CVE-2022-40135

EPSS 0.04%
Published 30.01.2023 22:15:12
Last modified 21.11.2024 07:20:56
Source psirt@lenovo.com
Teams watchlist Login
Open Login

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Lenovo ≫ Ideacentre C5-14imb05 Firmware Version < o4hkt38a

Lenovo ≫ Ideacentre C5-14imb05 Version-

Lenovo ≫ Thinkcentre E96z Firmware Version < m26kt22a

Lenovo ≫ Thinkcentre E96z Version-

Lenovo ≫ Ideacentre 3 07iab7 Firmware Version < m49kt1da

Lenovo ≫ Ideacentre 3 07iab7 Version-

Lenovo ≫ Ideacentre 3-07imb05 Firmware Version < m2vkt1da

Lenovo ≫ Ideacentre 3-07imb05 Version-

Lenovo ≫ Ideacentre 5 14iab7 Firmware Version < m42kt40a

Lenovo ≫ Ideacentre 5 14iab7 Version-

Lenovo ≫ Ideacentre 5-14acn6 Firmware Version < o5ekt21a

Lenovo ≫ Ideacentre 5-14acn6 Version-

Lenovo ≫ Ideacentre 5-14imb05 Firmware Version < o4hkt38a

Lenovo ≫ Ideacentre 5-14imb05 Version-

Lenovo ≫ Ideacentre 5-14iob6 Firmware Version < m3gkt33a

Lenovo ≫ Ideacentre 5-14iob6 Version-

Lenovo ≫ Ideacentre Creator 5-14iob6 Firmware Version <= m3gkt33a

Lenovo ≫ Ideacentre Creator 5-14iob6 Version-

Lenovo ≫ Ideacentre G5-14imb05 Firmware Version < o4hkt38a

Lenovo ≫ Ideacentre G5-14imb05 Version-

Lenovo ≫ Ideacentre Gaming 5 17acn7 Firmware Version < o5ekt21a

Lenovo ≫ Ideacentre Gaming 5 17acn7 Version-

Lenovo ≫ Ideacentre Gaming 5 17iab7 Firmware Version < m42kt40a

Lenovo ≫ Ideacentre Gaming 5 17iab7 Version-

Lenovo ≫ Ideacentre Gaming 5-14acn6 Firmware Version < o5ekt21a

Lenovo ≫ Ideacentre Gaming 5-14acn6 Version-

Lenovo ≫ Ideacentre Gaming 5-14iob6 Firmware Version < m3gkt33a

Lenovo ≫ Ideacentre Gaming 5-14iob6 Version-

Lenovo ≫ Legion C530-19icb Firmware Version < o4bkt20a

Lenovo ≫ Legion C530-19icb Version-

Lenovo ≫ Legion T5-26iob6 Firmware Version < o54kt1da

Lenovo ≫ Legion T5-26iob6 Version-

Lenovo ≫ Legion T5-28icb05 Firmware Version < o4bkt20a

Lenovo ≫ Legion T5-28icb05 Version-

Lenovo ≫ Legion T530-28apr Firmware Version < o4gkt16a

Lenovo ≫ Legion T530-28apr Version-

Lenovo ≫ Legion T530-28icb Firmware Version < o4bkt20a

Lenovo ≫ Legion T530-28icb Version-

Lenovo ≫ Legion T7-34imz5 Firmware Version < o4lkt1ea

Lenovo ≫ Legion T7-34imz5 Version-

Lenovo ≫ Thinkcentre M60e Tiny Firmware Version < m3skt21a

Lenovo ≫ Thinkcentre M60e Tiny Version-

Lenovo ≫ Thinkcentre M625q Firmware Version < m1wkt45a

Lenovo ≫ Thinkcentre M625q Version-

Lenovo ≫ Thinkcentre M630e Firmware Version < m28kt37a

Lenovo ≫ Thinkcentre M630e Version-

Lenovo ≫ Thinkcentre M70a Firmware Version < m2skt25a

Lenovo ≫ Thinkcentre M70a Version-

Lenovo ≫ Thinkcentre M70a Gen 2 Firmware Version < m3nkt20a

Lenovo ≫ Thinkcentre M70a Gen 2 Version-

Lenovo ≫ Thinkcentre M70c Firmware Version < m2vkt1da

