medium
4.4
CWE
125
Advisory Published
Updated

CVE-2022-40135

First published: Mon Jan 30 2023(Updated: )

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Credit: psirt@lenovo.com

Affected SoftwareAffected VersionHow to fix
Lenovo Ideacentre C5-14IMB05<o4hkt38a
Lenovo Ideacentre C5-14MB05 Firmware
Lenovo ThinkCentre E96z Firmware<m26kt22a
Lenovo ThinkCentre E96z Firmware
Lenovo Ideacentre 3 07IAB7 Firmware<m49kt1da
Lenovo Ideacentre 3 07IAB7 Firmware
Lenovo Ideacentre 3-07IMB05 Firmware<m2vkt1da
Lenovo Ideacentre 3-07IMB05 Firmware
Lenovo Ideacentre 5 14iab7 Firmware<m42kt40a
Lenovo Ideacentre 5 14iab7 firmware
Lenovo Ideacentre Gaming 5-14acn6 Firmware<o5ekt21a
Lenovo Ideacentre Gaming 5-14acn6 Firmware
Lenovo Ideacentre 5-14IMB05 Firmware<o4hkt38a
Lenovo ideacentre 5-14imb05 firmware
Lenovo Ideacentre Creator 5-14iob6 Firmware<m3gkt33a
Lenovo Ideacentre Gaming 5-14iob6 Firmware
Lenovo Ideacentre Creator 5-14iob6 Firmware<=m3gkt33a
Lenovo Ideacentre Creator 5-14iob6 Firmware
Lenovo Ideacentre G5-14IMB05 Firmware<o4hkt38a
Lenovo IdeaCentre G5-14AMR05 Firmware
Lenovo Ideacentre Gaming 5 17ACN7 Firmware<o5ekt21a
Lenovo Ideacentre Gaming 5 17acn7 Firmware
Lenovo Ideacentre Gaming 5 17iab7<m42kt40a
Lenovo Ideacentre Gaming 5 17IAB7
Lenovo Ideacentre Gaming 5-14acn6 Firmware<o5ekt21a
Lenovo Ideacentre Gaming 5-14acn6 Firmware
Lenovo Ideacentre Creator 5-14iob6<m3gkt33a
Lenovo Ideacentre Gaming 5-14iob6 Firmware
Lenovo Legion C530-19ICB<o4bkt20a
Lenovo Legion C530-19ICB Firmware
Lenovo Legion T5-26iob6 Firmware<o54kt1da
Lenovo Legion T5-26iob6 Firmware
Lenovo Legion T5-28ICB05 Firmware<o4bkt20a
Lenovo Legion T5-28ICB05 Firmware
Lenovo Legion T530-28APR<o4gkt16a
Lenovo Legion T530-28APR Firmware
Lenovo Legion T530-28ICB<o4bkt20a
Lenovo Legion T530-28ICB Firmware
Lenovo Legion T7-34IMZ5<o4lkt1ea
Lenovo Legion T7-34IMZ5
Lenovo ThinkCentre M60e Tiny<m3skt21a
Lenovo ThinkCentre M60e Tiny
Lenovo ThinkCentre M625q<m1wkt45a
Lenovo ThinkCentre M625q Firmware
Lenovo ThinkCentre M630e<m28kt37a
Lenovo ThinkCentre M630e
Lenovo ThinkCentre M70a<m2skt25a
Lenovo Thinkcentre M70a Gen 2
Lenovo Thinkcentre M70a Gen 2<m3nkt20a
Lenovo Thinkcentre M70a Gen 2
Lenovo Thinkcentre M70c Firmware<m2vkt1da
Lenovo Thinkcentre M70c Firmware
Lenovo Thinkcentre M70q Firmware<m2wkt57a
Lenovo Thinkcentre M70q Firmware
Lenovo Thinkcentre M70q Gen 2 Firmware<m2wkt57a
Lenovo Thinkcentre M70q Gen 2 Firmware
Lenovo Thinkcentre M70q Gen 3<m43kt16a
Lenovo Thinkcentre M70q Firmware
Lenovo ThinkCentre M70s Gen 3<m41kt2da
Lenovo ThinkCentre M70s
Lenovo ThinkCentre M70t Gen 3 Firmware<m41kt2da
Lenovo Ideacentre M70t Gen 3 Firmware
Lenovo ThinkCentre M710e Firmware<m1zkt38a
Lenovo Ideacentre M710e
Lenovo Thinkcentre M710q<m1akt56a
Lenovo Thinkcentre M710q
Lenovo ThinkCentre M710t/s Firmware<m16kt68a
Lenovo ThinkCentre M710s Firmware
Lenovo Ideacentre M710t Firmware<m16kt68a
