CVE-2022-40135: Medium severity lenovo ideacentre c5-14imb05 vulnerability

Published Jan 30, 2023
·
Updated

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Affected Software

276 affected components
Lenovo Ideacentre C5-14imb05 Firmware<o4hkt38a
Lenovo Ideacentre C5-14imb05
Lenovo Thinkcentre E96z Firmware<m26kt22a
Lenovo Thinkcentre E96z
Lenovo Ideacentre 3 07iab7 Firmware<m49kt1da
Lenovo Ideacentre 3 07iab7
Lenovo Ideacentre 3-07imb05 Firmware<m2vkt1da
Lenovo Ideacentre 3-07imb05
Lenovo Ideacentre 5 14iab7 Firmware<m42kt40a
Lenovo Ideacentre 5 14iab7
Lenovo Ideacentre 5-14acn6 Firmware<o5ekt21a
Lenovo Ideacentre 5-14acn6
Lenovo Ideacentre 5-14imb05 Firmware<o4hkt38a
Lenovo Ideacentre 5-14imb05
Lenovo Ideacentre 5-14iob6 Firmware<m3gkt33a
Lenovo Ideacentre 5-14iob6
Lenovo Ideacentre Creator 5-14iob6 Firmware<=m3gkt33a
Lenovo Ideacentre Creator 5-14iob6
Lenovo Ideacentre G5-14imb05 Firmware<o4hkt38a
Lenovo Ideacentre G5-14imb05
Lenovo Ideacentre Gaming 5 17acn7 Firmware<o5ekt21a
Lenovo Ideacentre Gaming 5 17acn7
Lenovo Ideacentre Gaming 5 17iab7 Firmware<m42kt40a
Lenovo Ideacentre Gaming 5 17iab7
Lenovo Ideacentre Gaming 5-14acn6 Firmware<o5ekt21a
Lenovo Ideacentre Gaming 5-14acn6
Lenovo Ideacentre Gaming 5-14iob6 Firmware<m3gkt33a
Lenovo Ideacentre Gaming 5-14iob6
Lenovo Legion C530-19icb Firmware<o4bkt20a
Lenovo Legion C530-19icb
Lenovo Legion T5-26iob6 Firmware<o54kt1da
Lenovo Legion T5-26iob6
Lenovo Legion T5-28icb05 Firmware<o4bkt20a
Lenovo Legion T5-28icb05
Lenovo Legion T530-28apr Firmware<o4gkt16a
Lenovo Legion T530-28apr
Lenovo Legion T530-28icb Firmware<o4bkt20a
Lenovo Legion T530-28icb
Lenovo Legion T7-34imz5 Firmware<o4lkt1ea
Lenovo Legion T7-34imz5
Lenovo Thinkcentre M60e Tiny Firmware<m3skt21a
Lenovo Thinkcentre M60e Tiny
Lenovo Thinkcentre M625q Firmware<m1wkt45a
Lenovo Thinkcentre M625q
Lenovo Thinkcentre M630e Firmware<m28kt37a
Lenovo Thinkcentre M630e
Lenovo Thinkcentre M70a Firmware<m2skt25a
Lenovo Thinkcentre M70a
Lenovo Thinkcentre M70a Gen 2 Firmware<m3nkt20a
Lenovo Thinkcentre M70a Gen 2
Lenovo Thinkcentre M70c Firmware<m2vkt1da
Lenovo Thinkcentre M70c
Lenovo Thinkcentre M70q Firmware<m2wkt57a
Lenovo Thinkcentre M70q
Lenovo Thinkcentre M70q Gen 2 Firmware<m2wkt57a
Lenovo Thinkcentre M70q Gen 2
Lenovo Thinkcentre M70q Gen 3 Firmware<m43kt16a
Lenovo Thinkcentre M70q Gen 3
Lenovo Thinkcentre M70s Gen 3 Firmware<m41kt2da
Lenovo Thinkcentre M70s Gen 3
Lenovo Thinkcentre M70t Gen 3 Firmware<m41kt2da
Lenovo Thinkcentre M70t Gen 3
Lenovo Thinkcentre M710e Firmware<m1zkt38a
Lenovo Thinkcentre M710e
Lenovo Thinkcentre M710q Firmware<m1akt56a
Lenovo Thinkcentre M710q
Lenovo Thinkcentre M710s Firmware<m16kt68a
Lenovo ThinkCentre M710s
Lenovo Thinkcentre M710t Firmware<m16kt68a
Lenovo Thinkcentre M710t