Lenovo ≫ Thinkcentre M70c Version-

Lenovo ≫ Thinkcentre M70q Firmware Version < m2wkt57a

Lenovo ≫ Thinkcentre M70q Version-

Lenovo ≫ Thinkcentre M70q Gen 2 Firmware Version < m2wkt57a

Lenovo ≫ Thinkcentre M70q Gen 2 Version-

Lenovo ≫ Thinkcentre M70q Gen 3 Firmware Version < m43kt16a

Lenovo ≫ Thinkcentre M70q Gen 3 Version-

Lenovo ≫ Thinkcentre M70s Gen 3 Firmware Version < m41kt2da

Lenovo ≫ Thinkcentre M70s Gen 3 Version-

Lenovo ≫ Thinkcentre M70t Gen 3 Firmware Version < m41kt2da

Lenovo ≫ Thinkcentre M70t Gen 3 Version-

Lenovo ≫ Thinkcentre M710e Firmware Version < m1zkt38a

Lenovo ≫ Thinkcentre M710e Version-

Lenovo ≫ Thinkcentre M710q Firmware Version < m1akt56a

Lenovo ≫ Thinkcentre M710q Version-

Lenovo ≫ Thinkcentre M710s Firmware Version < m16kt68a

Lenovo ≫ Thinkcentre M710s Version-

Lenovo ≫ Thinkcentre M710t Firmware Version < m16kt68a

Lenovo ≫ Thinkcentre M710t Version-

Lenovo ≫ Thinkcentre M715q Firmware Version < m11kt54a

Lenovo ≫ Thinkcentre M715q Version-

Lenovo ≫ Thinkcentre M715t Firmware Version < m2ckt4da

Lenovo ≫ Thinkcentre M715t Version-

Lenovo ≫ Thinkcentre M720e Firmware Version < m30kt26a

Lenovo ≫ Thinkcentre M720e Version-

Lenovo ≫ Thinkcentre M720q Firmware Version < m1ukt67a

Lenovo ≫ Thinkcentre M720q Version-

Lenovo ≫ Thinkcentre M720s Firmware Version < m1ukt67a

Lenovo ≫ Thinkcentre M720s Version-

Lenovo ≫ Thinkcentre M720t Firmware Version < m1ukt67a

Lenovo ≫ Thinkcentre M720t Version-

Lenovo ≫ Thinkcentre M725s Firmware Version < m25kt61a

Lenovo ≫ Thinkcentre M725s Version-

Lenovo ≫ Thinkcentre M75n Firmware Version < m33kt25a

Lenovo ≫ Thinkcentre M75n Version-

Lenovo ≫ Thinkcentre M75q Gen 2 Firmware Version < m47kt24a

Lenovo ≫ Thinkcentre M75q Gen 2 Version-

Lenovo ≫ Thinkcentre M75q-1 Firmware Version < m2fkt2da

Lenovo ≫ Thinkcentre M75q-1 Version-

Lenovo ≫ Thinkcentre M75s Gen 2 Firmware Version < m46kt2da

Lenovo ≫ Thinkcentre M75s Gen 2 Version-

Lenovo ≫ Thinkcentre M75s-1 Firmware Version < m2ckt4da

Lenovo ≫ Thinkcentre M75s-1 Version-

Lenovo ≫ Thinkcentre M75t Gen 2 Firmware Version < m46kt2da

Lenovo ≫ Thinkcentre M75t Gen 2 Version-

Lenovo ≫ Thinkcentre M80q Firmware Version < m2wkt57a

Lenovo ≫ Thinkcentre M80q Version-

Lenovo ≫ Thinkcentre M810z Firmware Version < m1ckt49a

Lenovo ≫ Thinkcentre M810z Version-

Lenovo ≫ Thinkcentre M818z Firmware Version < m1ekt25a

Lenovo ≫ Thinkcentre M818z Version-

Lenovo ≫ Thinkcentre M820z Firmware Version < m1nkt58a

Lenovo ≫ Thinkcentre M820z Version-

Lenovo ≫ Thinkcentre M90a Firmware Version < m2rkt52a

Lenovo ≫ Thinkcentre M90a Version-

Lenovo ≫ Thinkcentre M90a Gen2 Firmware Version < m3lkt26a

Lenovo ≫ Thinkcentre M90a Gen2 Version-

