |
| lenovo thinkcentre_m70q_gen_2_firmware | m2wkt57a | — |
| lenovo thinkcentre_m70q_gen_3_firmware | m3jkt34a | — |
| lenovo thinkcentre_m70s_firmware | m43kt16a | — |
| lenovo thinkcentre_m70s_gen_3_firmware | m2tkt50a | — |
| lenovo thinkcentre_m70t_firmware | m41kt2da | — |
| lenovo thinkcentre_m70t_gen_3_firmware | m2tkt50a | — |
| lenovo thinkcentre_m710e_firmware | m41kt2da | — |
| lenovo thinkcentre_m710q_firmware | m1zkt38a | — |
| lenovo thinkcentre_m710s_firmware | m1akt56a | — |
| lenovo thinkcentre_m710t_firmware | m16kt68a | — |
| lenovo thinkcentre_m715q_firmware | m16kt68a | — |
| lenovo thinkcentre_m720e_firmware | m11kt54a | — |
| lenovo thinkcentre_m75n_firmware | m30kt26a | — |
| lenovo thinkcentre_m75q_gen_2_firmware | m33kt25a | — |
| lenovo thinkcentre_m75t_gen_2_firmware | m47kt24a, No range specified, m3akt44a, m3bkt29a, m46kt2da | — |
| lenovo thinkcentre_m80q_firmware | m46kt2da | — |
| lenovo thinkcentre_m80s_firmware | m2wkt57a, m2tkt50a | — |
| lenovo thinkcentre_m80t_firmware | m2tkt50a, m1ckt49a | — |
| lenovo thinkcentre_m810z_all-in-one_firmware | m1ekt25a | — |
| lenovo thinkcentre_m818z_firmware | m1nkt58a | — |
| lenovo thinkcentre_m820z_all-in-one_firmware | m2rkt52a | — |
| lenovo thinkcentre_m90a_firmware | m3lkt26a | — |
| lenovo thinkcentre_m90a_gen_2_firmware | m3jkt34a | — |
| lenovo thinkcentre_m90q_gen_2_firmware | m2wkt57a | — |
| lenovo thinkcentre_m90q_tiny_firmware | m2tkt50a | — |
| lenovo thinkcentre_m90s_firmware | m2tkt50a | — |
| lenovo thinkcentre_m90t_firmware | m1akt56a | — |
| lenovo thinkcentre_m910q_firmware | m1akt56a | — |
| lenovo thinkcentre_m910s_firmware | m1akt56a | — |
| lenovo thinkcentre_m910t_firmware | m1akt56a | — |
| lenovo thinkcentre_m910x_firmware | m49kt1da | — |
| lenovo thinkcentre_neo_50s_gen_3_firmware | m42kt40a | — |
| lenovo qitian_a815_firmware | m1rkt38a | — |
| lenovo qt_m410_firmware | m16kt68a | — |
| lenovo qt_b415_firmware | m16kt68a | — |
| lenovo qt_m415_firmware | m16kt68a | — |
| lenovo thinkcentre_e75t_firmware | m16kt68a | — |
| lenovo thinkcentre_e75s_firmware | m16kt68a | — |
| lenovo thinkcentre_m610_firmware | m1akt56a | — |
| lenovo thinkcentre_m6600q_firmware | fwktbaa | — |
| lenovo thinkcentre_m6600t_firmware | fwktbaa | — |
| lenovo thinkcentre_m6600s_firmware | fwktbaa | — |
| lenovo thinkcentre_m700q_firmware | fwktbaa | — |
| lenovo thinkcentre_m8600t_firmware | fwktbaa | — |
| lenovo thinkcentre_m8600s_firmware | fwktbaa | — |
| lenovo ideacentre_3-07ada05_firmware | o4fkt29a | — |
| lenovo ideacentre_5-14are05_firmware | o4zkt29a | — |
| lenovo ideacentre_g5-14amr05_firmware | o4zkt29a | — |
| lenovo thinkcentre_m75s_gen_2_firmware | m3akt44a, m3bkt29a | — |
| lenovo ideacentre_510s-07icb_firmware | m22kt47a, m22kt48a | — |
| lenovo ideacentre_510s-07ick_firmware | m30kt26a | — |
