medium
6.7
CWE
120 119
Advisory Published
Updated

CVE-2022-40137: Buffer Overflow

First published: Mon Jan 30 2023(Updated: )

A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Credit: psirt@lenovo.com

Affected SoftwareAffected VersionHow to fix
Lenovo Ideacentre C5-14imb05 Firmware=o4hkt3aa
Lenovo Ideacentre C5-14imb05
=m26kt24a
Lenovo Ideacentre 3 07iab7 Firmware=m49kt1da
Lenovo Ideacentre 3 07iab7
Lenovo Ideacentre 3-07imb05 Firmware=m2vkt1fa
Lenovo Ideacentre 3-07imb05
Lenovo Ideacentre 5 14iab7 Firmware=m42kt40a
Lenovo Ideacentre 5 14iab7
Lenovo Ideacentre 5-14acn6 Firmware=o5ekt23a
Lenovo Ideacentre 5-14acn6
Lenovo Ideacentre 5-14imb05 Firmware=o4hkt3aa
Lenovo Ideacentre 5-14imb05
Lenovo Ideacentre 5-14iob6 Firmware=m3gkt38a
Lenovo Ideacentre 5-14iob6
Lenovo Ideacentre Aio 3-22ada6 Firmware=o5ckt24a
Lenovo Ideacentre Aio 3-22ada6
Lenovo Ideacentre Aio 3-22iil5 Firmware=o56kt22a
Lenovo Ideacentre Aio 3-22iil5
Lenovo Ideacentre Aio 3-22itl6 Firmware=o5akt31a
Lenovo Ideacentre Aio 3-22itl6
Lenovo Ideacentre Aio 3-24ada6 Firmware=o5ckt24a
Lenovo Ideacentre Aio 3-24ada6
Lenovo Ideacentre Aio 3-24alc6 Firmware=o5bkt24a
Lenovo Ideacentre Aio 3-24alc6
Lenovo Ideacentre Aio 3-24iil5 Firmware=o56kt22a
Lenovo Ideacentre Aio 3-24iil5
Lenovo Ideacentre Aio 3-24itl6 Firmware=o5akt31a
Lenovo Ideacentre Aio 3-24itl6
Lenovo Ideacentre Aio 3-27alc6 Firmware=o5bkt24a
Lenovo Ideacentre Aio 3-27alc6
Lenovo Ideacentre Aio 3-27itl6 Firmware=o5akt31a
Lenovo Ideacentre Aio 3-27itl6
Lenovo Ideacentre G5-14imb05 Firmware=o4hkt3aa
Lenovo Ideacentre G5-14imb05
Lenovo Ideacentre Gaming 5 17acn7 Firmware=o5ekt23a
Lenovo Ideacentre Gaming 5 17acn7
Lenovo Ideacentre Gaming 5 17iab7 Firmware=m42kt40a
Lenovo Ideacentre Gaming 5 17iab7
Lenovo Ideacentre Gaming 5-14acn6 Firmware=o5ekt23a
Lenovo Ideacentre Gaming 5-14acn6
Lenovo Ideacentre Gaming 5-14iob6 Firmware=m3gkt38a
Lenovo Ideacentre Gaming 5-14iob6
Lenovo Ideacentre Mini 5-01imh05 Firmware=o4ekt17a
Lenovo Ideacentre Mini 5-01imh05
Lenovo Legion C530-19icb Firmware=o4bkt21a
Lenovo Legion C530-19icb
Lenovo Legion T5-26iob6 Firmware=o54kt20a
Lenovo Legion T5-26iob6
Lenovo Legion T5-28icb05 Firmware=o4bkt21a
Lenovo Legion T5-28icb05
Lenovo Legion T530-28apr Firmware=o4gkt17a
Lenovo Legion T530-28apr