Lenovo ≫ Thinkcentre M90q Gen 2 Firmware Version < m3jkt34a

Lenovo ≫ Thinkcentre M90q Gen 2 Version-

Lenovo ≫ Thinkcentre M90q Tiny Firmware Version < m2wkt57a

Lenovo ≫ Thinkcentre M90q Tiny Version-

Lenovo ≫ Thinkcentre M910q Firmware Version < m1akt56a

Lenovo ≫ Thinkcentre M910q Version-

Lenovo ≫ Thinkcentre M910s Firmware Version < m1akt56a

Lenovo ≫ Thinkcentre M910s Version-

Lenovo ≫ Thinkcentre M910t Firmware Version < m1akt56a

Lenovo ≫ Thinkcentre M910t Version-

Lenovo ≫ Thinkcentre M910x Firmware Version < m1akt56a

Lenovo ≫ Thinkcentre M910x Version-

Lenovo ≫ Thinkcentre M920q Firmware Version < m1ukt67a

Lenovo ≫ Thinkcentre M920q Version-

Lenovo ≫ Thinkcentre M920s Firmware Version < m1ukt67a

Lenovo ≫ Thinkcentre M920s Version-

Lenovo ≫ Thinkcentre M920t Firmware Version < m1ukt67a

Lenovo ≫ Thinkcentre M920t Version-

Lenovo ≫ Thinkcentre M920x Firmware Version < m1ukt67a

Lenovo ≫ Thinkcentre M920x Version-

Lenovo ≫ Thinkcentre Neo 50s Gen 3 Firmware Version < m49kt1da

Lenovo ≫ Thinkcentre Neo 50s Gen 3 Version-

Lenovo ≫ Thinkcentre Neo 50t Gen 3 Firmware Version < m42kt40a

Lenovo ≫ Thinkcentre Neo 50t Gen 3 Version-

Lenovo ≫ Qitian A815 Firmware Version < m1rkt38a

Lenovo ≫ Qitian A815 Version-

Lenovo ≫ Qt M410 Firmware Version < m16kt68a

Lenovo ≫ Qt M410 Version-

Lenovo ≫ Qt B415 Firmware Version < m16kt68a

Lenovo ≫ Qt B415 Version-

Lenovo ≫ Qt M415 Firmware Version < m16kt68a

Lenovo ≫ Qt M415 Version-

Lenovo ≫ Ideacentre T540-15ama G Firmware Version < m2ckt4da

Lenovo ≫ Ideacentre T540-15ama G Version-

Lenovo ≫ Ideacentre T540-15ick Firmware Version < o4kkt16a

Lenovo ≫ Ideacentre T540-15ick Version-

Lenovo ≫ Thinkcentre E75 T/s Firmware Version < m16kt68a

Lenovo ≫ Thinkcentre E75 T/s Version-

Lenovo ≫ Thinkcentre M610 Firmware Version < m1akt56a

Lenovo ≫ Thinkcentre M610 Version-

Lenovo ≫ Thinkcentre M6600q Firmware Version < fwktbaa

Lenovo ≫ Thinkcentre M6600q Version-

Lenovo ≫ Thinkcentre M6600t Firmware Version < fwktbaa

Lenovo ≫ Thinkcentre M6600t Version-

Lenovo ≫ Thinkcentre M6600s Firmware Version < fwktbaa

Lenovo ≫ Thinkcentre M6600s Version-

Lenovo ≫ Ideacentre 3-07ada05 Firmware Version < o4fkt29a

Lenovo ≫ Ideacentre 3-07ada05 Version-

Lenovo ≫ Ideacentre 5-14are05 Firmware Version < o4zkt29a

Lenovo ≫ Ideacentre 5-14are05 Version-

Lenovo ≫ Ideacentre G5-14amr05 Firmware Version < o4zkt29a

Lenovo ≫ Ideacentre G5-14amr05 Version-

Lenovo ≫ Ideacentre 510-15ick Firmware Version < o4kkt16a

Lenovo ≫ Ideacentre 510-15ick Version-

Lenovo ≫ Ideacentre 510a-15arr Firmware Version < o4dkt43a

Lenovo ≫ Ideacentre 510a-15arr Version-

Lenovo ≫ Ideacentre 510a-15ick Firmware Version < o4kkt16a

Lenovo ≫ Ideacentre 510a-15ick Version-

