medium
4.4
CWE
125
Advisory Published
Updated

CVE-2022-40136

First published: Mon Jan 30 2023(Updated: )

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Credit: psirt@lenovo.com

Affected SoftwareAffected VersionHow to fix
Lenovo Ideacentre C5-14imb05 Firmware<o4hkt38a
Lenovo Ideacentre C5-14imb05
Lenovo Thinkcentre E96z Firmware<m26kt22a
Lenovo Thinkcentre E96z
Lenovo Ideacentre 3 07iab7 Firmware<m49kt1da
Lenovo Ideacentre 3 07iab7
Lenovo Ideacentre 3-07imb05 Firmware<m2vkt1da
Lenovo Ideacentre 3-07imb05
Lenovo Ideacentre 5 14iab7 Firmware<m42kt40a
Lenovo Ideacentre 5 14iab7
Lenovo Ideacentre 5-14acn6 Firmware<o5ekt21a
Lenovo Ideacentre 5-14acn6
Lenovo Ideacentre 5-14imb05 Firmware<o4hkt38a
Lenovo Ideacentre 5-14imb05
Lenovo Ideacentre 5-14iob6 Firmware<m3gkt33a
Lenovo Ideacentre 5-14iob6
Lenovo Ideacentre Creator 5-14iob6 Firmware<=m3gkt33a
Lenovo Ideacentre Creator 5-14iob6
Lenovo Ideacentre G5-14imb05 Firmware<o4hkt38a
Lenovo Ideacentre G5-14imb05
Lenovo Ideacentre Gaming 5 17acn7 Firmware<o5ekt21a
Lenovo Ideacentre Gaming 5 17acn7
Lenovo Ideacentre Gaming 5 17iab7 Firmware<m42kt40a
Lenovo Ideacentre Gaming 5 17iab7
Lenovo Ideacentre Gaming 5-14acn6 Firmware<o5ekt21a
Lenovo Ideacentre Gaming 5-14acn6
Lenovo Ideacentre Gaming 5-14iob6 Firmware<m3gkt33a
Lenovo Ideacentre Gaming 5-14iob6
Lenovo Legion C530-19icb Firmware<o4bkt20a
Lenovo Legion C530-19icb
Lenovo Legion T5-26iob6 Firmware<o54kt1da
Lenovo Legion T5-26iob6
Lenovo Legion T5-28icb05 Firmware<o4bkt20a
Lenovo Legion T5-28icb05
Lenovo Legion T530-28apr Firmware<o4gkt16a
Lenovo Legion T530-28apr
Lenovo Legion T530-28icb Firmware<o4bkt20a
Lenovo Legion T530-28icb
Lenovo Legion T7-34imz5 Firmware<o4lkt1ea
Lenovo Legion T7-34imz5
Lenovo Thinkcentre M70q Gen 2 Firmware<m2wkt57a
Lenovo Thinkcentre M70q Gen 2
Lenovo Thinkcentre M710t Firmware<m16kt68a
Lenovo Thinkcentre M710t
Lenovo Thinkcentre M60e Tiny Firmware<m3skt21a
Lenovo Thinkcentre M60e Tiny
Lenovo Thinkcentre M625q Firmware<m1wkt45a
Lenovo Thinkcentre M625q
Lenovo Thinkcentre M630e Firmware<m28kt37a
Lenovo Thinkcentre M630e
Lenovo Thinkcentre M70a Firmware<m2skt25a
Lenovo Thinkcentre M70a
Lenovo Thinkcentre M70a Gen 2 Firmware<m3nkt20a
Lenovo Thinkcentre M70a Gen 2
Lenovo Thinkcentre M70c Firmware<m2vkt1da
Lenovo Thinkcentre M70c
Lenovo Thinkcentre M70q Firmware<m2wkt57a
Lenovo Thinkcentre M70q
Lenovo Thinkcentre M70q Gen 3 Firmware<m43kt16a
Lenovo Thinkcentre M70q Gen 3
Lenovo Thinkcentre M70s Gen 3 Firmware<m41kt2da
Lenovo Thinkcentre M70s Gen 3
Lenovo Thinkcentre M70t Gen 3 Firmware<m41kt2da
Lenovo Thinkcentre M70t Gen 3
Lenovo Thinkcentre M710e Firmware<m1zkt38a
Lenovo Thinkcentre M710e
Lenovo Thinkcentre M710q Firmware<m1akt56a
Lenovo Thinkcentre M710q
Lenovo Thinkcentre M710s Firmware<m16kt68a
Lenovo Thinkcentre M710s
Lenovo Thinkcentre M715q Firmware<m11kt54a
Lenovo Thinkcentre M715q
Lenovo Thinkcentre M715t Firmware<m2ckt4da
Lenovo Thinkcentre M715t
Lenovo Thinkcentre M720e Firmware<m30kt26a
Lenovo Thinkcentre M720e
Lenovo Thinkcentre M720q Firmware<m1ukt67a
Lenovo Thinkcentre M720q
