← Database
CVE-2022-40136
MEDIUM
CVSS: 4.4
Published: 2023-01-30
Modified: 2026-06-17
Description
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
Affected Platforms
Lenovo Legion T5-28Icb05 FirmwareLenovo Thinkcentre M710Q FirmwareLenovo Thinkcentre M75Q Gen 2 FirmwareLenovo Thinkcentre E75 T\/SLenovo Ideacentre T540-15IckLenovo Ideacentre A340-22Igm FirmwareLenovo Thinkcentre M75NLenovo V35S-07AdaLenovo Ideacentre 510-15IckLenovo Ideacentre G5-14Imb05 Firmware
Weakness Type
CWE-125, CWE-125