Lenovo ≫ Ideacentre 510s-07icb Firmware Version < m22kt47a

Lenovo ≫ Ideacentre 510s-07icb Version-

Lenovo ≫ Ideacentre 510s-07ick Firmware Version < m30kt26a

Lenovo ≫ Ideacentre 510s-07ick Version-

Lenovo ≫ Ideacentre 720-18apr Firmware Version < m25kt61a

Lenovo ≫ Ideacentre 720-18apr Version-

Lenovo ≫ Ideacentre A340-22igm Firmware Version < o51kt12a

Lenovo ≫ Ideacentre A340-22igm Version-

Lenovo ≫ Ideacentre A340-24igm Firmware Version < o51kt12a

Lenovo ≫ Ideacentre A340-24igm Version-

Lenovo ≫ V30a-22iml Firmware Version < m37kt28a

Lenovo ≫ V30a-22iml Version-

Lenovo ≫ V30a-24iml Firmware Version < m37kt28a

Lenovo ≫ V30a-24iml Version-

Lenovo ≫ V330-20icb Firmware Version < m1qkt47a

Lenovo ≫ V330-20icb Version-

Lenovo ≫ V35s-07ada Firmware Version < o4fkt29a

Lenovo ≫ V35s-07ada Version-

Lenovo ≫ V50a-22imb Firmware Version < m36kt28a

Lenovo ≫ V50a-22imb Version-

Lenovo ≫ V50a-24imb Firmware Version < m36kt28a

Lenovo ≫ V50a-24imb Version-

Lenovo ≫ V50s-07imb Firmware Version < m2vkt1da

Lenovo ≫ V50s-07imb Version-

Lenovo ≫ V50t-13imb Firmware Version < o4hkt38a

Lenovo ≫ V50t-13imb Version-

Lenovo ≫ V50t-13iob G2 Firmware Version < m3gkt33a

Lenovo ≫ V50t-13iob G2 Version-

Lenovo ≫ V520 Firmware Version < m16kt68a

Lenovo ≫ V520 Version-

Lenovo ≫ V520s Firmware Version < m16kt68a

Lenovo ≫ V520s Version-

Lenovo ≫ V530-15arr Firmware Version < o4dkt43a

Lenovo ≫ V530-15arr Version-

Lenovo ≫ V530-15icb Firmware Version < m1ykt70a

Lenovo ≫ V530-15icb Version-

Lenovo ≫ V530-15icb Firmware Version < m1ykt70a

Lenovo ≫ V530-15icb Version-

Lenovo ≫ V530-15icr Firmware Version < m2ykt31a

Lenovo ≫ V530-15icr Version-

Lenovo ≫ V530-22icb Firmware Version < m20kt52a

Lenovo ≫ V530-22icb Version-

Lenovo ≫ V530-24icb Firmware Version < m20kt52a

Lenovo ≫ V530-24icb Version-

Lenovo ≫ V530s-07icb Firmware Version < m22kt48a

Lenovo ≫ V530s-07icb Version-

Lenovo ≫ V530s-07icr Firmware Version < m30kt26a

Lenovo ≫ V530s-07icr Version-

Lenovo ≫ V540-24iwl Firmware Version < m29kt39a

Lenovo ≫ V540-24iwl Version-

Lenovo ≫ V55t Gen 2 13acn Firmware Version < o5jkt20a

Lenovo ≫ V55t Gen 2 13acn Version-

Lenovo ≫ V55t-15api Firmware Version < o4dkt43a

Lenovo ≫ V55t-15api Version-

Lenovo ≫ V55t-15are Firmware Version < o4dkt43a

Lenovo ≫ V55t-15are Version-

Lenovo ≫ Yangtian Afq150 Firmware Version < fwktbaa

Lenovo ≫ Yangtian Afq150 Version-

Lenovo ≫ Yta8900f Firmware Version < fwktbaa

Lenovo ≫ Yta8900f Version-

Lenovo ≫ Yoga A940-27icb Firmware Version < o43kt43a

Lenovo ≫ Yoga A940-27icb Version-

Lenovo ≫ Thinkedge Se30 Firmware Version < m3fkt29a

Lenovo ≫ Thinkedge Se30 Version-

Lenovo ≫ Thinksmart Core & Controller Full Room Kit: Microsoft Teams Rooms Firmware Version-