Lenovo Legion T530-28icb Firmware=o4bkt21a
Lenovo Legion T530-28icb
Lenovo Legion T7-34imz5 Firmware=o4lkt1fa
Lenovo Legion T7-34imz5
Lenovo Legion T7-34imz5 Firmware=o5fkt14a
=m3skt21a
=m1wkt46a
=m28kt39a
=fwktbfa
=m2skt26a
=m3nkt21a
=m4ekt18a
=m2vkt1fa
=m2wkt55a
=m3jkt35a
=m43kt16a
=m2tkt50a
=m41kt2da
=m2tkt50a
=m41kt2da
=m1zkt39a
=m1akt56a
=m16kt69a
=m16kt69a
=m1xkt58a
=m11kt55a
=m2ckt4da
=m2ckt4da
=m30kt27a
=m1ukt6ba
=m1ukt6ba
=m1ukt6ba
=m25kt61a
=m33kt26a
=m47kt24a
=m2fkt2ea
=m3akt44a
=m3bkt2aa
=m46kt2ba
=m2ckt4da
=m3akt44a
=m3bkt2aa
=m46kt2ba
=fwktbfa
=m2wkt55a
=m4gkt1da
=m2tkt50a
=m40kt2da
=m2tkt50a
=m40kt2da
=m1ckt50a
=m1ekt27a
=m1nkt59a
=fwktbfa
=fwktbfa
=m2rkt55a
=m3lkt26a
=m4ikt17a
=m3jkt35a
=m4gkt1da
=m2wkt55a
=m2tkt50a
=m40kt2da
=m2tkt50a
=m40kt2da
=m1akt56a
=m1akt56a
=m1akt56a
=m1akt56a
=m1ukt6ba
=m1ukt6ba
=m1ukt6ba
=m1ukt6ba
=m49kt1da
=m42kt40a
=m40kt2da
Lenovo Qitian A815 Firmware=m1rkt39a
Lenovo Qitian A815
Lenovo Qt M410 Firmware=m16kt69a
Lenovo Qt M410
Lenovo Qt B415 Firmware=m16kt69a
Lenovo Qt B415
Lenovo Qt M415 Firmware=m16kt69a
Lenovo Qt M415
=m2ckt4da
=o4kkt16a
Lenovo Thinkcentre E75t Firmware=m16kt69a
Lenovo Thinkcentre E75t
Lenovo Thinkcentre E75s Firmware=m16kt69a
Lenovo Thinkcentre E75s
Lenovo Thinkcentre M610 Firmware=m1akt56a
Lenovo Thinkcentre M610
Lenovo Thinkcentre M6600q Firmware=fwktc0a
Lenovo Thinkcentre M6600q
Lenovo Thinkcentre M6600t Firmware=fwktc0a
Lenovo Thinkcentre M6600t
Lenovo Thinkcentre M6600s Firmware=fwktc0a
Lenovo Thinkcentre M6600s
Lenovo Thinkcentre M700q Firmware=fwktc0a
Lenovo Thinkcentre M700q
Lenovo Thinkcentre M8600t Firmware=fwktc0a
Lenovo Thinkcentre M8600t
Lenovo Thinkcentre M8600s Firmware=fwktc0a
Lenovo Thinkcentre M8600s
Lenovo Ideacentre 3-07ada05 Firmware=o4fkt33a
Lenovo Ideacentre 3-07ada05
Lenovo Ideacentre 5-14are05 Firmware=o4zkt29a
Lenovo Ideacentre 5-14are05
=o4tkt29a
Lenovo Ideacentre Aio 3-22imb05 Firmware=o4rkt3a
Lenovo Ideacentre Aio 3-22imb05
=o4skt28a
Lenovo Ideacentre Aio 3-24imb05 Firmware=o4rkt3a
Lenovo Ideacentre Aio 3-24imb05
Lenovo Ideacentre Aio 3-27imb05 Firmware=o4rkt3a
Lenovo Ideacentre Aio 3-27imb05
Lenovo Ideacentre G5-14amr05 Firmware=o4zkt29a
Lenovo Ideacentre G5-14amr05
=o4kkt16a
Lenovo Ideacentre 510a-15arr Firmware=o4dkt44a
