CVE-2022-40135
Medium
Description
An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
SeverityMedium
CVSS4.4
Exploit probability—
ProductLenovo Ideacentre C5-14imb05 Firmware
PublishedJan 30, 2023
First seenJan 30, 2023
Weakness typeCWE-125Out-of-bounds read
How to fix
Update
- lenovo ideacentre_c5-14imb05_firmwareo4hkt38a or later
- lenovo thinkcentre_e96z_firmwarem26kt22a or later
- lenovo ideacentre_3_07iab7_firmwarem49kt1da or later
- lenovo ideacentre_3-07imb05_firmwarem2vkt1da or later
- lenovo ideacentre_5_14iab7_firmwarem42kt40a or later
- lenovo ideacentre_5-14acn6_firmwareo5ekt21a or later
- lenovo ideacentre_5-14imb05_firmwareo4hkt38a or later
- lenovo ideacentre_5-14iob6_firmwarem3gkt33a or later
- lenovo ideacentre_g5-14imb05_firmwareo4hkt38a or later
- lenovo ideacentre_gaming_5_17acn7_firmwareo5ekt21a or later
- lenovo ideacentre_gaming_5_17iab7_firmwarem42kt40a or later
- lenovo ideacentre_gaming_5-14acn6_firmwareo5ekt21a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo ideacentre_c5-14imb05_firmware | v < o4hkt38a | o4hkt38a |
| lenovo thinkcentre_e96z_firmware | v < m26kt22a | m26kt22a |
| lenovo ideacentre_3_07iab7_firmware | v < m49kt1da | m49kt1da |
| lenovo ideacentre_3-07imb05_firmware | v < m2vkt1da | m2vkt1da |
| lenovo ideacentre_5_14iab7_firmware | v < m42kt40a | m42kt40a |
| lenovo ideacentre_5-14acn6_firmware | v < o5ekt21a | o5ekt21a |
| lenovo ideacentre_5-14imb05_firmware | v < o4hkt38a | o4hkt38a |
| lenovo ideacentre_5-14iob6_firmware | v < m3gkt33a | m3gkt33a |
| lenovo ideacentre_creator_5-14iob6_firmware | v ≤ m3gkt33a | — |
| lenovo ideacentre_g5-14imb05_firmware | v < o4hkt38a | o4hkt38a |
| lenovo ideacentre_gaming_5_17acn7_firmware | v < o5ekt21a | o5ekt21a |
| lenovo ideacentre_gaming_5_17iab7_firmware | v < m42kt40a | m42kt40a |
| lenovo ideacentre_gaming_5-14acn6_firmware | v < o5ekt21a | o5ekt21a |
| lenovo ideacentre_gaming_5-14iob6_firmware | v < m3gkt33a | m3gkt33a |
| lenovo legion_c530-19icb_firmware | v < o4bkt20a | o4bkt20a |
| lenovo legion_t5-26iob6_firmware | v < o54kt1da | o54kt1da |
| lenovo legion_t5-28icb05_firmware | v < o4bkt20a | o4bkt20a |
| lenovo legion_t530-28apr_firmware | v < o4gkt16a | o4gkt16a |
| lenovo legion_t530-28icb_firmware | v < o4bkt20a | o4bkt20a |
| lenovo legion_t7-34imz5_firmware | v < o4lkt1ea | o4lkt1ea |
| lenovo thinkcentre_m60e_tiny_firmware | v < m3skt21a | m3skt21a |
| lenovo thinkcentre_m625q_firmware | v < m1wkt45a | m1wkt45a |
| lenovo thinkcentre_m630e_firmware | v < m28kt37a | m28kt37a |
| lenovo thinkcentre_m70a_firmware | v < m2skt25a | m2skt25a |
| lenovo thinkcentre_m70a_gen_2_firmware | v < m3nkt20a | m3nkt20a |
| lenovo thinkcentre_m70c_firmware | v < m2vkt1da | m2vkt1da |
| lenovo thinkcentre_m70q_firmware | v < m2wkt57a | m2wkt57a |
| lenovo thinkcentre_m70q_gen_2_firmware | v < m2wkt57a | m2wkt57a |
| lenovo thinkcentre_m70q_gen_3_firmware | v < m43kt16a | m43kt16a |
| lenovo thinkcentre_m70s_gen_3_firmware | v < m41kt2da | m41kt2da |
| lenovo thinkcentre_m70t_gen_3_firmware | v < m41kt2da | m41kt2da |
| lenovo thinkcentre_m710e_firmware | v < m1zkt38a | m1zkt38a |
| lenovo thinkcentre_m710q_firmware | v < m1akt56a | m1akt56a |
| lenovo thinkcentre_m710s_firmware | v < m16kt68a | m16kt68a |
