First published: Mon Jan 30 2023(Updated: )
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
Credit: psirt@lenovo.com
Affected Software | Affected Version | How to fix |
---|---|---|
Lenovo Ideacentre C5-14IMB05 | <o4hkt38a | |
Lenovo Ideacentre C5-14MB05 Firmware | ||
Lenovo thinkcentre e96z firmware | <m26kt22a | |
Lenovo thinkcentre e96z | ||
Lenovo ideacentre 3 07iab7 firmware | <m49kt1da | |
Lenovo ideacentre 3 07iab7 | ||
Lenovo ideacentre 3-07imb05 firmware | <m2vkt1da | |
Lenovo ideacentre 3-07imb05 | ||
Lenovo ideacentre 5 14iab7 firmware | <m42kt40a | |
Lenovo ideacentre 5 14iab7 | ||
Lenovo Ideacentre Gaming 5-14acn6 Firmware | <o5ekt21a | |
Lenovo ideacentre 5-14acn6 | ||
Lenovo ideacentre 5-14imb05 firmware | <o4hkt38a | |
Lenovo ideacentre 5-14imb05 | ||
Lenovo Ideacentre Gaming 5-14iob6 | <m3gkt33a | |
Lenovo Ideacentre Creator 5-14iob6 | ||
Lenovo Ideacentre Creator 5-14iob6 Firmware | <=m3gkt33a | |
Lenovo Ideacentre Creator 5-14iob6 | ||
Lenovo ideacentre g5-14imb05 firmware | <o4hkt38a | |
Lenovo ideacentre g5-14imb05 | ||
Lenovo Ideacentre Gaming 5 17acn7 Firmware | <o5ekt21a | |
Lenovo ideacentre gaming 5 17acn7 | ||
Lenovo Ideacentre Gaming 5 17iab7 Firmware | <m42kt40a | |
Lenovo Ideacentre Gaming 5 17iab7 | ||
Lenovo Ideacentre Gaming 5-14acn6 Firmware | <o5ekt21a | |
Lenovo Ideacentre Gaming 5-14acn6 Firmware | ||
Lenovo Ideacentre Gaming 5-14iob6 | <m3gkt33a | |
Lenovo Ideacentre Gaming 5-14iob6 Firmware | ||
Lenovo legion c530-19icb firmware | <o4bkt20a | |
Lenovo legion c530-19icb | ||
Lenovo Legion T5-26iob6 Firmware | <o54kt1da | |
Lenovo Legion T5-26iob6 Firmware | ||
Lenovo Legion T5-28ICB05 Firmware | <o4bkt20a | |
Lenovo Legion T5-28ICB05 Firmware | ||
Lenovo legion t530-28apr firmware | <o4gkt16a | |
Lenovo legion t530-28apr | ||
Lenovo legion t530-28icb firmware | <o4bkt20a | |
Lenovo legion t530-28icb | ||
Lenovo Legion T7-34IMZ5 | <o4lkt1ea | |
Lenovo Legion T7-34IMZ5 | ||
Lenovo Thinkcentre M70q Gen 2 Firmware | <m2wkt57a | |
Lenovo Thinkcentre M70q Gen 2 | ||
Lenovo Ideacentre M710t Firmware | <m16kt68a | |
Lenovo thinkcentre m710t | ||
Lenovo ThinkCentre M60e Tiny | <m3skt21a | |
Lenovo ThinkCentre M60e Tiny | ||
Lenovo thinkcentre m625q firmware | <m1wkt45a | |
Lenovo thinkcentre m625q | ||
Lenovo ThinkCentre M630e | <m28kt37a | |
Lenovo ThinkCentre M630e | ||
Lenovo ThinkCentre M70a | <m2skt25a | |
Lenovo ThinkCentre M70a Gen 3 | ||
Lenovo Thinkcentre M70a Gen 2 | <m3nkt20a | |
Lenovo Thinkcentre M70a Gen 2 | ||
Lenovo Thinkcentre M70c Firmware | <m2vkt1da | |
Lenovo ThinkCentre M70c | ||
Lenovo Thinkcentre M70q Firmware | <m2wkt57a | |
Lenovo Thinkcentre M70q Firmware | ||
Lenovo Thinkcentre M70q Gen 3 | <m43kt16a | |