Lenovo Thinkcentre M720s Firmware<m1ukt67a
Lenovo Thinkcentre M720s
Lenovo Thinkcentre M720t Firmware<m1ukt67a
Lenovo Thinkcentre M720t
Lenovo Thinkcentre M725s Firmware<m25kt61a
Lenovo Thinkcentre M725s
Lenovo Thinkcentre M75n Firmware<m33kt25a
Lenovo Thinkcentre M75n
<m47kt24a
<m2fkt2da
Lenovo Thinkcentre M75s Gen 2 Firmware<m46kt2da
Lenovo Thinkcentre M75s Gen 2
Lenovo Thinkcentre M75s-1 Firmware<m2ckt4da
Lenovo Thinkcentre M75s-1
Lenovo Thinkcentre M75t Gen 2 Firmware<m46kt2da
Lenovo Thinkcentre M75t Gen 2
Lenovo Thinkcentre M80q Firmware<m2wkt57a
Lenovo Thinkcentre M80q
Lenovo Thinkcentre M810z Firmware<m1ckt49a
Lenovo Thinkcentre M810z
Lenovo Thinkcentre M818z Firmware<m1ekt25a
Lenovo Thinkcentre M818z
Lenovo Thinkcentre M820z Firmware<m1nkt58a
Lenovo Thinkcentre M820z
Lenovo Thinkcentre M90a Firmware<m2rkt52a
Lenovo Thinkcentre M90a
Lenovo Thinkcentre M90a Gen2 Firmware<m3lkt26a
Lenovo Thinkcentre M90a Gen2
Lenovo Thinkcentre M90q Gen 2 Firmware<m3jkt34a
Lenovo Thinkcentre M90q Gen 2
Lenovo Thinkcentre M90q Tiny Firmware<m2wkt57a
Lenovo Thinkcentre M90q Tiny
Lenovo Thinkcentre M910q Firmware<m1akt56a
Lenovo Thinkcentre M910q
Lenovo Thinkcentre M910s Firmware<m1akt56a
Lenovo Thinkcentre M910s
Lenovo Thinkcentre M910t Firmware<m1akt56a
Lenovo Thinkcentre M910t
Lenovo Thinkcentre M910x Firmware<m1akt56a
Lenovo Thinkcentre M910x
Lenovo Thinkcentre M920q Firmware<m1ukt67a
Lenovo Thinkcentre M920q
Lenovo Thinkcentre M920s Firmware<m1ukt67a
Lenovo Thinkcentre M920s
Lenovo Thinkcentre M920t Firmware<m1ukt67a
Lenovo Thinkcentre M920t
Lenovo Thinkcentre M920x Firmware<m1ukt67a
Lenovo Thinkcentre M920x
Lenovo Thinkcentre Neo 50s Gen 3 Firmware<m49kt1da
Lenovo Thinkcentre Neo 50s Gen 3
Lenovo Thinkcentre Neo 50t Gen 3 Firmware<m42kt40a
Lenovo Thinkcentre Neo 50t Gen 3
Lenovo Qitian A815 Firmware<m1rkt38a
Lenovo Qitian A815
Lenovo Qt M410 Firmware<m16kt68a
Lenovo Qt M410
Lenovo Qt B415 Firmware<m16kt68a
Lenovo Qt B415
Lenovo Qt M415 Firmware<m16kt68a
Lenovo Qt M415
<m2ckt4da
<o4kkt16a
Lenovo Thinkcentre E75 T\/s Firmware<m16kt68a
Lenovo Thinkcentre E75 T\/s
Lenovo Thinkcentre M610 Firmware<m1akt56a
Lenovo Thinkcentre M610
Lenovo Thinkcentre M6600q Firmware<fwktbaa
Lenovo Thinkcentre M6600q
Lenovo Thinkcentre M6600t Firmware<fwktbaa
Lenovo Thinkcentre M6600t
Lenovo Thinkcentre M6600s Firmware<fwktbaa
Lenovo Thinkcentre M6600s
Lenovo Ideacentre 3-07ada05 Firmware<o4fkt29a
Lenovo Ideacentre 3-07ada05
Lenovo Ideacentre 5-14are05 Firmware<o4zkt29a
Lenovo Ideacentre 5-14are05
Lenovo Ideacentre G5-14amr05 Firmware<o4zkt29a
Lenovo Ideacentre G5-14amr05
Lenovo Thinkcentre M90s Firmware<m2tkt50a
Lenovo Thinkcentre M90s
Lenovo Thinkcentre M900x Firmware<fwktbfa
Lenovo Thinkcentre M900x
Lenovo Thinkcentre M900 Firmware<fwktbfa
Lenovo Thinkcentre M900
Lenovo Thinkcentre M80t Firmware<m2tkt50a
Lenovo Thinkcentre M80t
Lenovo Thinkcentre M80s Firmware<m2tkt50a
Lenovo Thinkcentre M80s
Lenovo Thinkcentre M800 Firmware<fwktbfa
Lenovo Thinkcentre M800
Lenovo Thinkcentre M70t Firmware<m2tkt50a
Lenovo Thinkcentre M70t