Lenovo ThinkCentre M710t/s
Lenovo ThinkCentre M715q RR Firmware<m11kt54a
Lenovo ThinkCentre M715q Firmware
Lenovo ThinkCentre M715t/S Firmware<m2ckt4da
Lenovo Ideacentre M715t
Lenovo ThinkCentre M720e<m30kt26a
Lenovo ThinkCentre M720e
Lenovo ThinkCentre M720q Firmware<m1ukt67a
Lenovo ThinkCentre M720q
Lenovo ThinkCentre M720s Firmware<m1ukt67a
Lenovo ThinkCentre M720s
Lenovo Ideacentre M720t Firmware<m1ukt67a
Lenovo ThinkCentre M720t
Lenovo ThinkCentre M725s Firmware<m25kt61a
Lenovo ThinkCentre M725s Firmware
Lenovo Thinkcentre M75n<m33kt25a
Lenovo Thinkcentre M75n
Lenovo Ideacentre M75q Gen 2<m47kt24a
Lenovo Ideacentre M75q Gen 2
Lenovo Ideacentre M75q-1 Firmware<m2fkt2da
Lenovo Ideacentre M75q-1 Firmware
Lenovo Ideacentre M75s Gen 2 Firmware<m46kt2da
Lenovo Ideacentre M75s Gen 2 Firmware
Lenovo Ideacentre M75s-1 Firmware<m2ckt4da
Lenovo Ideacentre M75s-1 Firmware
Lenovo Ideacentre M75t Gen 2<m46kt2da
Lenovo Thinkcentre M75t Gen 2 Firmware
Lenovo Ideacentre M80q<m2wkt57a
Lenovo Ideacentre M80q
Lenovo ThinkCentre M810z All-in-One Firmware<m1ckt49a
Lenovo ThinkCentre M810z All-in-One
Lenovo ThinkCentre M818z Firmware<m1ekt25a
Lenovo ThinkCentre M818z Firmware
Lenovo Thinkcentre M820z All-in-one<m1nkt58a
Lenovo Thinkcentre M820z All-in-one
Lenovo Thinkcentre M90a Gen 2 Firmware<m2rkt52a
Lenovo ThinkCentre M90a Tiny
Lenovo Thinkcentre M90a Gen 2 Firmware<m3lkt26a
Lenovo Thinkcentre M90a Gen 2 Firmware
Lenovo Ideacentre M90q Gen 2 Firmware<m3jkt34a
Lenovo Ideacentre M90q Gen 2 Firmware
Lenovo Ideacentre M90q Tiny Firmware<m2wkt57a
Lenovo ThinkCentre M90q Gen 3
Lenovo ThinkCentre M910q Firmware<m1akt56a
Lenovo Ideacentre M910q
Lenovo ThinkCentre M910q Firmware<m1akt56a
Lenovo ThinkCentre M910s Firmware
Lenovo Ideacentre M910t Firmware<m1akt56a
Lenovo ThinkCentre M910t/s
Lenovo ThinkCentre M910q Firmware<m1akt56a
Lenovo ThinkCentre M910x Firmware
Lenovo Ideacentre M920q Firmware<m1ukt67a
Lenovo ThinkCentre M920q
Lenovo ThinkCentre M920s Firmware<m1ukt67a
Lenovo ThinkCentre M920s Firmware
Lenovo Ideacentre M920t Firmware<m1ukt67a
Lenovo ThinkCentre M920t
Lenovo Ideacentre M920x Firmware<m1ukt67a
Lenovo Ideacentre M920x
Lenovo Thinkcentre Neo 50s Gen 3 Firmware<m49kt1da
Lenovo Thinkcentre Neo 50s Gen 3 Firmware
Lenovo ThinkCentre Neo 50T Gen 3 Firmware<m42kt40a
Lenovo ThinkCentre Neo 50T Gen 3 Firmware
Lenovo Qitian A815 Firmware<m1rkt38a
Lenovo Qitian A815 Firmware
Lenovo QT M410<m16kt68a
Lenovo QT M410 Firmware
Lenovo ThinkCentre QT B415 Firmware<m16kt68a
Lenovo QT B415
Lenovo QT M415<m16kt68a
Lenovo QT M415 Firmware
Lenovo Ideacentre T540-15AMA G Firmware<m2ckt4da
Lenovo Ideacentre T540-15AMA G Firmware
Lenovo Ideacentre T540-15ICK Firmware<o4kkt16a
Lenovo Ideacentre T540-15ick Firmware
Lenovo ThinkCentre E75 T/S Firmware<m16kt68a
Lenovo ThinkCentre E75 T/S
Lenovo ThinkCentre M610 Firmware<m1akt56a
