CVE-2022-40136: Medium severity lenovo ideacentre c5-14imb05 vulnerability
Published Jan 30, 2023
·Updated
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
Affected Software
298 affected components
Lenovo Ideacentre C5-14imb05 Firmware<o4hkt38a
Lenovo Ideacentre C5-14imb05
Lenovo Thinkcentre E96z Firmware<m26kt22a
Lenovo Thinkcentre E96z
Lenovo Ideacentre 3 07iab7 Firmware<m49kt1da
Lenovo Ideacentre 3 07iab7
Lenovo Ideacentre 3-07imb05 Firmware<m2vkt1da
Lenovo Ideacentre 3-07imb05
Lenovo Ideacentre 5 14iab7 Firmware<m42kt40a
Lenovo Ideacentre 5 14iab7
Lenovo Ideacentre 5-14acn6 Firmware<o5ekt21a
Lenovo Ideacentre 5-14acn6
Lenovo Ideacentre 5-14imb05 Firmware<o4hkt38a
Lenovo Ideacentre 5-14imb05
Lenovo Ideacentre 5-14iob6 Firmware<m3gkt33a
Lenovo Ideacentre 5-14iob6
Lenovo Ideacentre Creator 5-14iob6 Firmware<=m3gkt33a
Lenovo Ideacentre Creator 5-14iob6
Lenovo Ideacentre G5-14imb05 Firmware<o4hkt38a
Lenovo Ideacentre G5-14imb05
Lenovo Ideacentre Gaming 5 17acn7 Firmware<o5ekt21a
Lenovo Ideacentre Gaming 5 17acn7
Lenovo Ideacentre Gaming 5 17iab7 Firmware<m42kt40a
Lenovo Ideacentre Gaming 5 17iab7
Lenovo Ideacentre Gaming 5-14acn6 Firmware<o5ekt21a
Lenovo Ideacentre Gaming 5-14acn6
Lenovo Ideacentre Gaming 5-14iob6 Firmware<m3gkt33a
Lenovo Ideacentre Gaming 5-14iob6
Lenovo Legion C530-19icb Firmware<o4bkt20a
Lenovo Legion C530-19icb
Lenovo Legion T5-26iob6 Firmware<o54kt1da
Lenovo Legion T5-26iob6
Lenovo Legion T5-28icb05 Firmware<o4bkt20a
Lenovo Legion T5-28icb05
Lenovo Legion T530-28apr Firmware<o4gkt16a
Lenovo Legion T530-28apr
Lenovo Legion T530-28icb Firmware<o4bkt20a
Lenovo Legion T530-28icb
Lenovo Legion T7-34imz5 Firmware<o4lkt1ea
Lenovo Legion T7-34imz5
Lenovo Thinkcentre M70q Gen 2 Firmware<m2wkt57a
Lenovo Thinkcentre M70q Gen 2
Lenovo Thinkcentre M710t Firmware<m16kt68a
Lenovo Thinkcentre M710t
Lenovo Thinkcentre M60e Tiny Firmware<m3skt21a
Lenovo Thinkcentre M60e Tiny
Lenovo Thinkcentre M625q Firmware<m1wkt45a
Lenovo Thinkcentre M625q
Lenovo Thinkcentre M630e Firmware<m28kt37a
Lenovo Thinkcentre M630e
Lenovo Thinkcentre M70a Firmware<m2skt25a
Lenovo Thinkcentre M70a
Lenovo Thinkcentre M70a Gen 2 Firmware<m3nkt20a
Lenovo Thinkcentre M70a Gen 2
Lenovo Thinkcentre M70c Firmware<m2vkt1da
Lenovo Thinkcentre M70c
Lenovo Thinkcentre M70q Firmware<m2wkt57a
Lenovo Thinkcentre M70q
Lenovo Thinkcentre M70q Gen 3 Firmware<m43kt16a
Lenovo Thinkcentre M70q Gen 3
Lenovo Thinkcentre M70s Gen 3 Firmware<m41kt2da
Lenovo Thinkcentre M70s Gen 3
Lenovo Thinkcentre M70t Gen 3 Firmware<m41kt2da
Lenovo Thinkcentre M70t Gen 3
Lenovo Thinkcentre M710e Firmware<m1zkt38a
Lenovo Thinkcentre M710e
Lenovo Thinkcentre M710q Firmware<m1akt56a
Lenovo Thinkcentre M710q
Lenovo Thinkcentre M710s Firmware<m16kt68a
Lenovo ThinkCentre M710s
Lenovo Thinkcentre M715q Firmware<m11kt54a
Lenovo Thinkcentre M715q
Lenovo Thinkcentre M715t Firmware<m2ckt4da
Lenovo Thinkcentre M715t
Lenovo Thinkcentre M720e Firmware<m30kt26a