Lenovo Ideacentre 510a-15arr
=o4kkt16a
Lenovo Ideacentre 510s-07icb Firmware=m22kt48a
Lenovo Ideacentre 510s-07icb
Lenovo Ideacentre 510s-07ick Firmware=m30kt27a
Lenovo Ideacentre 510s-07ick
Lenovo Ideacentre 720-18apr Firmware=m25kt61a
Lenovo Ideacentre 720-18apr
=o4ckt23a
=o44kt32a
=o4pkt15a
=o51kt12a
=o46kt36a
=o44kt32a
=o4pkt15a
=o51kt12a
=o46kt36a
Lenovo V30a-22iml Firmware=m37kt29a
Lenovo V30a-22iml
Lenovo V30a-24iml Firmware=m37kt29a
Lenovo V30a-24iml
=m1qkt49a
Lenovo V35s-07ada Firmware=o4fkt33a
Lenovo V35s-07ada
Lenovo V50a-22imb Firmware=m36kt31a
Lenovo V50a-22imb
Lenovo V50a-24imb Firmware=m36kt31a
Lenovo V50a-24imb
Lenovo V50s-07imb Firmware=m2vkt1fa
Lenovo V50s-07imb
Lenovo V50t-13imb Firmware=o4hkt3aa
Lenovo V50t-13imb
Lenovo V50t-13iob G2 Firmware=m3gkt38a
Lenovo V50t-13iob G2
Lenovo V520 Firmware=m16kt69a
Lenovo V520
Lenovo V520s Firmware=m16kt69a
Lenovo V520s
Lenovo V530-15arr Firmware=o4dkt44a
Lenovo V530-15arr
Lenovo V530-15icb Firmware=m1ykt72a
Lenovo V530-15icb
Lenovo V530-15icr Firmware=m2ykt33a
Lenovo V530-15icr
=m20kt53a
=m20kt53a
Lenovo V530s-07icb Firmware=m22kt48a
Lenovo V530s-07icb
Lenovo V530s-07icr Firmware=m30kt27a
Lenovo V530s-07icr
=m29kt40a
Lenovo V55t Gen 2 13acn Firmware=o5jkt20a
Lenovo V55t Gen 2 13acn
Lenovo V55t-15api Firmware=o4dkt44a
Lenovo V55t-15api
=o52kt23a
Lenovo Yangtian Afq150 Firmware=fwktc0a
Lenovo Yangtian Afq150
Lenovo Yta8900f Firmware=fwktc0a
Lenovo Yta8900f
=o43kt43a
=hr6n0661
Lenovo Thinksystem Hr630x Firmware=hr6n0661
Lenovo Thinksystem Hr630x
Lenovo Thinksystem Hr650x Firmware=hr6n0661
Lenovo Thinksystem Hr650x
Lenovo Thinkserver Rd350g Firmware=vb3ts891
Lenovo Thinkserver Rd350g
Lenovo Thinkedge Se30 Firmware=m3fkt29a
Lenovo Thinkedge Se30
=_microsoft_teams_rooms_firmware-m4ckt14a
=_microsoft_teams_rooms
=_zoom_rooms_firmware-m4ckt14a
=_zoom_rooms
=_microsoft_teams_rooms_firmware-m4ckt14a
=_microsoft_teams_rooms
=_zoom_rooms_firmware-m4ckt14a
=_zoom_rooms
=m4ckt14a
=m4ckt14a
=_zoom_rooms_firmware-m4ckt14a
=_zoom_rooms
=m2xkt20a
=m2xkt20a
=m23kt31a
=ive178i
=ive178i
=5.05.0
=5.05.0
Lenovo Thinkagile Hx5530 Firmware=afe118m
Lenovo Thinkagile Hx5530
Lenovo Thinkagile Vx3331 Firmware=afe118m
Lenovo Thinkagile Vx3331
=hye122f
Lenovo Thinkagile Hx1320 Firmware=ive178i
Lenovo Thinkagile Hx1320