Lenovo ThinkCentre M610
Lenovo ThinkCentre M6600q Firmware<fwktbaa
Lenovo ThinkCentre M6600
Lenovo ThinkCentre M6600s Firmware<fwktbaa
Lenovo ThinkCentre M6600
Lenovo ThinkCentre M6600s Firmware<fwktbaa
Lenovo ThinkCentre M6600
Lenovo Ideacentre 3-07ADA05 Firmware<o4fkt29a
Lenovo Ideacentre 3
Lenovo Ideacentre 5-14are05 Firmware<o4zkt29a
Lenovo Ideacentre 5-14are05 Firmware
Lenovo Ideacentre G5-14AMR05 firmware<o4zkt29a
Lenovo ideacentre G5-14AMR05 firmware
Lenovo ideacentre 510a-15ick firmware<o4kkt16a
Lenovo ideacentre 510a-15ick
Lenovo ideacentre 510a-15arr<o4dkt43a
Lenovo ideacentre 510a-15arr firmware
Lenovo ideacentre 510a-15ick firmware<o4kkt16a
Lenovo ideacentre 510a-15ick firmware
Lenovo ideacentre 510s-07icb<m22kt47a
Lenovo ideacentre 510s-07icb firmware
Lenovo ideacentre 510s-07ick<m30kt26a
Lenovo ideacentre 510s-07ick firmware
Lenovo ideacentre 720-18icb firmware<m25kt61a
Lenovo Ideacentre 720-18APR Firmware
Lenovo Ideacentre A340-22igm<o51kt12a
Lenovo Ideacentre A340-22igm Firmware
Lenovo Ideacentre A340-24IGM All-in-One<o51kt12a
Lenovo Ideacentre A340-24IGM All-in-One
Lenovo V30a-22IML Firmware<m37kt28a
Lenovo V30a-22iml Firmware
Lenovo v30a-24iml<m37kt28a
Lenovo V30a-24IML
Lenovo V330 Firmware<m1qkt47a
Lenovo v330-20icb all-in-one
Lenovo V35s-07ADA<o4fkt29a
Lenovo V35s-07ada Firmware
Lenovo V50a-22IMB Firmware<m36kt28a
Lenovo V50a-22IMB Firmware
Lenovo V50a-24imb<m36kt28a
Lenovo V50a-24imb
Lenovo V50s-07imb<m2vkt1da
Lenovo V50s-07imb
Lenovo V50t-13imb G2 Firmware<o4hkt38a
Lenovo V50t-13imb G2 Firmware
Lenovo V50t-13iob G2<m3gkt33a
Lenovo V50t-13iob
Lenovo V520<m16kt68a
Lenovo V520 Firmware
Lenovo V520s<m16kt68a
Lenovo V520s
Lenovo V530-15ARR Firmware<o4dkt43a
Lenovo V530-15ARR Firmware
Lenovo V530-15ICB<m1ykt70a
Lenovo V530
Lenovo V530-15ICR<m2ykt31a
Lenovo V530
Lenovo v530-22icb firmware<m20kt52a
Lenovo V530-22ICB (YT S4350)
Lenovo v530-24ICB Firmware<m20kt52a
Lenovo v530-24ICB Firmware
Lenovo V530s-07ICB<m22kt48a
Lenovo v530s-07icb firmware
Lenovo V530s-07ICB<m30kt26a
Lenovo V530s-07ICB
Lenovo v540s-13 firmware<m29kt39a
Lenovo V540-24IWL All-in-One
Lenovo V55t Gen 2 13ACN<o5jkt20a
Lenovo V55t Gen 2 13ACN
Lenovo V55t-15API Firmware<o4dkt43a
Lenovo V55t-15API
Lenovo V55t-15ARE Firmware<o4dkt43a
Lenovo V55t-15are Firmware
Lenovo Yangtian AFQ150 Firmware<fwktbaa
Lenovo Yangtian AFQ150 Firmware
Lenovo YTA8900F Firmware<fwktbaa
Lenovo YTA8900F Firmware
Lenovo Yoga A940-27ICB<o43kt43a
Lenovo Yoga A940-27ICB Firmware
Lenovo ThinkEdge SE30 Firmware<m3fkt29a
Lenovo ThinkEdge SE30 Firmware
Lenovo Thinksmart Core & Controller Full Room Kit=_microsoft_teams_rooms_firmware
Lenovo Thinksmart Core & Controller Full Room Kit=_microsoft_teams_rooms
Lenovo Thinksmart Core & Controller Full Room Kit=_zoom_rooms_firmware
Lenovo Thinksmart Core & Controller Full Room Kit=_zoom_rooms