Lenovo Thinkcentre M720e
Lenovo Thinkcentre M720q Firmware<m1ukt67a
Lenovo Thinkcentre M720q
Lenovo Thinkcentre M720s Firmware<m1ukt67a
Lenovo Thinkcentre M720s
Lenovo Thinkcentre M720t Firmware<m1ukt67a
Lenovo Thinkcentre M720t
Lenovo Thinkcentre M725s Firmware<m25kt61a
Lenovo Thinkcentre M725s
Lenovo Thinkcentre M75n Firmware<m33kt25a
Lenovo Thinkcentre M75n
Lenovo Thinkcentre M75q Gen 2 Firmware<m47kt24a
Lenovo Thinkcentre M75q Gen 2
Lenovo Thinkcentre M75q-1 Firmware<m2fkt2da
Lenovo Thinkcentre M75q-1
Lenovo Thinkcentre M75s Gen 2 Firmware<m46kt2da
Lenovo Thinkcentre M75s Gen 2
Lenovo Thinkcentre M75s-1 Firmware<m2ckt4da
Lenovo Thinkcentre M75s-1
Lenovo Thinkcentre M75t Gen 2 Firmware<m46kt2da
Lenovo Thinkcentre M75t Gen 2
Lenovo Thinkcentre M80q Firmware<m2wkt57a
Lenovo Thinkcentre M80q
Lenovo Thinkcentre M810z Firmware<m1ckt49a
Lenovo Thinkcentre M810z
Lenovo Thinkcentre M818z Firmware<m1ekt25a
Lenovo Thinkcentre M818z
Lenovo Thinkcentre M820z Firmware<m1nkt58a
Lenovo Thinkcentre M820z
Lenovo Thinkcentre M90a Firmware<m2rkt52a
Lenovo Thinkcentre M90a
Lenovo Thinkcentre M90a Gen2 Firmware<m3lkt26a
Lenovo Thinkcentre M90a Gen2
Lenovo Thinkcentre M90q Gen 2 Firmware<m3jkt34a
Lenovo Thinkcentre M90q Gen 2
Lenovo Thinkcentre M90q Tiny Firmware<m2wkt57a
Lenovo Thinkcentre M90q Tiny
Lenovo Thinkcentre M910q Firmware<m1akt56a
Lenovo Thinkcentre M910q
Lenovo Thinkcentre M910s Firmware<m1akt56a
Lenovo Thinkcentre M910s
Lenovo Thinkcentre M910t Firmware<m1akt56a
Lenovo Thinkcentre M910t
Lenovo Thinkcentre M910x Firmware<m1akt56a
Lenovo Thinkcentre M910x
Lenovo Thinkcentre M920q Firmware<m1ukt67a
Lenovo Thinkcentre M920q
Lenovo Thinkcentre M920s Firmware<m1ukt67a
Lenovo Thinkcentre M920s
Lenovo Thinkcentre M920t Firmware<m1ukt67a
Lenovo Thinkcentre M920t
Lenovo Thinkcentre M920x Firmware<m1ukt67a
Lenovo Thinkcentre M920x
Lenovo Thinkcentre Neo 50s Gen 3 Firmware<m49kt1da
Lenovo Thinkcentre Neo 50s Gen 3
Lenovo Thinkcentre Neo 50t Gen 3 Firmware<m42kt40a
Lenovo Thinkcentre Neo 50t Gen 3
Lenovo Qitian A815 Firmware<m1rkt38a
Lenovo Qitian A815
Lenovo Qt M410 Firmware<m16kt68a
Lenovo Qt M410
Lenovo Qt B415 Firmware<m16kt68a
Lenovo Qt B415
Lenovo Qt M415 Firmware<m16kt68a
Lenovo Qt M415
Lenovo Ideacentre T540-15ama G Firmware<m2ckt4da
Lenovo Ideacentre T540-15ama G
Lenovo Ideacentre T540-15ick Firmware<o4kkt16a
Lenovo Ideacentre T540-15ick
Lenovo Thinkcentre E75 T\/s Firmware<m16kt68a
Lenovo Thinkcentre E75 T\/s
Lenovo Thinkcentre M610 Firmware<m1akt56a
Lenovo Thinkcentre M610
Lenovo Thinkcentre M6600q Firmware<fwktbaa
Lenovo Thinkcentre M6600q
Lenovo Thinkcentre M6600t Firmware<fwktbaa
Lenovo Thinkcentre M6600t
Lenovo Thinkcentre M6600s Firmware<fwktbaa
Lenovo Thinkcentre M6600s
Lenovo Ideacentre 3-07ada05 Firmware<o4fkt29a
Lenovo Ideacentre 3-07ada05
Lenovo Ideacentre 5-14are05 Firmware<o4zkt29a
Lenovo Ideacentre 5-14are05
Lenovo Ideacentre G5-14amr05 Firmware<o4zkt29a
Lenovo Ideacentre G5-14amr05
Lenovo Thinkcentre M90s Firmware<m2tkt50a