Lenovo ≫ Thinksmart Core & Controller Full Room Kit: Microsoft Teams Rooms Version-

Lenovo ≫ Thinksmart Core & Controller Full Room Kit: Zoom Rooms Firmware Version-

Lenovo ≫ Thinksmart Core & Controller Full Room Kit: Zoom Rooms Version-

Lenovo ≫ Thinksmart Core & Controller Kit: Microsoft Teams Rooms Firmware Version-

Lenovo ≫ Thinksmart Core & Controller Kit: Microsoft Teams Rooms Version-

Lenovo ≫ Thinksmart Core & Controller Kit: Zoom Rooms Firmware Version-

Lenovo ≫ Thinksmart Core & Controller Kit: Zoom Rooms Version-

Lenovo ≫ Thinksmart Core Device For Logitech Firmware Version-

Lenovo ≫ Thinksmart Core Device For Logitech Version-

Lenovo ≫ Thinksmart Core Device For Poly Firmware Version-

Lenovo ≫ Thinksmart Core Device For Poly Version-

Lenovo ≫ Thinksmart Core Device: Zoom Rooms Firmware Version-

Lenovo ≫ Thinksmart Core Device: Zoom Rooms Version-

Lenovo ≫ Thinksmart Hub Teams Firmware Version < m2xkt20a

Lenovo ≫ Thinksmart Hub Teams Version-

Lenovo ≫ Thinksmart Hub Zoom Firmware Version < m2xkt20a

Lenovo ≫ Thinksmart Hub Zoom Version-

Lenovo ≫ Thinkstation P310 Firmware Version < fwktbaa

Lenovo ≫ Thinkstation P310 Version-

Lenovo ≫ Thinkstation P320 Tiny Firmware Version < m1akt56a

Lenovo ≫ Thinkstation P320 Tiny Version-

Lenovo ≫ Thinkstation P330 Tiny Firmware Version < m1ukt67a

Lenovo ≫ Thinkstation P330 Tiny Version-

Lenovo ≫ Thinkstation P340 Tiny Firmware Version < m2wkt57a

Lenovo ≫ Thinkstation P340 Tiny Version-

Lenovo ≫ Thinkstation P340 Firmware Version < s08kt50a

Lenovo ≫ Thinkstation P340 Version-

Lenovo ≫ Thinkstation P348 Firmware Version < m3kkt34a

Lenovo ≫ Thinkstation P348 Version-

Lenovo ≫ Thinkstation P350 Tiny Firmware Version < m3jkt34a

Lenovo ≫ Thinkstation P350 Tiny Version-

Lenovo ≫ Thinkstation P350 Firmware Version <= s0akt34a

Lenovo ≫ Thinkstation P350 Version-

Lenovo ≫ Thinkstation P520 Firmware Version < s03kt55a

Lenovo ≫ Thinkstation P520 Version-

Lenovo ≫ Thinkstation P520c Firmware Version < s03kt55a

Lenovo ≫ Thinkstation P520c Version-

Lenovo ≫ Thinkstation P620 Firmware Version < s07kt25a

Lenovo ≫ Thinkstation P620 Version-

Lenovo ≫ Stadia Ggp-120 Firmware Version < s03kt55a

Lenovo ≫ Stadia Ggp-120 Version-

Lenovo ≫ Thinkstation P318 Firmware Version < m1akt56a

Lenovo ≫ Thinkstation P318 Version-

Lenovo ≫ Thinksystem St50 Firmware Version < ite123e

Lenovo ≫ Thinksystem St50 Version-

Lenovo ≫ Thinksystem St58 Firmware Version < ite123e

Lenovo ≫ Thinksystem St58 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.04%	0.1

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.4	0.8	3.6	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
psirt@lenovo.com	4.4	0.8	3.6	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://support.lenovo.com/us/en/product_security/LEN-94953

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-40135

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-40135

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-40135

EUVD