Lenovo Thinksmart Core & Controller Kit=_microsoft_teams_rooms_firmware
Lenovo Thinksmart Core & Controller Kit=_microsoft_teams_rooms
Lenovo Thinksmart Core & Controller Kit=_zoom_rooms_firmware
Lenovo Thinksmart Core & Controller Kit=_zoom_rooms
Lenovo ThinkSmart Core Device for Logitech
Lenovo ThinkSmart Core Device
Lenovo Thinksmart Core Device
Lenovo Thinksmart Core Device
Lenovo Thinksmart Core Device=_zoom_rooms_firmware
Lenovo Thinksmart Core Device=_zoom_rooms
Lenovo Thinksmart Hub Teams<m2xkt20a
Lenovo ThinkSmart Hub for Microsoft Teams
Lenovo ThinkSmart Hub Zoom Firmware<m2xkt20a
Lenovo ThinkSmart Hub Zoom
Lenovo Thinkstation P310 Workstation Firmware<fwktbaa
Lenovo Thinkstation P310 Workstation
Lenovo Thinkstation P320 Tiny Workstation Firmware<m1akt56a
Lenovo Thinkstation P320 Tiny Workstation
Lenovo ThinkStation P330 Tiny Workstation Firmware<m1ukt67a
Lenovo ThinkStation P330 Tiny
Lenovo ThinkStation P340t Firmware<m2wkt57a
Lenovo Thinkstation P340 Tiny Workstation
Lenovo Thinkstation P340 Tiny Workstation Firmware<s08kt50a
Lenovo ThinkStation P340s Firmware
Lenovo ThinkStation P348 Workstation Firmware<m3kkt34a
Lenovo Thinkstation P348
Lenovo ThinkStation P350 Tiny Firmware<m3jkt34a
Lenovo Thinkstation P350 Tiny Workstation
Lenovo ThinkStation P350 Firmware<=s0akt34a
Lenovo Thinkstation P350 Workstation
Lenovo ThinkStation P520<s03kt55a
Lenovo Thinkstation P520c
Lenovo Thinkstation P520c<s03kt55a
Lenovo Thinkstation P520c Workstation Firmware
Lenovo ThinkStation P620 Workstation Firmware<s07kt25a
Lenovo ThinkStation P620 Workstation
Lenovo Thinkstation Stadia GGP-120 Firmware<s03kt55a
Lenovo Thinkstation Stadia GGP-120 Firmware
Lenovo Thinkstation P318 Firmware<m1akt56a
Lenovo Thinkstation P318 Firmware
Lenovo ThinkSystem ST50 Firmware<ite123e
Lenovo ThinkSystem ST50 Firmware
Lenovo ThinkSystem ST58 Firmware<ite123e
Lenovo ThinkSystem ST58 Firmware

Remedy

Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-94953.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2022-40135?

    CVE-2022-40135 has been assigned a medium severity rating due to its potential for information leak.

  • How do I fix CVE-2022-40135?

    To fix CVE-2022-40135, update the affected firmware on your Lenovo devices to the latest version available from Lenovo's support site.

  • Which Lenovo models are affected by CVE-2022-40135?

    CVE-2022-40135 affects various Lenovo models including Ideacentre and ThinkCentre series with specific firmware versions.

  • What kind of information can be leaked due to CVE-2022-40135?

    CVE-2022-40135 may allow an attacker with local access to read sensitive SMM memory contents from the affected devices.

  • Is local access required to exploit CVE-2022-40135?

    Yes, local access is required to exploit CVE-2022-40135, as it involves reading SMM memory.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203