Lenovo Thinkcentre M70q Gen 3 | ||
Lenovo ThinkCentre M70s Gen 3 Firmware | <m41kt2da | |
Lenovo Thinkcentre M70s Gen 3 | ||
Lenovo Thinkcentre M70t Gen 3 Firmware | <m41kt2da | |
Lenovo Ideacentre M70t Gen 3 Firmware | ||
Lenovo thinkcentre m710e firmware | <m1zkt38a | |
Lenovo Ideacentre M710e | ||
Lenovo Thinkcentre M710q | <m1akt56a | |
Lenovo Thinkcentre M710q | ||
Lenovo thinkcentre m710s firmware | <m16kt68a | |
Lenovo thinkcentre m710s | ||
Lenovo thinkcentre m715q firmware | <m11kt54a | |
Lenovo thinkcentre m715q | ||
Lenovo thinkcentre m715t firmware | <m2ckt4da | |
Lenovo Ideacentre M715t | ||
Lenovo ThinkCentre M720e | <m30kt26a | |
Lenovo ThinkCentre M720e | ||
Lenovo thinkcentre m720q firmware | <m1ukt67a | |
Lenovo thinkcentre m720q | ||
Lenovo thinkcentre m720s firmware | <m1ukt67a | |
Lenovo thinkcentre m720s | ||
Lenovo Ideacentre M720t Firmware | <m1ukt67a | |
Lenovo thinkcentre m720t | ||
Lenovo thinkcentre m725s firmware | <m25kt61a | |
Lenovo thinkcentre m725s | ||
Lenovo Thinkcentre M75n | <m33kt25a | |
Lenovo Thinkcentre M75n | ||
Lenovo Ideacentre M75q Gen 2 | <m47kt24a | |
Lenovo Ideacentre M75q Gen 2 | ||
Lenovo ThinkCentre M75q-1 Firmware | <m2fkt2da | |
Lenovo ThinkCentre M75q-1 Firmware | ||
Lenovo Ideacentre M75s Gen 2 Firmware | <m46kt2da | |
Lenovo Ideacentre M75s Gen 2 Firmware | ||
Lenovo ThinkCentre M75s-1 | <m2ckt4da | |
Lenovo ThinkCentre M75s-1 Firmware | ||
Lenovo Ideacentre M75t Gen 2 | <m46kt2da | |
Lenovo Thinkcentre M75t Gen 2 Firmware | ||
Lenovo Ideacentre M80q | <m2wkt57a | |
Lenovo Ideacentre M80q | ||
Lenovo ThinkCentre M810z All-in-One Firmware | <m1ckt49a | |
Lenovo ThinkCentre M810z All-in-One | ||
Lenovo thinkcentre m818z firmware | <m1ekt25a | |
Lenovo thinkcentre m818z | ||
Lenovo Thinkcentre M820z All-in-one | <m1nkt58a | |
Lenovo Thinkcentre M820z All-in-one | ||
Lenovo Thinkcentre M90a Gen 2 Firmware | <m2rkt52a | |
Lenovo ThinkCentre M90a Tiny | ||
Lenovo Thinkcentre M90a Gen 2 Firmware | <m3lkt26a | |
Lenovo Thinkcentre M90a Gen 2 Firmware | ||
Lenovo Ideacentre M90q Gen 2 Firmware | <m3jkt34a | |
Lenovo Ideacentre M90q Gen 2 Firmware | ||
Lenovo Ideacentre M90q Tiny Firmware | <m2wkt57a | |
Lenovo ThinkCentre M90q Gen 3 | ||
Lenovo thinkcentre m910q firmware | <m1akt56a | |
Lenovo Ideacentre M910q | ||
Lenovo thinkcentre m910s firmware | <m1akt56a | |
Lenovo thinkcentre m910s | ||
Lenovo Ideacentre M910t Firmware | <m1akt56a | |
Lenovo thinkcentre m910t | ||
Lenovo thinkcentre m910x firmware | <m1akt56a | |
Lenovo thinkcentre m910x | ||
Lenovo Ideacentre M920q Firmware | <m1ukt67a | |
Lenovo thinkcentre m920q | ||
Lenovo thinkcentre m920s firmware | <m1ukt67a | |
Lenovo thinkcentre m920s | ||
Lenovo Ideacentre M920t Firmware | <m1ukt67a | |