Lenovo Thinkcentre M715q Firmware<m11kt54a
Lenovo Thinkcentre M715q
Lenovo Thinkcentre M715t Firmware<m2ckt4da
Lenovo Thinkcentre M715t
Lenovo Thinkcentre M720e Firmware<m30kt26a
Lenovo Thinkcentre M720e
Lenovo Thinkcentre M720q Firmware<m1ukt67a
Lenovo Thinkcentre M720q
Lenovo Thinkcentre M720s Firmware<m1ukt67a
Lenovo Thinkcentre M720s
Lenovo Thinkcentre M720t Firmware<m1ukt67a
Lenovo Thinkcentre M720t
Lenovo Thinkcentre M725s Firmware<m25kt61a
Lenovo Thinkcentre M725s
Lenovo Thinkcentre M75n Firmware<m33kt25a
Lenovo Thinkcentre M75n
Lenovo Thinkcentre M75q Gen 2 Firmware<m47kt24a
Lenovo Thinkcentre M75q Gen 2
Lenovo Thinkcentre M75q-1 Firmware<m2fkt2da
Lenovo Thinkcentre M75q-1
Lenovo Thinkcentre M75s Gen 2 Firmware<m46kt2da
Lenovo Thinkcentre M75s Gen 2
Lenovo Thinkcentre M75s-1 Firmware<m2ckt4da
Lenovo Thinkcentre M75s-1
Lenovo Thinkcentre M75t Gen 2 Firmware<m46kt2da
Lenovo Thinkcentre M75t Gen 2
Lenovo Thinkcentre M80q Firmware<m2wkt57a
Lenovo Thinkcentre M80q
Lenovo Thinkcentre M810z Firmware<m1ckt49a
Lenovo Thinkcentre M810z
Lenovo Thinkcentre M818z Firmware<m1ekt25a
Lenovo Thinkcentre M818z
Lenovo Thinkcentre M820z Firmware<m1nkt58a
Lenovo Thinkcentre M820z
Lenovo Thinkcentre M90a Firmware<m2rkt52a
Lenovo Thinkcentre M90a
Lenovo Thinkcentre M90a Gen2 Firmware<m3lkt26a
Lenovo Thinkcentre M90a Gen2
Lenovo Thinkcentre M90q Gen 2 Firmware<m3jkt34a
Lenovo Thinkcentre M90q Gen 2
Lenovo Thinkcentre M90q Tiny Firmware<m2wkt57a
Lenovo Thinkcentre M90q Tiny
Lenovo Thinkcentre M910q Firmware<m1akt56a
Lenovo Thinkcentre M910q
Lenovo Thinkcentre M910s Firmware<m1akt56a
Lenovo Thinkcentre M910s
Lenovo Thinkcentre M910t Firmware<m1akt56a
Lenovo Thinkcentre M910t
Lenovo Thinkcentre M910x Firmware<m1akt56a
Lenovo Thinkcentre M910x
Lenovo Thinkcentre M920q Firmware<m1ukt67a
Lenovo Thinkcentre M920q
Lenovo Thinkcentre M920s Firmware<m1ukt67a
Lenovo Thinkcentre M920s
Lenovo Thinkcentre M920t Firmware<m1ukt67a
Lenovo Thinkcentre M920t
Lenovo Thinkcentre M920x Firmware<m1ukt67a
Lenovo Thinkcentre M920x
Lenovo Thinkcentre Neo 50s Gen 3 Firmware<m49kt1da
Lenovo Thinkcentre Neo 50s Gen 3
Lenovo Thinkcentre Neo 50t Gen 3 Firmware<m42kt40a
Lenovo Thinkcentre Neo 50t Gen 3
Lenovo Qitian A815 Firmware<m1rkt38a
Lenovo Qitian A815
Lenovo Qt M410 Firmware<m16kt68a
Lenovo Qt M410
Lenovo Qt B415 Firmware<m16kt68a
Lenovo Qt B415
Lenovo Qt M415 Firmware<m16kt68a
Lenovo Qt M415
Lenovo Ideacentre T540-15ama G Firmware<m2ckt4da
Lenovo Ideacentre T540-15ama G
Lenovo Ideacentre T540-15ick Firmware<o4kkt16a
Lenovo Ideacentre T540-15ick
Lenovo Thinkcentre E75 T\/s Firmware<m16kt68a
Lenovo Thinkcentre E75 T\/s
Lenovo Thinkcentre M610 Firmware<m1akt56a
Lenovo Thinkcentre M610
Lenovo Thinkcentre M6600q Firmware<fwktbaa
Lenovo Thinkcentre M6600q
