Lucene search

PRIOn knowledge basePRION:CVE-2022-40135

HistoryJan 30, 2023 - 10:15 p.m.

Information disclosure

2023-01-3022:15:00

PRIOn knowledge base

www.prio-n.com

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.3 Medium

AI Score

Confidence

High

1.4 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:M/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.4%

JSON

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

CPENameOperatorVersion
ideacentre_3-07ada05_firmwareeq< o4fkt29a
ideacentre_3-07imb05_firmwareeq< m2vkt1da
ideacentre_3_07iab7_firmwareeq< m49kt1da
ideacentre_5-14acn6_firmwareeq< o5ekt21a
ideacentre_5-14are05_firmwareeq< o4zkt29a
ideacentre_5-14imb05_firmwareeq< o4hkt38a
ideacentre_5-14iob6_firmwareeq< m3gkt33a
ideacentre_510-15ick_firmwareeq< o4kkt16a
ideacentre_510a-15arr_firmwareeq< o4dkt43a
ideacentre_510a-15ick_firmwareeq< o4kkt16a

Name	Operator	Version
ideacentre_3-07ada05_firmware	eq	< o4fkt29a
ideacentre_3-07imb05_firmware	eq	< m2vkt1da
ideacentre_3_07iab7_firmware	eq	< m49kt1da
ideacentre_5-14acn6_firmware	eq	< o5ekt21a
ideacentre_5-14are05_firmware	eq	< o4zkt29a
ideacentre_5-14imb05_firmware	eq	< o4hkt38a
ideacentre_5-14iob6_firmware	eq	< m3gkt33a
ideacentre_510-15ick_firmware	eq	< o4kkt16a
ideacentre_510a-15arr_firmware	eq	< o4dkt43a
ideacentre_510a-15ick_firmware	eq	< o4kkt16a

Rows per page:

1-10 of 1261

References

support.lenovo.com/us/en/product_security/LEN-94953

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.3 Medium

AI Score

Confidence

High

1.4 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:M/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.4%

JSON

Related for PRION:CVE-2022-40135