Lenovo thinkcentre m920t | ||
Lenovo Ideacentre M920x Firmware | <m1ukt67a | |
Lenovo Ideacentre M920x | ||
Lenovo Ideacentre Neo 50s Gen 3 Firmware | <m49kt1da | |
Lenovo Thinkcentre Neo 50s Gen 3 Firmware | ||
Lenovo ThinkCentre Neo 50T Gen 3 Firmware | <m42kt40a | |
Lenovo thinkcentre neo 50t gen 3 | ||
Lenovo qitian a815 firmware | <m1rkt38a | |
Lenovo qitian a815 | ||
Lenovo qt m410 firmware | <m16kt68a | |
Lenovo qt m410 | ||
Lenovo ThinkCentre QT B415 Firmware | <m16kt68a | |
Lenovo qt b415 | ||
Lenovo qt m415 firmware | <m16kt68a | |
Lenovo qt m415 | ||
Lenovo Ideacentre T540-15AMA G Firmware | <m2ckt4da | |
Lenovo Ideacentre T540-15AMA G Firmware | ||
Lenovo Ideacentre T540-15ick Firmware | <o4kkt16a | |
Lenovo Ideacentre T540-15ick Firmware | ||
Lenovo thinkcentre e75 t\/s firmware | <m16kt68a | |
Lenovo thinkcentre e75 t\/s | ||
Lenovo thinkcentre m610 firmware | <m1akt56a | |
Lenovo thinkcentre m610 | ||
Lenovo thinkcentre m6600q firmware | <fwktbaa | |
Lenovo thinkcentre m6600q | ||
Lenovo thinkcentre m6600t firmware | <fwktbaa | |
Lenovo thinkcentre m6600t | ||
Lenovo thinkcentre m6600s firmware | <fwktbaa | |
Lenovo thinkcentre m6600s | ||
Lenovo ideacentre 3-07ada05 firmware | <o4fkt29a | |
Lenovo ideacentre 3-07ada05 | ||
Lenovo ideacentre 5-14are05 firmware | <o4zkt29a | |
Lenovo ideacentre 5-14are05 | ||
Lenovo ideacentre g5-14amr05 firmware | <o4zkt29a | |
Lenovo Ideacentre G5-14AMR05 | ||
Lenovo ThinkCentre M90s Firmware | <m2tkt50a | |
Lenovo ThinkCentre M90s Gen 3 | ||
Lenovo Thinkcentre M900x Firmware | <fwktbfa | |
Lenovo Thinkcentre M900x Firmware | ||
Lenovo thinkcentre m900 firmware | <fwktbfa | |
Lenovo thinkcentre m900 | ||
Lenovo ThinkCentre M80t Firmware | <m2tkt50a | |
Lenovo ThinkCentre M80t Gen 3 | ||
Lenovo Ideacentre M80s Firmware | <m2tkt50a | |
Lenovo ThinkCentre M80s Gen 3 | ||
Lenovo thinkcentre m800 firmware | <fwktbfa | |
Lenovo thinkcentre m800 | ||
Lenovo ThinkCentre M70t | <m2tkt50a | |
Lenovo ThinkCentre M70t | ||
Lenovo ThinkCentre M70s Firmware | <m2tkt50a | |
Lenovo ThinkCentre M70s | ||
Lenovo ideacentre 510-15ick firmware | <o4kkt16a | |
Lenovo ideacentre 510-15ick | ||
Lenovo ideacentre 510a-15arr firmware | <o4dkt43a | |
Lenovo ideacentre 510a-15arr | ||
Lenovo ideacentre 510a-15ick firmware | <o4kkt16a | |
Lenovo ideacentre 510a-15ick | ||
Lenovo ideacentre 510s-07icb firmware | <m22kt47a | |
Lenovo ideacentre 510s-07icb | ||
Lenovo ideacentre 510s-07ick firmware | <m30kt26a | |
Lenovo ideacentre 510s-07ick | ||
Lenovo ideacentre 720-18apr firmware | <m25kt61a | |
Lenovo ideacentre 720-18apr | ||
Lenovo Ideacentre A340-22igm | <o51kt12a | |
Lenovo Ideacentre A340-22igm Firmware | ||