Lenovo Thinkagile Hx1321 Firmware=ive178i
Lenovo Thinkagile Hx1321
Lenovo Thinkagile Hx1331 Firmware=afe118m
Lenovo Thinkagile Hx1331
Lenovo Thinkagile Hx1520-r Firmware=ive178i
Lenovo Thinkagile Hx1520-r
Lenovo Thinkagile Hx1521-r Firmware=ive178i
Lenovo Thinkagile Hx1521-r
=ive178i
Lenovo Thinkagile Hx2320
Lenovo Thinkagile Hx2320-e Firmware=ive178i
Lenovo Thinkagile Hx2320-e
Lenovo Thinkagile Hx2321 Firmware=ive178i
Lenovo Thinkagile Hx2321
Lenovo Thinkagile Hx2330 Firmware=afe118m
Lenovo Thinkagile Hx2330
Lenovo Thinkagile Hx2331 Firmware=afe118m
Lenovo Thinkagile Hx2331
Lenovo Thinkagile Hx2720-e Firmware=tee178i
Lenovo Thinkagile Hx2720-e
Lenovo Thinkagile Hx3320 Firmware=ive178i
Lenovo Thinkagile Hx3320
Lenovo Thinkagile Hx3321 Firmware=ive178i
Lenovo Thinkagile Hx3321
Lenovo Thinkagile Hx3330 Firmware=afe118m
Lenovo Thinkagile Hx3330
Lenovo Thinkagile Hx3331 Firmware=afe118m
Lenovo Thinkagile Hx3331
Lenovo Thinkagile Hx3375 Firmware=d8e128f
Lenovo Thinkagile Hx3375
Lenovo Thinkagile Hx3376 Firmware=d8e128f
Lenovo Thinkagile Hx3376
Lenovo Thinkagile Hx3520-g Firmware=ive178i
Lenovo Thinkagile Hx3520-g
Lenovo Thinkagile Hx3521-g Firmware=ive178i
Lenovo Thinkagile Hx3521-g
Lenovo Thinkagile Hx3720 Firmware=tee178i
Lenovo Thinkagile Hx3720
Lenovo Thinkagile Hx3721 Firmware=tee178i
Lenovo Thinkagile Hx3721
Lenovo Thinkagile Hx5520 Firmware=ive178i
Lenovo Thinkagile Hx5520
Lenovo Thinkagile Hx5520-c Firmware=ive178i
Lenovo Thinkagile Hx5520-c
Lenovo Thinkagile Hx5521 Firmware=ive178i
Lenovo Thinkagile Hx5521
Lenovo Thinkagile Hx5521-c Firmware=ive178i
Lenovo Thinkagile Hx5521-c
Lenovo Thinkagile Hx5531 Firmware=afe118m
Lenovo Thinkagile Hx5531
Lenovo Thinkagile Hx7520 Firmware=ive178i
Lenovo Thinkagile Hx7520
Lenovo Thinkagile Hx7521 Firmware=ive178i
Lenovo Thinkagile Hx7521
Lenovo Thinkagile Hx7530 Firmware=afe118m
Lenovo Thinkagile Hx7530
Lenovo Thinkagile Hx7531 Firmware=afe118m
Lenovo Thinkagile Hx7531
Lenovo Thinkagile Hx7820 Firmware=pse144n
Lenovo Thinkagile Hx7820
Lenovo Thinkagile Hx7821 Firmware=pse144n
Lenovo Thinkagile Hx7821
=ive178i
=ive178i
=hye122f
=afe118m
=afe118m
=afe118m
=afe118m
=ive178i
=ive178i
=afe118m
=afe118m
=afe118m
=afe118m
=ive178i
=ive178i
=hye122f
Lenovo Thinkagile Mx1021