| lenovo ideacentre_a340-22igm_firmware | o51kt12a | — |
| lenovo ideacentre_a340-24igm_firmware | o51kt12a | — |
| lenovo v30a-22iml_firmware | m37kt28a | — |
| lenovo v30a-24iml_firmware | m37kt28a | — |
| lenovo v330-20icb_firmware | m1qkt47a | — |
| lenovo v35s-07ada_firmware | o4fkt29a | — |
| lenovo v50a-22imb_firmware | m36kt28a | — |
| lenovo v50a-24imb_firmware | m36kt28a | — |
| lenovo v50s-07imb_firmware | m2vkt1da | — |
| lenovo v50t-13imb_firmware | o4hkt38a | — |
| lenovo v50t-13iob_g2_firmware | m3gkt33a | — |
| lenovo v520_firmware | m16kt68a | — |
| lenovo v520s_firmware | m16kt68a | — |
| lenovo v530-15arr_firmware | not_affected | — |
| lenovo v530-15icb_firmware | m1ykt70a | — |
| lenovo v530-15icr_firmware | m2ykt31a | — |
| lenovo v530-22icb_firmware | m20kt52a | — |
| lenovo v530-24icb_firmware | m20kt52a | — |
| lenovo v530s-07icb_firmware | not_affected, m22kt48a | — |
| lenovo v530s-07icr_firmware | m30kt26a | — |
| lenovo v540-24iwl_firmware | m29kt39a | — |
| lenovo v55t_gen_2_13acn_firmware | o5jkt20a | — |
| lenovo yangtian_afq150_firmware | fwktbaa | — |
| lenovo yta8900f_firmware | fwktbaa | — |
| lenovo yoga_a940-27icb_firmware | o43kt43a | — |
| lenovo thinksystem_hr610x_firmware | hr6n0661 | — |
| lenovo thinksystem_hr630x_firmware | hr6n0661 | — |
| lenovo thinksystem_hr650x_firmware | hr6n0661 | — |
| lenovo thinkserver_rd350g_firmware | vb3ts891 | — |
| lenovo thinkedge_se30_firmware | m3fkt29a | — |
| lenovo thinksmart_hub_teams_firmware | m2xkt20a | — |
| lenovo thinksmart_hub_zoom_firmware | m2xkt20a | — |
| lenovo thinksmart_hub_500_firmware | m23kt29a | — |
| lenovo thinksystem_dx1100u_firmware | ive178i | — |
| lenovo thinksystem_dx8200d_firmware | ive178i | — |
| lenovo n3310_storage_firmware | 5.05.0 | — |
| lenovo n4610_storage_firmware | 5.05.0 | — |
| lenovo thinkagile_hx5530_firmware | afe118m | — |
| lenovo thinkagile_vx3331_firmware | afe118m | — |
| lenovo thinkagile_hx1021_firmware | hye122f | — |
| lenovo thinkagile_hx1320_firmware | ive178i | — |
| lenovo thinkagile_hx1321_firmware | ive178i | — |
| lenovo thinkagile_hx1331_firmware | afe118m | — |
| lenovo thinkagile_hx1520-r_firmware | ive178i | — |
| lenovo thinkagile_hx1521-r_firmware | ive178i | — |
| lenovo thinkagile_hx2320_firmware | ive178i | — |
| lenovo thinkagile_hx2320-e_firmware | ive178i | — |
| lenovo thinkagile_hx2321_firmware | ive178i | — |
| lenovo thinkagile_hx2330_firmware | afe118m | — |
| lenovo thinkagile_hx2331_firmware | afe118m | — |
| lenovo thinkagile_hx2720-e_firmware | tee178i | — |
| lenovo thinkagile_hx3320_firmware | ive178i | — |
| lenovo thinkagile_hx3321_firmware | ive178i | — |
| lenovo thinkagile_hx3330_firmware | afe118m | — |
| lenovo thinkagile_hx3331_firmware | afe118m | — |
| lenovo thinkagile_hx3375_firmware | d8e128f | — |
| lenovo thinkagile_hx3376_firmware | d8e128f | — |