Lenovo ideacentre a340-24igm firmware | <o51kt12a | |
Lenovo Ideacentre A340-24IGM All-in-One | ||
Lenovo V30a-22iml Firmware | <m37kt28a | |
Lenovo V30a-22iml Firmware | ||
Lenovo v30a-24iml | <m37kt28a | |
Lenovo v30a-24iml | ||
Lenovo V330-20ICB All-in-One Firmware | <m1qkt47a | |
Lenovo v330-20icb all-in-one | ||
Lenovo V35s-07ada Firmware | <o4fkt29a | |
Lenovo v35s-07ada | ||
Lenovo V50a-22IMB Firmware | <m36kt28a | |
Lenovo V50a-22IMB Firmware | ||
Lenovo v50a-24imb | <m36kt28a | |
Lenovo v50a-24imb | ||
Lenovo V50s-07imb Firmware | <m2vkt1da | |
Lenovo V50s-07imb | ||
Lenovo V50t-13imb G2 Firmware | <o4hkt38a | |
Lenovo V50t-13imb G2 Firmware | ||
Lenovo V50t-13iob G2 | <m3gkt33a | |
Lenovo V50t-13iob | ||
Lenovo V520 | <m16kt68a | |
Lenovo V520 Firmware | ||
Lenovo V520s | <m16kt68a | |
Lenovo V520s | ||
Lenovo V530-15ARR Firmware | <o4dkt43a | |
Lenovo V530-15ARR | ||
Lenovo V530-15ICB | <m1ykt70a | |
Lenovo V530-15ICB | ||
Lenovo V530-15ICR | <m2ykt31a | |
Lenovo V530-15ICR Firmware | ||
Lenovo V530-22ICB All-in-one Firmware | <m20kt52a | |
Lenovo V530-22ICB All-in-one Firmware | ||
Lenovo V530-24ICB | <m20kt52a | |
Lenovo V530-24ICB All-in-One | ||
Lenovo v530s-07icb firmware | <m22kt48a | |
Lenovo v530s-07icb | ||
Lenovo V530s-07ICR | <m30kt26a | |
Lenovo V530s-07ICR Firmware | ||
Lenovo V540-24IWL All-in-one Firmware | <m29kt39a | |
Lenovo V540-24IWL All-in-One | ||
Lenovo V55t Gen 2 13ACN | <o5jkt20a | |
Lenovo V55t Gen 2 13ACN | ||
Lenovo V55t-15API Firmware | <o4dkt43a | |
Lenovo V55t-15API | ||
Lenovo V55t-15are Firmware | <o4dkt43a | |
Lenovo V55t-15are | ||
Lenovo yangtian afq150 firmware | <fwktbaa | |
Lenovo yangtian afq150 | ||
Lenovo yta8900f firmware | <fwktbaa | |
Lenovo yta8900f | ||
Lenovo Yoga A940-27icb All-in-One | <o43kt43a | |
Lenovo Yoga A940-27icb All-in-One | ||
Lenovo ThinkEdge SE30 Firmware | <m3fkt29a | |
Lenovo ThinkEdge SE30 Firmware | ||
Lenovo Thinksmart Core & Controller Full Room Kit | =_microsoft_teams_rooms_firmware | |
Lenovo Thinksmart Core & Controller Full Room Kit | =_microsoft_teams_rooms | |
Lenovo Thinksmart Core & Controller Full Room Kit | =_zoom_rooms_firmware | |
Lenovo Thinksmart Core & Controller Full Room Kit | =_zoom_rooms | |
Lenovo Thinksmart Core & Controller Kit | =_microsoft_teams_rooms_firmware | |
Lenovo Thinksmart Core & Controller Kit | =_microsoft_teams_rooms | |
Lenovo Thinksmart Core & Controller Kit | =_zoom_rooms_firmware | |
Lenovo Thinksmart Core & Controller Kit | =_zoom_rooms | |
Lenovo ThinkSmart Core Device for Logitech | ||
Lenovo ThinkSmart Core Device for Logitech | ||
Lenovo Thinksmart Core Device for Poly | ||
Lenovo Thinksmart Core Device For Poly Firmware | ||
Lenovo Thinksmart Core Device | =_zoom_rooms_firmware | |