Lenovo Thinkcentre M90s
Lenovo Thinkcentre M900x Firmware<fwktbfa
Lenovo Thinkcentre M900x
Lenovo Thinkcentre M900 Firmware<fwktbfa
Lenovo Thinkcentre M900
Lenovo Thinkcentre M80t Firmware<m2tkt50a
Lenovo Thinkcentre M80t
Lenovo Thinkcentre M80s Firmware<m2tkt50a
Lenovo Thinkcentre M80s
Lenovo Thinkcentre M800 Firmware<fwktbfa
Lenovo Thinkcentre M800
Lenovo Thinkcentre M70t Firmware<m2tkt50a
Lenovo Thinkcentre M70t
Lenovo Thinkcentre M70s Firmware<m2tkt50a
Lenovo Thinkcentre M70s
Lenovo Ideacentre 510-15ick Firmware<o4kkt16a
Lenovo Ideacentre 510-15ick
Lenovo Ideacentre 510a-15arr Firmware<o4dkt43a
Lenovo Ideacentre 510a-15arr
Lenovo Ideacentre 510a-15ick Firmware<o4kkt16a
Lenovo Ideacentre 510a-15ick
Lenovo Ideacentre 510s-07icb Firmware<m22kt47a
Lenovo Ideacentre 510s-07icb
Lenovo Ideacentre 510s-07ick Firmware<m30kt26a
Lenovo Ideacentre 510s-07ick
Lenovo Ideacentre 720-18apr Firmware<m25kt61a
Lenovo Ideacentre 720-18apr
Lenovo Ideacentre A340-22igm Firmware<o51kt12a
Lenovo Ideacentre A340-22igm
Lenovo Ideacentre A340-24igm Firmware<o51kt12a
Lenovo Ideacentre A340-24igm
Lenovo V30a-22iml Firmware<m37kt28a
Lenovo V30a-22iml
Lenovo V30a-24iml Firmware<m37kt28a
Lenovo V30a-24iml
Lenovo V330-20icb Firmware<m1qkt47a
Lenovo V330-20icb
Lenovo V35s-07ada Firmware<o4fkt29a
Lenovo V35s-07ada
Lenovo V50a-22imb Firmware<m36kt28a
Lenovo V50a-22imb
Lenovo V50a-24imb Firmware<m36kt28a
Lenovo V50a-24imb
Lenovo V50s-07imb Firmware<m2vkt1da
Lenovo V50s-07imb
Lenovo V50t-13imb Firmware<o4hkt38a
Lenovo V50t-13imb
Lenovo V50t-13iob G2 Firmware<m3gkt33a
Lenovo V50t-13iob G2
Lenovo V520 Firmware<m16kt68a
Lenovo V520
Lenovo V520s Firmware<m16kt68a
Lenovo V520s
Lenovo V530-15arr Firmware<o4dkt43a
Lenovo V530-15arr
Lenovo V530-15icb Firmware<m1ykt70a
Lenovo V530-15icb
Lenovo V530-15icr Firmware<m2ykt31a
Lenovo V530-15icr
Lenovo V530-22icb Firmware<m20kt52a
Lenovo V530-22icb
Lenovo V530-24icb Firmware<m20kt52a
Lenovo V530-24icb
Lenovo V530s-07icb Firmware<m22kt48a
Lenovo V530s-07icb
Lenovo V530s-07icr Firmware<m30kt26a
Lenovo V530s-07icr
Lenovo V540-24iwl Firmware<m29kt39a
Lenovo V540-24iwl
Lenovo V55t Gen 2 13acn Firmware<o5jkt20a
Lenovo V55t Gen 2 13acn
Lenovo V55t-15api Firmware<o4dkt43a
Lenovo V55t-15api
Lenovo V55t-15are Firmware<o4dkt43a
Lenovo V55t-15are
Lenovo Yangtian Afq150 Firmware<fwktbaa
Lenovo Yangtian Afq150
Lenovo Yta8900f Firmware<fwktbaa
Lenovo Yta8900f
Lenovo Yoga A940-27icb Firmware<o43kt43a
Lenovo Yoga A940-27icb
Lenovo Thinkedge Se30 Firmware<m3fkt29a
Lenovo Thinkedge Se30
Lenovo Thinksmart Core \& Controller Full Room Kit\=_microsoft_teams_rooms_firmware
Lenovo Thinksmart Core \& Controller Full Room Kit\=_microsoft_teams_rooms
Lenovo Thinksmart Core \& Controller Full Room Kit\=_zoom_rooms_firmware
Lenovo Thinksmart Core \& Controller Full Room Kit\=_zoom_rooms
Lenovo Thinksmart Core \& Controller Kit\=_microsoft_teams_rooms_firmware
Lenovo Thinksmart Core \& Controller Kit\=_microsoft_teams_rooms