| lenovo thinkcentre_m710t_firmware | v < m16kt68a | m16kt68a |
| lenovo thinkcentre_m715q_firmware | v < m11kt54a | m11kt54a |
| lenovo thinkcentre_m715t_firmware | v < m2ckt4da | m2ckt4da |
| lenovo thinkcentre_m720e_firmware | v < m30kt26a | m30kt26a |
| lenovo thinkcentre_m720q_firmware | v < m1ukt67a | m1ukt67a |
| lenovo thinkcentre_m720s_firmware | v < m1ukt67a | m1ukt67a |
| lenovo thinkcentre_m720t_firmware | v < m1ukt67a | m1ukt67a |
| lenovo thinkcentre_m725s_firmware | v < m25kt61a | m25kt61a |
| lenovo thinkcentre_m75n_firmware | v < m33kt25a | m33kt25a |
| lenovo thinkcentre_m75q_gen_2_firmware | v < m47kt24a | m47kt24a |
| lenovo thinkcentre_m75q-1_firmware | v < m2fkt2da | m2fkt2da |
| lenovo thinkcentre_m75s_gen_2_firmware | v < m46kt2da | m46kt2da |
| lenovo thinkcentre_m75s-1_firmware | v < m2ckt4da | m2ckt4da |
| lenovo thinkcentre_m75t_gen_2_firmware | v < m46kt2da | m46kt2da |
| lenovo thinkcentre_m80q_firmware | v < m2wkt57a | m2wkt57a |
| lenovo thinkcentre_m810z_firmware | v < m1ckt49a | m1ckt49a |
| lenovo thinkcentre_m818z_firmware | v < m1ekt25a | m1ekt25a |
| lenovo thinkcentre_m820z_firmware | v < m1nkt58a | m1nkt58a |
| lenovo thinkcentre_m90a_firmware | v < m2rkt52a | m2rkt52a |
| lenovo thinkcentre_m90a_gen2_firmware | v < m3lkt26a | m3lkt26a |
| lenovo thinkcentre_m90q_gen_2_firmware | v < m3jkt34a | m3jkt34a |
| lenovo thinkcentre_m90q_tiny_firmware | v < m2wkt57a | m2wkt57a |
| lenovo thinkcentre_m910q_firmware | v < m1akt56a | m1akt56a |
| lenovo thinkcentre_m910s_firmware | v < m1akt56a | m1akt56a |
| lenovo thinkcentre_m910t_firmware | v < m1akt56a | m1akt56a |
| lenovo thinkcentre_m910x_firmware | v < m1akt56a | m1akt56a |
| lenovo thinkcentre_m920q_firmware | v < m1ukt67a | m1ukt67a |
| lenovo thinkcentre_m920s_firmware | v < m1ukt67a | m1ukt67a |
| lenovo thinkcentre_m920t_firmware | v < m1ukt67a | m1ukt67a |
| lenovo thinkcentre_m920x_firmware | v < m1ukt67a | m1ukt67a |
| lenovo thinkcentre_neo_50s_gen_3_firmware | v < m49kt1da | m49kt1da |
| lenovo thinkcentre_neo_50t_gen_3_firmware | v < m42kt40a | m42kt40a |
| lenovo qitian_a815_firmware | v < m1rkt38a | m1rkt38a |
| lenovo qt_m410_firmware | v < m16kt68a | m16kt68a |
| lenovo qt_b415_firmware | v < m16kt68a | m16kt68a |
| lenovo qt_m415_firmware | v < m16kt68a | m16kt68a |
| lenovo ideacentre_t540-15ama_g_firmware | v < m2ckt4da | m2ckt4da |
| lenovo ideacentre_t540-15ick_firmware | v < o4kkt16a | o4kkt16a |
| lenovo thinkcentre_e75_t\/s_firmware | v < m16kt68a | m16kt68a |
| lenovo thinkcentre_m610_firmware | v < m1akt56a | m1akt56a |
| lenovo thinkcentre_m6600q_firmware | v < fwktbaa | fwktbaa |
| lenovo thinkcentre_m6600t_firmware | v < fwktbaa | fwktbaa |
| lenovo thinkcentre_m6600s_firmware | v < fwktbaa | fwktbaa |
| lenovo ideacentre_3-07ada05_firmware | v < o4fkt29a | o4fkt29a |
| lenovo ideacentre_5-14are05_firmware | v < o4zkt29a | o4zkt29a |
| lenovo ideacentre_g5-14amr05_firmware | v < o4zkt29a | o4zkt29a |
| lenovo ideacentre_510-15ick_firmware | v < o4kkt16a | o4kkt16a |
| lenovo ideacentre_510a-15arr_firmware | v < o4dkt43a | o4dkt43a |
| lenovo ideacentre_510a-15ick_firmware | v < o4kkt16a | o4kkt16a |
| lenovo ideacentre_510s-07icb_firmware | v < m22kt47a | m22kt47a |
| lenovo ideacentre_510s-07ick_firmware | v < m30kt26a | m30kt26a |