Lenovo Thinksmart Core Device | =_zoom_rooms | |
Lenovo ThinkSmart Hub Teams Firmware | <m2xkt20a | |
Lenovo Thinksmart Hub Teams | ||
Lenovo ThinkSmart Hub Zoom Firmware | <m2xkt20a | |
Lenovo ThinkSmart Hub Zoom | ||
Lenovo Thinkstation P310 Workstation Firmware | <fwktbaa | |
Lenovo Thinkstation P310 Workstation | ||
Lenovo Thinkstation P320 Tiny Workstation Firmware | <m1akt56a | |
Lenovo Thinkstation P320 Tiny Workstation | ||
Lenovo thinkstation p330 tiny firmware | <m1ukt67a | |
Lenovo thinkstation p330 tiny | ||
Lenovo Thinkstation P340 Tiny Workstation Firmware | <m2wkt57a | |
Lenovo Thinkstation P340 Tiny Workstation | ||
Lenovo Thinkstation P340 Firmware | <s08kt50a | |
Lenovo Thinkstation P340 Firmware | ||
Lenovo ThinkStation P348 Workstation Firmware | <m3kkt34a | |
Lenovo Thinkstation P348 | ||
Lenovo ThinkStation P350 Tiny Firmware | <m3jkt34a | |
Lenovo Thinkstation P350 Tiny Workstation | ||
Lenovo ThinkStation P350 Firmware | <=s0akt34a | |
Lenovo Thinkstation P350 Workstation | ||
Lenovo ThinkStation P520 | <s03kt55a | |
Lenovo ThinkStation P520 Workstation | ||
Lenovo Thinkstation P520c | <s03kt55a | |
Lenovo ThinkStation P520c Workstation | ||
Lenovo ThinkStation P620 Workstation Firmware | <s07kt25a | |
Lenovo ThinkStation P620 Workstation | ||
Lenovo Thinkstation Stadia GGP-120 Firmware | <s03kt55a | |
Lenovo Thinkstation Stadia GGP-120 Firmware | ||
Lenovo Thinkstation P318 Firmware | <m1akt56a | |
Lenovo Thinkstation P318 Firmware | ||
lenovo thinkstation p920 firmware | <s05kt62a | |
Lenovo thinkstation p920 | ||
lenovo thinkstation p720 firmware | <s05kt62a | |
Lenovo ThinkStation P720 Workstation | ||
Lenovo thinkstation p320 firmware | <s06kt59a | |
Lenovo ThinkStation P320 Workstation | ||
Lenovo ThinkSystem ST50 Firmware | <ite123e | |
Lenovo ThinkSystem ST50 | ||
Lenovo ThinkSystem ST58 Firmware | <ite123e | |
Lenovo ThinkSystem ST58 |
Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-94953.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-40136 has a severity rating that varies depending on context, but it is classified as a critical vulnerability due to potential local exploitation leading to sensitive information leakage.
To fix CVE-2022-40136, ensure that your firmware is updated to the latest version provided by Lenovo that addresses this specific vulnerability.
CVE-2022-40136 affects certain Lenovo devices including specific models from the Ideacentre, Thinkcentre, and Legion product lines.
Users with local access to affected Lenovo devices that have outdated firmware versions are vulnerable to CVE-2022-40136.
Currently, the best course of action is to update the firmware as no specific workaround is provided for CVE-2022-40136.