Lenovo Thinkagile Vx 1se Firmware=ise130e
Lenovo Thinkagile Vx 1se
=ive178i
Lenovo Thinkagile Vx 1u
=ive178i
Lenovo Thinkagile Vx 2u
Lenovo Thinkagile Vx 2u4n Firmware=tee178i
Lenovo Thinkagile Vx 2u4n
Lenovo Thinkagile Vx 4u Firmware=pse144n
Lenovo Thinkagile Vx 4u
=ise130e
Lenovo Thinkagile Vx1320
=ive178i
Lenovo Thinkagile Vx2320
Lenovo Thinkagile Vx2330 Firmware=afe118m
Lenovo Thinkagile Vx2330
=ive178i
Lenovo Thinkagile Vx3320
Lenovo Thinkagile Vx3330 Firmware=afe118m
Lenovo Thinkagile Vx3330
=ive178i
Lenovo Thinkagile Vx3520-g
Lenovo Thinkagile Vx3530-g Firmware=afe118m
Lenovo Thinkagile Vx3530-g
=tee178i
Lenovo Thinkagile Vx3720
=ive178i
Lenovo Thinkagile Vx5520
Lenovo Thinkagile Vx5530 Firmware=afe118m
Lenovo Thinkagile Vx5530
=ive178i
Lenovo Thinkagile Vx7320 N
Lenovo Thinkagile Vx7330 Firmware=afe118m
Lenovo Thinkagile Vx7330
=ive178i
Lenovo Thinkagile Vx7520
=ive178i
Lenovo Thinkagile Vx7520 N
Lenovo Thinkagile Vx7530 Firmware=afe118m
Lenovo Thinkagile Vx7530
Lenovo Thinkagile Vx7531 Firmware=afe118m
Lenovo Thinkagile Vx7531
=pse144n
Lenovo Thinkagile Vx7820
Lenovo Thinkserver Rd350 Firmware=5.05.0
Lenovo ThinkServer RD350
Lenovo Thinkserver Rd450 Firmware=5.05.0
Lenovo Thinkserver Rd450
Lenovo Thinkserver Rd550 Firmware=5.03.0
Lenovo Thinkserver Rd550
Lenovo Thinkserver Rd650 Firmware=5.05.0
Lenovo Thinkserver Rd650
Lenovo Thinkserver Rs160 Firmware=vb1ts307
Lenovo Thinkserver Rs160
=vb1ts307
=tee176k
=tee176k
=tee176k
Lenovo Thinkserver Sd350 Firmware=5.05.0
Lenovo Thinkserver Sd350
Lenovo Thinkserver Td350 Firmware=5.04.0
Lenovo Thinkserver Td350
Lenovo Thinkserver Ts150 Firmware=81i\/b7s
Lenovo Thinkserver Ts150
Lenovo Thinkserver Ts250 Firmware=81i\/b7s
Lenovo Thinkserver Ts250
Lenovo Thinkserver Ts450 Firmware=fwktb7s
Lenovo Thinkserver Ts450
Lenovo Thinkserver Ts460 Firmware=tb1ts307
Lenovo Thinkserver Ts460
Lenovo Thinkserver Ts550 Firmware=fwktb7s
Lenovo Thinkserver Ts550
=tb1ts307
=fwktc0a
=m1akt56a
=s06kt61a
=m1ukt6ba
=m1vkt6ba
=m1vkt6ba
=m2wkt55a
=s08kt50a
=m3kkt36a
=m3jkt35a
=s0akt35a
=m4gkt1da
=s03kt55a
=s03kt55a
=s07kt4aa
=s04kt62a
=s04kt62p
=s05kt62a
=s05kt62p
=s03kt55a
=m1akt56a
=ite125a
=ite125a

Remedy

Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-94953.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203