← Database

CVE-2022-40134

MEDIUM CVSS: 4.4 Published: 2023-01-30 Modified: 2026-06-17

Description

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Affected Platforms

Lenovo Thinkpad X1 Carbon 8Th Gen FirmwareLenovo Thinkserver Sr860P FirmwareLenovo Thinkagile Vx3320 FirmwareLenovo Thinkagile Hx2331Lenovo Thinkagile Vx 1SeLenovo Thinkcentre M820Z All-In-One FirmwareLenovo Thinkagile Mx3331-H FirmwareLenovo Thinkagile Vx2330Lenovo Thinkagile Vx7320 NLenovo Thinkagile Hx5520

Weakness Type

CWE-125, CWE-125

References