Lucene search

[email protected]CVE-2022-40136

HistoryJan 30, 2023 - 10:15 p.m.

CVE-2022-40136

2023-01-3022:15:00

CWE-125

[email protected]

web.nvd.nist.gov

cve-2022-40136

information leak

smi handler

lenovo

wmi

vulnerability

local access

elevated privileges

smm memory

nvd

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.3 Medium

AI Score

Confidence

High

1.4 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:M/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

CPENameOperatorVersion
lenovo:ideacentre_c5-14imb05_firmwarelenovo ideacentre c5-14imb05 firmwarelto4hkt38a
lenovo:thinkcentre_e96z_firmwarelenovo thinkcentre e96z firmwareltm26kt22a
lenovo:ideacentre_3_07iab7_firmwarelenovo ideacentre 3 07iab7 firmwareltm49kt1da
lenovo:ideacentre_3-07imb05_firmwarelenovo ideacentre 3-07imb05 firmwareltm2vkt1da
lenovo:ideacentre_5_14iab7_firmwarelenovo ideacentre 5 14iab7 firmwareltm42kt40a
lenovo:ideacentre_5-14acn6_firmwarelenovo ideacentre 5-14acn6 firmwarelto5ekt21a
lenovo:ideacentre_5-14imb05_firmwarelenovo ideacentre 5-14imb05 firmwarelto4hkt38a
lenovo:ideacentre_5-14iob6_firmwarelenovo ideacentre 5-14iob6 firmwareltm3gkt33a
lenovo:ideacentre_creator_5-14iob6_firmwarelenovo ideacentre creator 5-14iob6 firmwarelem3gkt33a
lenovo:ideacentre_g5-14imb05_firmwarelenovo ideacentre g5-14imb05 firmwarelto4hkt38a

CPE	Name	Operator	Version
lenovo:ideacentre_c5-14imb05_firmware	lenovo ideacentre c5-14imb05 firmware	lt	o4hkt38a
lenovo:thinkcentre_e96z_firmware	lenovo thinkcentre e96z firmware	lt	m26kt22a
lenovo:ideacentre_3_07iab7_firmware	lenovo ideacentre 3 07iab7 firmware	lt	m49kt1da
lenovo:ideacentre_3-07imb05_firmware	lenovo ideacentre 3-07imb05 firmware	lt	m2vkt1da
lenovo:ideacentre_5_14iab7_firmware	lenovo ideacentre 5 14iab7 firmware	lt	m42kt40a
lenovo:ideacentre_5-14acn6_firmware	lenovo ideacentre 5-14acn6 firmware	lt	o5ekt21a
lenovo:ideacentre_5-14imb05_firmware	lenovo ideacentre 5-14imb05 firmware	lt	o4hkt38a
lenovo:ideacentre_5-14iob6_firmware	lenovo ideacentre 5-14iob6 firmware	lt	m3gkt33a
lenovo:ideacentre_creator_5-14iob6_firmware	lenovo ideacentre creator 5-14iob6 firmware	le	m3gkt33a
lenovo:ideacentre_g5-14imb05_firmware	lenovo ideacentre g5-14imb05 firmware	lt	o4hkt38a

Rows per page:

1-10 of 1491

References

support.lenovo.com/us/en/product_security/LEN-94953

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.3 Medium

AI Score

Confidence

High

1.4 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:M/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2022-40136

prion1 cvelist1 qualysblog1