| lenovo thinkagile_hx3520-g_firmware | ive178i | — |
| lenovo thinkagile_hx3521-g_firmware | ive178i | — |
| lenovo thinkagile_hx3720_firmware | tee178i | — |
| lenovo thinkagile_hx3721_firmware | tee178i | — |
| lenovo thinkagile_hx5520_firmware | ive178i | — |
| lenovo thinkagile_hx5520-c_firmware | ive178i | — |
| lenovo thinkagile_hx5521_firmware | ive178i | — |
| lenovo thinkagile_hx5521-c_firmware | ive178i | — |
| lenovo thinkagile_hx5531_firmware | afe118m | — |
| lenovo thinkagile_hx7520_firmware | ive178i | — |
| lenovo thinkagile_hx7521_firmware | ive178i | — |
| lenovo thinkagile_hx7530_firmware | afe118m | — |
| lenovo thinkagile_hx7531_firmware | afe118m | — |
| lenovo thinkagile_hx7820_firmware | pse144n | — |
| lenovo thinkagile_hx7821_firmware | pse144n | — |
| lenovo thinkagile_mx3321_f_firmware | ive178i | — |
| lenovo thinkagile_mx3321_h_firmware | ive178i | — |
| lenovo thinkagile_mx1020_firmware | hye122f | — |
| lenovo thinkagile_mx3330-f_firmware | afe118m | — |
| lenovo thinkagile_mx3330-h_firmware | afe118m | — |
| lenovo thinkagile_mx3331-f_firmware | afe118m | — |
| lenovo thinkagile_mx3331-h_firmware | afe118m | — |
| lenovo thinkagile_mx3520_f_firmware | ive178i | — |
| lenovo thinkagile_mx3520_h_firmware | ive178i | — |
| lenovo thinkagile_mx3530_f_firmware | afe118m | — |
| lenovo thinkagile_mx3530-h_firmware | afe118m | — |
| lenovo thinkagile_mx3531_h_firmware | afe118m | — |
| lenovo thinkagile_mx3531-f_firmware | afe118m | — |
| lenovo thinkagile_mx_certified_node_-_all_flash_firmware | ive178i | — |
| lenovo thinkagile_mx_certified_node_-_hybrid_firmware | ive178i | — |
| lenovo thinkagile_mx1021_firmware | hye122f | — |
| lenovo thinkagile_vx_1se_firmware | ise130e | — |
| lenovo thinkagile_vx_1u_firmware | ive178i | — |
| lenovo thinkagile_vx_2u_firmware | ive178i | — |
| lenovo thinkagile_vx_2u4n_firmware | tee178i | — |
| lenovo thinkagile_vx_4u_firmware | pse144n | — |
| lenovo thinkagile_vx1320_firmware | ise130e | — |
| lenovo thinkagile_vx2320_firmware | ive178i | — |
| lenovo thinkagile_vx2330_firmware | afe118m | — |
| lenovo thinkagile_vx3320_firmware | ive178i | — |
| lenovo thinkagile_vx3330_firmware | afe118m | — |
| lenovo thinkagile_vx3520-g_firmware | ive178i | — |
| lenovo thinkagile_vx3530-g_firmware | afe118m | — |
| lenovo thinkagile_vx3720_firmware | tee178i | — |
| lenovo thinkagile_vx5520_firmware | ive178i | — |
| lenovo thinkagile_vx5530_firmware | afe118m | — |
| lenovo thinkagile_vx7320_n_firmware | ive178i | — |
| lenovo thinkagile_vx7330_firmware | afe118m | — |
| lenovo thinkagile_vx7520_firmware | ive178i | — |
| lenovo thinkagile_vx7520_n_firmware | ive178i | — |
| lenovo thinkagile_vx7530_firmware | afe118m | — |
| lenovo thinkagile_vx7531_firmware | afe118m | — |
| lenovo thinkagile_vx7820_firmware | pse144n | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.