CVE-2022-40134

lenovo ideacentre c5-14imb05 firmware, lenovo thinkcentre e96z firmware, lenovo ideacentre 3 07iab7 firmware +55 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-40134

Katalog CVE

CVSS 4.4 · Medium EPSS 0,20%

Kerentanan Out-of-bounds Read pada lenovo ideacentre c5-14imb05 firmware, lenovo thinkcentre e96z firmware +56 lainnya. Skor CVSS 3.1 4.4 (Medium) menurut NVD.

Deskripsi (NVD)

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Rincian

Terbit di NVD
30 Januari 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
4.4 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-125: Out-of-bounds Read
EPSS (30 hari)
0,20% peluang dieksploitasi; lebih tinggi dari 8,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
lenovo ideacentre c5-14imb05 firmware Versi o4hkt38a
lenovo thinkcentre e96z firmware Versi m26kt22a
lenovo ideacentre 3 07iab7 firmware Versi m49kt1da
lenovo ideacentre 3-07imb05 firmware Versi m2vkt1da
lenovo ideacentre 5 14iab7 firmware Versi m42kt40a
lenovo ideacentre 5-14acn6 firmware Versi o5ekt21a
lenovo ideacentre 5-14imb05 firmware Versi o4hkt38a
lenovo ideacentre 5-14iob6 firmware Versi m3gkt33a
lenovo ideacentre creator 5-14iob6 firmware Versi m3gkt33a
lenovo ideacentre g5-14imb05 firmware Versi o4hkt38a
lenovo ideacentre gaming 5 17acn7 firmware Versi o5ekt21a
lenovo ideacentre gaming 5 17iab7 firmware Versi m42kt40a
lenovo ideacentre gaming 5-14acn6 firmware Versi o5ekt21a
lenovo ideacentre gaming 5-14iob6 firmware Versi m3gkt33a
lenovo legion c530-19icb firmware Versi o4bkt20a
lenovo legion t5-26iob6 firmware Versi o54kt1da
lenovo legion t5-28icb05 firmware Versi o4bkt20a
lenovo legion t530-28apr firmware Versi o4gkt16a
lenovo legion t530-28icb firmware Versi o4bkt20a
lenovo legion t7-34imz5 firmware Versi o4lkt1ea
lenovo thinkcentre m60e tiny firmware Versi o5fkt14a
lenovo thinkcentre m625q firmware Versi m3skt21a
lenovo thinkcentre m630e firmware Versi m1wkt45a
lenovo thinkcentre m70a firmware Versi m28kt37a
lenovo thinkcentre m70a gen 2 firmware Versi m2skt25a
lenovo thinkcentre m70c firmware Versi m3nkt20a
lenovo thinkcentre m70q firmware Versi m2vkt1da
lenovo thinkcentre m70q gen 2 firmware Versi m2wkt57a
lenovo thinkcentre m70q gen 3 firmware Versi m3jkt34a
lenovo thinkcentre m70s firmware Versi m43kt16a
lenovo thinkcentre m70s gen 3 firmware Versi m2tkt50a
lenovo thinkcentre m70t firmware Versi m41kt2da
lenovo thinkcentre m70t gen 3 firmware Versi m2tkt50a
lenovo thinkcentre m710e firmware Versi m41kt2da
lenovo thinkcentre m710q firmware Versi m1zkt38a
lenovo thinkcentre m710s firmware Versi m1akt56a
lenovo thinkcentre m710t firmware Versi m16kt68a
lenovo thinkcentre m715q firmware Versi m16kt68a
lenovo thinkcentre m720e firmware Versi m11kt54a
lenovo thinkcentre m75n firmware Versi m30kt26a
lenovo thinkcentre m75q gen 2 firmware Versi m33kt25a
lenovo thinkcentre m75t gen 2 firmware Versi m47kt24a
lenovo thinkcentre m80q firmware Versi m46kt2da
lenovo thinkcentre m80s firmware Versi m2wkt57a
lenovo thinkcentre m80s firmware Versi m2tkt50a
lenovo thinkcentre m80t firmware Versi m2tkt50a
lenovo thinkcentre m80t firmware Versi m1ckt49a
lenovo thinkcentre m810z all-in-one firmware Versi m1ekt25a
lenovo thinkcentre m818z firmware Versi m1nkt58a
lenovo thinkcentre m820z all-in-one firmware Versi m2rkt52a
lenovo thinkcentre m90a firmware Versi m3lkt26a
lenovo thinkcentre m90a gen 2 firmware Versi m3jkt34a
lenovo thinkcentre m90q gen 2 firmware Versi m2wkt57a
lenovo thinkcentre m90q tiny firmware Versi m2tkt50a
lenovo thinkcentre m90s firmware Versi m2tkt50a
lenovo thinkcentre m90t firmware Versi m1akt56a
lenovo thinkcentre m910q firmware Versi m1akt56a
lenovo thinkcentre m910s firmware Versi m1akt56a
lenovo thinkcentre m910t firmware Versi m1akt56a
lenovo thinkcentre m910x firmware Versi m49kt1da

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 337 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.