← Database

CVE-2022-40135

MEDIUM CVSS: 4.4 Published: 2023-01-30 Modified: 2026-06-17

Description

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Affected Platforms

Lenovo Legion T5-28Icb05 FirmwareLenovo Thinkcentre M710Q FirmwareLenovo Thinkcentre M75Q Gen 2 FirmwareLenovo Thinkcentre E75 T\/SLenovo Ideacentre T540-15IckLenovo Ideacentre A340-22Igm FirmwareLenovo Thinkcentre M75NLenovo V35S-07AdaLenovo Ideacentre 510-15IckLenovo Ideacentre G5-14Imb05 Firmware

Weakness Type

CWE-125, CWE-125

References