Lenovo Thinkcentre M6600t Firmware<fwktbaa
Lenovo Thinkcentre M6600t
Lenovo Thinkcentre M6600s Firmware<fwktbaa
Lenovo Thinkcentre M6600s
Lenovo Ideacentre 3-07ada05 Firmware<o4fkt29a
Lenovo Ideacentre 3-07ada05
Lenovo Ideacentre 5-14are05 Firmware<o4zkt29a
Lenovo Ideacentre 5-14are05
Lenovo Ideacentre G5-14amr05 Firmware<o4zkt29a
Lenovo Ideacentre G5-14amr05
Lenovo Ideacentre 510-15ick Firmware<o4kkt16a
Lenovo Ideacentre 510-15ick
Lenovo Ideacentre 510a-15arr Firmware<o4dkt43a
Lenovo Ideacentre 510a-15arr
Lenovo Ideacentre 510a-15ick Firmware<o4kkt16a
Lenovo Ideacentre 510a-15ick
Lenovo Ideacentre 510s-07icb Firmware<m22kt47a
Lenovo Ideacentre 510s-07icb
Lenovo Ideacentre 510s-07ick Firmware<m30kt26a
Lenovo Ideacentre 510s-07ick
Lenovo Ideacentre 720-18apr Firmware<m25kt61a
Lenovo Ideacentre 720-18apr
Lenovo Ideacentre A340-22igm Firmware<o51kt12a
Lenovo Ideacentre A340-22igm
Lenovo Ideacentre A340-24igm Firmware<o51kt12a
Lenovo Ideacentre A340-24igm
Lenovo V30a-22iml Firmware<m37kt28a
Lenovo V30a-22iml
Lenovo V30a-24iml Firmware<m37kt28a
Lenovo V30a-24iml
Lenovo V330-20icb Firmware<m1qkt47a
Lenovo V330-20icb
Lenovo V35s-07ada Firmware<o4fkt29a
Lenovo V35s-07ada
Lenovo V50a-22imb Firmware<m36kt28a
Lenovo V50a-22imb
Lenovo V50a-24imb Firmware<m36kt28a
Lenovo V50a-24imb
Lenovo V50s-07imb Firmware<m2vkt1da
Lenovo V50s-07imb
Lenovo V50t-13imb Firmware<o4hkt38a
Lenovo V50t-13imb
Lenovo V50t-13iob G2 Firmware<m3gkt33a
Lenovo V50t-13iob G2
Lenovo V520 Firmware<m16kt68a
Lenovo V520
Lenovo V520s Firmware<m16kt68a
Lenovo V520s
Lenovo V530-15arr Firmware<o4dkt43a
Lenovo V530-15arr
Lenovo V530-15icb Firmware<m1ykt70a
Lenovo V530-15icb
Lenovo V530-15icr Firmware<m2ykt31a
Lenovo V530-15icr
Lenovo V530-22icb Firmware<m20kt52a
Lenovo V530-22icb
Lenovo V530-24icb Firmware<m20kt52a
Lenovo V530-24icb
Lenovo V530s-07icb Firmware<m22kt48a
Lenovo V530s-07icb
Lenovo V530s-07icr Firmware<m30kt26a
Lenovo V530s-07icr
Lenovo V540-24iwl Firmware<m29kt39a
Lenovo V540-24iwl
Lenovo V55t Gen 2 13acn Firmware<o5jkt20a
Lenovo V55t Gen 2 13acn
Lenovo V55t-15api Firmware<o4dkt43a
Lenovo V55t-15api
Lenovo V55t-15are Firmware<o4dkt43a
Lenovo V55t-15are
Lenovo Yangtian Afq150 Firmware<fwktbaa
Lenovo Yangtian Afq150
Lenovo Yta8900f Firmware<fwktbaa
Lenovo Yta8900f
Lenovo Yoga A940-27icb Firmware<o43kt43a
Lenovo Yoga A940-27icb
Lenovo Thinkedge Se30 Firmware<m3fkt29a
Lenovo Thinkedge Se30
Lenovo Thinksmart Core \& Controller Full Room Kit\=_microsoft_teams_rooms_firmware
Lenovo Thinksmart Core \& Controller Full Room Kit\=_microsoft_teams_rooms
Lenovo Thinksmart Core \& Controller Full Room Kit\=_zoom_rooms_firmware
Lenovo Thinksmart Core \& Controller Full Room Kit\=_zoom_rooms
Lenovo Thinksmart Core \& Controller Kit\=_microsoft_teams_rooms_firmware