Lenovo Thinkcentre M70s Firmware<m2tkt50a
Lenovo Thinkcentre M70s
<o4kkt16a
Lenovo Ideacentre 510a-15arr Firmware<o4dkt43a
Lenovo Ideacentre 510a-15arr
<o4kkt16a
Lenovo Ideacentre 510s-07icb Firmware<m22kt47a
Lenovo Ideacentre 510s-07icb
Lenovo Ideacentre 510s-07ick Firmware<m30kt26a
Lenovo Ideacentre 510s-07ick
Lenovo Ideacentre 720-18apr Firmware<m25kt61a
Lenovo Ideacentre 720-18apr
<o51kt12a
<o51kt12a
Lenovo V30a-22iml Firmware<m37kt28a
Lenovo V30a-22iml
Lenovo V30a-24iml Firmware<m37kt28a
Lenovo V30a-24iml
<m1qkt47a
Lenovo V35s-07ada Firmware<o4fkt29a
Lenovo V35s-07ada
Lenovo V50a-22imb Firmware<m36kt28a
Lenovo V50a-22imb
Lenovo V50a-24imb Firmware<m36kt28a
Lenovo V50a-24imb
Lenovo V50s-07imb Firmware<m2vkt1da
Lenovo V50s-07imb
Lenovo V50t-13imb Firmware<o4hkt38a
Lenovo V50t-13imb
Lenovo V50t-13iob G2 Firmware<m3gkt33a
Lenovo V50t-13iob G2
Lenovo V520 Firmware<m16kt68a
Lenovo V520
Lenovo V520s Firmware<m16kt68a
Lenovo V520s
Lenovo V530-15arr Firmware<o4dkt43a
Lenovo V530-15arr
Lenovo V530-15icb Firmware<m1ykt70a
Lenovo V530-15icb
Lenovo V530-15icr Firmware<m2ykt31a
Lenovo V530-15icr
Lenovo V530-22icb Firmware<m20kt52a
Lenovo V530-22icb
Lenovo V530-24icb Firmware<m20kt52a
Lenovo V530-24icb
Lenovo V530s-07icb Firmware<m22kt48a
Lenovo V530s-07icb
Lenovo V530s-07icr Firmware<m30kt26a
Lenovo V530s-07icr
Lenovo V540-24iwl Firmware<m29kt39a
Lenovo V540-24iwl
Lenovo V55t Gen 2 13acn Firmware<o5jkt20a
Lenovo V55t Gen 2 13acn
Lenovo V55t-15api Firmware<o4dkt43a
Lenovo V55t-15api
<o4dkt43a
Lenovo Yangtian Afq150 Firmware<fwktbaa
Lenovo Yangtian Afq150
Lenovo Yta8900f Firmware<fwktbaa
Lenovo Yta8900f
<o43kt43a
Lenovo Thinkedge Se30 Firmware<m3fkt29a
Lenovo Thinkedge Se30
=_microsoft_teams_rooms_firmware
=_microsoft_teams_rooms
=_zoom_rooms_firmware
=_zoom_rooms
=_microsoft_teams_rooms_firmware
=_microsoft_teams_rooms
=_zoom_rooms_firmware
=_zoom_rooms
=_zoom_rooms_firmware
=_zoom_rooms
<m2xkt20a
<m2xkt20a
Lenovo Thinkstation P310 Firmware<fwktbaa
Lenovo Thinkstation P310
Lenovo Thinkstation P320 Tiny Firmware<m1akt56a
Lenovo Thinkstation P320 Tiny
Lenovo Thinkstation P330 Tiny Firmware<m1ukt67a
Lenovo Thinkstation P330 Tiny
Lenovo Thinkstation P340 Tiny Firmware<m2wkt57a
Lenovo Thinkstation P340 Tiny
Lenovo Thinkstation P340 Firmware<s08kt50a
Lenovo Thinkstation P340
<m3kkt34a
Lenovo Thinkstation P350 Tiny Firmware<m3jkt34a
Lenovo Thinkstation P350 Tiny
Lenovo Thinkstation P350 Firmware<=s0akt34a
Lenovo Thinkstation P350
Lenovo Thinkstation P520 Firmware<s03kt55a
Lenovo Thinkstation P520
Lenovo Thinkstation P520c Firmware<s03kt55a
Lenovo Thinkstation P520c
<s07kt25a
Lenovo Stadia Ggp-120 Firmware<s03kt55a
Lenovo Stadia Ggp-120
Lenovo Thinkstation P318 Firmware<m1akt56a
Lenovo Thinkstation P318
Lenovo Thinkstation P920 Firmware<s05kt62a
Lenovo Thinkstation P920
Lenovo Thinkstation P720 Firmware<s05kt62a
Lenovo Thinkstation P720
Lenovo Thinkstation P320 Firmware<s06kt59a
Lenovo Thinkstation P320
<ite123e
<ite123e

Remedy

Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-94953.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203