| lenovo ideacentre_720-18apr_firmware | v < m25kt61a | m25kt61a |
| lenovo ideacentre_a340-22igm_firmware | v < o51kt12a | o51kt12a |
| lenovo ideacentre_a340-24igm_firmware | v < o51kt12a | o51kt12a |
| lenovo v30a-22iml_firmware | v < m37kt28a | m37kt28a |
| lenovo v30a-24iml_firmware | v < m37kt28a | m37kt28a |
| lenovo v330-20icb_firmware | v < m1qkt47a | m1qkt47a |
| lenovo v35s-07ada_firmware | v < o4fkt29a | o4fkt29a |
| lenovo v50a-22imb_firmware | v < m36kt28a | m36kt28a |
| lenovo v50a-24imb_firmware | v < m36kt28a | m36kt28a |
| lenovo v50s-07imb_firmware | v < m2vkt1da | m2vkt1da |
| lenovo v50t-13imb_firmware | v < o4hkt38a | o4hkt38a |
| lenovo v50t-13iob_g2_firmware | v < m3gkt33a | m3gkt33a |
| lenovo v520_firmware | v < m16kt68a | m16kt68a |
| lenovo v520s_firmware | v < m16kt68a | m16kt68a |
| lenovo v530-15arr_firmware | v < o4dkt43a | o4dkt43a |
| lenovo v530-15icb_firmware | v < m1ykt70a | m1ykt70a |
| lenovo v530-15icr_firmware | v < m2ykt31a | m2ykt31a |
| lenovo v530-22icb_firmware | v < m20kt52a | m20kt52a |
| lenovo v530-24icb_firmware | v < m20kt52a | m20kt52a |
| lenovo v530s-07icb_firmware | v < m22kt48a | m22kt48a |
| lenovo v530s-07icr_firmware | v < m30kt26a | m30kt26a |
| lenovo v540-24iwl_firmware | v < m29kt39a | m29kt39a |
| lenovo v55t_gen_2_13acn_firmware | v < o5jkt20a | o5jkt20a |
| lenovo v55t-15api_firmware | v < o4dkt43a | o4dkt43a |
| lenovo v55t-15are_firmware | v < o4dkt43a | o4dkt43a |
| lenovo yangtian_afq150_firmware | v < fwktbaa | fwktbaa |
| lenovo yta8900f_firmware | v < fwktbaa | fwktbaa |
| lenovo yoga_a940-27icb_firmware | v < o43kt43a | o43kt43a |
| lenovo thinkedge_se30_firmware | v < m3fkt29a | m3fkt29a |
| lenovo thinksmart_core_\&_controller_full_room_kit\ | _microsoft_teams_rooms_firmware, _zoom_rooms_firmware | — |
| lenovo thinksmart_core_\&_controller_kit\ | _microsoft_teams_rooms_firmware, _zoom_rooms_firmware | — |
| lenovo thinksmart_core_device_for_logitech_firmware | No range specified | — |
| lenovo thinksmart_core_device_for_poly_firmware | No range specified | — |
| lenovo thinksmart_core_device\ | _zoom_rooms_firmware | — |
| lenovo thinksmart_hub_teams_firmware | v < m2xkt20a | m2xkt20a |
| lenovo thinksmart_hub_zoom_firmware | v < m2xkt20a | m2xkt20a |
| lenovo thinkstation_p310_firmware | v < fwktbaa | fwktbaa |
| lenovo thinkstation_p320_tiny_firmware | v < m1akt56a | m1akt56a |
| lenovo thinkstation_p330_tiny_firmware | v < m1ukt67a | m1ukt67a |
| lenovo thinkstation_p340_tiny_firmware | v < m2wkt57a | m2wkt57a |
| lenovo thinkstation_p340_firmware | v < s08kt50a | s08kt50a |
| lenovo thinkstation_p348_firmware | v < m3kkt34a | m3kkt34a |
| lenovo thinkstation_p350_tiny_firmware | v < m3jkt34a | m3jkt34a |
| lenovo thinkstation_p350_firmware | v ≤ s0akt34a | — |
| lenovo thinkstation_p520_firmware | v < s03kt55a | s03kt55a |
| lenovo thinkstation_p520c_firmware | v < s03kt55a | s03kt55a |
| lenovo thinkstation_p620_firmware | v < s07kt25a | s07kt25a |
| lenovo stadia_ggp-120_firmware | v < s03kt55a | s03kt55a |
| lenovo thinkstation_p318_firmware | v < m1akt56a | m1akt56a |
| lenovo thinksystem_st50_firmware | v < ite123e | ite123e |
| lenovo thinksystem_st58_firmware | v < ite123e | ite123e |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.