Lenovo Thinksmart Core \& Controller Kit\=_microsoft_teams_rooms
Lenovo Thinksmart Core \& Controller Kit\=_zoom_rooms_firmware
Lenovo Thinksmart Core \& Controller Kit\=_zoom_rooms
Lenovo Thinksmart Core Device For Logitech Firmware
Lenovo Thinksmart Core Device For Logitech
Lenovo Thinksmart Core Device For Poly Firmware
Lenovo Thinksmart Core Device For Poly
Lenovo Thinksmart Core Device\=_zoom_rooms_firmware
Lenovo Thinksmart Core Device\=_zoom_rooms
Lenovo Thinksmart Hub Teams Firmware<m2xkt20a
Lenovo Thinksmart Hub Teams
Lenovo Thinksmart Hub Zoom Firmware<m2xkt20a
Lenovo Thinksmart Hub Zoom
Lenovo Thinkstation P310 Firmware<fwktbaa
Lenovo Thinkstation P310
Lenovo Thinkstation P320 Tiny Firmware<m1akt56a
Lenovo Thinkstation P320 Tiny
Lenovo Thinkstation P330 Tiny Firmware<m1ukt67a
Lenovo Thinkstation P330 Tiny
Lenovo Thinkstation P340 Tiny Firmware<m2wkt57a
Lenovo Thinkstation P340 Tiny
Lenovo Thinkstation P340 Firmware<s08kt50a
Lenovo Thinkstation P340
Lenovo Thinkstation P348 Firmware<m3kkt34a
Lenovo Thinkstation P348
Lenovo Thinkstation P350 Tiny Firmware<m3jkt34a
Lenovo Thinkstation P350 Tiny
Lenovo Thinkstation P350 Firmware<=s0akt34a
Lenovo Thinkstation P350
Lenovo Thinkstation P520 Firmware<s03kt55a
Lenovo Thinkstation P520
Lenovo Thinkstation P520c Firmware<s03kt55a
Lenovo Thinkstation P520c
Lenovo Thinkstation P620 Firmware<s07kt25a
Lenovo Thinkstation P620
Lenovo Stadia Ggp-120 Firmware<s03kt55a
Lenovo Stadia Ggp-120
Lenovo Thinkstation P318 Firmware<m1akt56a
Lenovo Thinkstation P318
Lenovo Thinksystem St50 Firmware<ite123e
Lenovo Thinksystem St50
Lenovo Thinksystem St58 Firmware<ite123e
Lenovo Thinksystem St58

Remediation

Information

Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-94953.

Event History

Jan 30, 2023
CVE Published
via MITRE·09:20 PM
Data Sourced
via MITRE·09:20 PM
RemedyDescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-40135?

CVE-2022-40135 has been assigned a medium severity rating due to its potential for information leak.

2

How do I fix CVE-2022-40135?

To fix CVE-2022-40135, update the affected firmware on your Lenovo devices to the latest version available from Lenovo's support site.

3

Which Lenovo models are affected by CVE-2022-40135?

CVE-2022-40135 affects various Lenovo models including Ideacentre and ThinkCentre series with specific firmware versions.

4

What kind of information can be leaked due to CVE-2022-40135?

CVE-2022-40135 may allow an attacker with local access to read sensitive SMM memory contents from the affected devices.

5

Is local access required to exploit CVE-2022-40135?

Yes, local access is required to exploit CVE-2022-40135, as it involves reading SMM memory.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203