{"id":"CVE-2022-40136","url":"https://www.cyber-defence.io/tools/cve/CVE-2022-40136","generatedAt":"2026-10-27T17:45:04.808Z","title":"An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.","description":"An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.","published":"2023-01-30T22:15:12.000Z","lastModified":"2026-06-17T05:01:00.000Z","status":"Modified","sourceIdentifier":"psirt@lenovo.com","cvss":{"version":"3.1","score":4.4,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-125"],"affected":["lenovo/ideacentre c5-14imb05 firmware","lenovo/thinkcentre e96z firmware","lenovo/ideacentre 3 07iab7 firmware","lenovo/ideacentre 3-07imb05 firmware","lenovo/ideacentre 5 14iab7 firmware","lenovo/ideacentre 5-14acn6 firmware","lenovo/ideacentre 5-14imb05 firmware","lenovo/ideacentre 5-14iob6 firmware","lenovo/ideacentre creator 5-14iob6 firmware","lenovo/ideacentre g5-14imb05 firmware","lenovo/ideacentre gaming 5 17acn7 firmware","lenovo/ideacentre gaming 5 17iab7 firmware","lenovo/ideacentre gaming 5-14acn6 firmware","lenovo/ideacentre gaming 5-14iob6 firmware","lenovo/legion c530-19icb firmware","lenovo/legion t5-26iob6 firmware","lenovo/legion t5-28icb05 firmware","lenovo/legion t530-28apr firmware","lenovo/legion t530-28icb firmware","lenovo/legion t7-34imz5 firmware","lenovo/thinkcentre m70q gen 2 firmware","lenovo/thinkcentre m710t firmware","lenovo/thinkcentre m60e tiny firmware","lenovo/thinkcentre m625q firmware","lenovo/thinkcentre m630e firmware","lenovo/thinkcentre m70a firmware","lenovo/thinkcentre m70a gen 2 firmware","lenovo/thinkcentre m70c firmware","lenovo/thinkcentre m70q firmware","lenovo/thinkcentre m70q gen 3 firmware","lenovo/thinkcentre m70s gen 3 firmware","lenovo/thinkcentre m70t gen 3 firmware","lenovo/thinkcentre m710e firmware","lenovo/thinkcentre m710q firmware","lenovo/thinkcentre m710s firmware","lenovo/thinkcentre m715q firmware","lenovo/thinkcentre m715t firmware","lenovo/thinkcentre m720e firmware","lenovo/thinkcentre m720q firmware","lenovo/thinkcentre m720s firmware","lenovo/thinkcentre m720t firmware","lenovo/thinkcentre m725s firmware","lenovo/thinkcentre m75n firmware","lenovo/thinkcentre m75q gen 2 firmware","lenovo/thinkcentre m75q-1 firmware","lenovo/thinkcentre m75s gen 2 firmware","lenovo/thinkcentre m75s-1 firmware","lenovo/thinkcentre m75t gen 2 firmware","lenovo/thinkcentre m80q firmware","lenovo/thinkcentre m810z firmware","lenovo/thinkcentre m818z firmware","lenovo/thinkcentre m820z firmware","lenovo/thinkcentre m90a firmware","lenovo/thinkcentre m90a gen2 firmware","lenovo/thinkcentre m90q gen 2 firmware","lenovo/thinkcentre m90q tiny firmware","lenovo/thinkcentre m910q firmware","lenovo/thinkcentre m910s firmware","lenovo/thinkcentre m910t firmware","lenovo/thinkcentre m910x firmware"],"epss":{"score":0.00196,"percentile":0.09193,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-94953","tags":["Vendor Advisory"],"source":"psirt@lenovo.com"},{"url":"https://support.lenovo.com/us/en/product_security/LEN-94953","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-40136","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}