Lenovo Thinksmart Core \& Controller Kit\=_zoom_rooms_firmware
Lenovo Thinksmart Core \& Controller Kit\=_zoom_rooms
Lenovo Thinksmart Core Device For Logitech Firmware
Lenovo Thinksmart Core Device For Logitech
Lenovo Thinksmart Core Device For Poly Firmware
Lenovo Thinksmart Core Device For Poly
Lenovo Thinksmart Core Device\=_zoom_rooms_firmware
Lenovo Thinksmart Core Device\=_zoom_rooms
Lenovo Thinksmart Hub Teams Firmware<m2xkt20a
Lenovo Thinksmart Hub Teams
Lenovo Thinksmart Hub Zoom Firmware<m2xkt20a
Lenovo Thinksmart Hub Zoom
Lenovo Thinkstation P310 Firmware<fwktbaa
Lenovo Thinkstation P310
Lenovo Thinkstation P320 Tiny Firmware<m1akt56a
Lenovo Thinkstation P320 Tiny
Lenovo Thinkstation P330 Tiny Firmware<m1ukt67a
Lenovo Thinkstation P330 Tiny
Lenovo Thinkstation P340 Tiny Firmware<m2wkt57a
Lenovo Thinkstation P340 Tiny
Lenovo Thinkstation P340 Firmware<s08kt50a
Lenovo Thinkstation P340
Lenovo Thinkstation P348 Firmware<m3kkt34a
Lenovo Thinkstation P348
Lenovo Thinkstation P350 Tiny Firmware<m3jkt34a
Lenovo Thinkstation P350 Tiny
Lenovo Thinkstation P350 Firmware<=s0akt34a
Lenovo Thinkstation P350
Lenovo Thinkstation P520 Firmware<s03kt55a
Lenovo Thinkstation P520
Lenovo Thinkstation P520c Firmware<s03kt55a
Lenovo Thinkstation P520c
Lenovo Thinkstation P620 Firmware<s07kt25a
Lenovo Thinkstation P620
Lenovo Stadia Ggp-120 Firmware<s03kt55a
Lenovo Stadia Ggp-120
Lenovo Thinkstation P318 Firmware<m1akt56a
Lenovo Thinkstation P318
Lenovo Thinkstation P920 Firmware<s05kt62a
Lenovo Thinkstation P920
Lenovo Thinkstation P720 Firmware<s05kt62a
Lenovo Thinkstation P720
Lenovo Thinkstation P320 Firmware<s06kt59a
Lenovo Thinkstation P320
Lenovo Thinksystem St50 Firmware<ite123e
Lenovo Thinksystem St50
Lenovo Thinksystem St58 Firmware<ite123e
Lenovo Thinksystem St58
Remediation
Information
Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-94953.
Event History
Jan 30, 2023
CVE Published
via MITRE·09:20 PM
Data Sourced
via MITRE·09:20 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-40136?
CVE-2022-40136 has a severity rating that varies depending on context, but it is classified as a critical vulnerability due to potential local exploitation leading to sensitive information leakage.
2
How do I fix CVE-2022-40136?
To fix CVE-2022-40136, ensure that your firmware is updated to the latest version provided by Lenovo that addresses this specific vulnerability.
3
What types of devices are affected by CVE-2022-40136?
CVE-2022-40136 affects certain Lenovo devices including specific models from the Ideacentre, Thinkcentre, and Legion product lines.
4
Who is vulnerable to CVE-2022-40136?
Users with local access to affected Lenovo devices that have outdated firmware versions are vulnerable to CVE-2022-40136.
5
Is there a workaround for CVE-2022-40136 until a patch is applied?
Currently, the best course of action is to update the firmware as no specific workaround is provided for CVE-2022-40136.