CVE-2022-40137

lenovo ideacentre c5-14imb05 firmware, lenovo ideacentre e96z firmware, lenovo ideacentre 3 07iab7 firmware +56 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-40137

Katalog CVE

CVSS 6.7 · Medium EPSS 0,23%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada lenovo ideacentre c5-14imb05 firmware, lenovo ideacentre e96z firmware +57 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Rincian

Terbit di NVD
30 Januari 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
EPSS (30 hari)
0,23% peluang dieksploitasi; lebih tinggi dari 12,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
lenovo ideacentre c5-14imb05 firmware Versi o4hkt3aa
lenovo ideacentre e96z firmware Versi m26kt24a
lenovo ideacentre 3 07iab7 firmware Versi m49kt1da
lenovo ideacentre 3-07imb05 firmware Versi m2vkt1fa
lenovo ideacentre 5 14iab7 firmware Versi m42kt40a
lenovo ideacentre 5-14acn6 firmware Versi o5ekt23a
lenovo ideacentre 5-14imb05 firmware Versi o4hkt3aa
lenovo ideacentre 5-14iob6 firmware Versi m3gkt38a
lenovo ideacentre aio 3-22ada6 firmware Versi o5ckt24a
lenovo ideacentre aio 3-22iil5 firmware Versi o56kt22a
lenovo ideacentre aio 3-22itl6 firmware Versi o5akt31a
lenovo ideacentre aio 3-24ada6 firmware Versi o5ckt24a
lenovo ideacentre aio 3-24alc6 firmware Versi o5bkt24a
lenovo ideacentre aio 3-24iil5 firmware Versi o56kt22a
lenovo ideacentre aio 3-24itl6 firmware Versi o5akt31a
lenovo ideacentre aio 3-27alc6 firmware Versi o5bkt24a
lenovo ideacentre aio 3-27itl6 firmware Versi o5akt31a
lenovo ideacentre g5-14imb05 firmware Versi o4hkt3aa
lenovo ideacentre gaming 5 17acn7 firmware Versi o5ekt23a
lenovo ideacentre gaming 5 17iab7 firmware Versi m42kt40a
lenovo ideacentre gaming 5-14acn6 firmware Versi o5ekt23a
lenovo ideacentre gaming 5-14iob6 firmware Versi m3gkt38a
lenovo ideacentre mini 5-01imh05 firmware Versi o4ekt17a
lenovo legion c530-19icb firmware Versi o4bkt21a
lenovo legion t5-26iob6 firmware Versi o54kt20a
lenovo legion t5-28icb05 firmware Versi o4bkt21a
lenovo legion t530-28apr firmware Versi o4gkt17a
lenovo legion t530-28icb firmware Versi o4bkt21a
lenovo legion t7-34imz5 firmware Versi o4lkt1fa
lenovo legion t7-34imz5 firmware Versi o5fkt14a
lenovo ideacentre m60e tiny firmware Versi m3skt21a
lenovo ideacentre m625q firmware Versi m1wkt46a
lenovo ideacentre m630e firmware Versi m28kt39a
lenovo ideacentre m700 tiny firmware Versi fwktbfa
lenovo ideacentre m70a firmware Versi m2skt26a
lenovo ideacentre m70a gen 2 firmware Versi m3nkt21a
lenovo ideacentre m70a gen 3 firmware Versi m4ekt18a
lenovo ideacentre m70c firmware Versi m2vkt1fa
lenovo ideacentre m70q firmware Versi m2wkt55a
lenovo ideacentre m70q gen 2 firmware Versi m3jkt35a
lenovo ideacentre m70q gen 3 firmware Versi m43kt16a
lenovo ideacentre m70s firmware Versi m2tkt50a
lenovo ideacentre m70s gen 3 firmware Versi m41kt2da
lenovo ideacentre m70t firmware Versi m2tkt50a
lenovo ideacentre m70t gen 3 firmware Versi m41kt2da
lenovo ideacentre m710e firmware Versi m1zkt39a
lenovo ideacentre m710q firmware Versi m1akt56a
lenovo ideacentre m710s firmware Versi m16kt69a
lenovo ideacentre m710t firmware Versi m16kt69a
lenovo ideacentre m715q 2nd gen firmware Versi m1xkt58a
lenovo ideacentre m715q firmware Versi m11kt55a
lenovo ideacentre m715s firmware Versi m2ckt4da
lenovo ideacentre m715t firmware Versi m2ckt4da
lenovo ideacentre m720e firmware Versi m30kt27a
lenovo ideacentre m720q firmware Versi m1ukt6ba
lenovo ideacentre m720s firmware Versi m1ukt6ba
lenovo ideacentre m720t firmware Versi m1ukt6ba
lenovo ideacentre m725s firmware Versi m25kt61a
lenovo ideacentre m75n firmware Versi m33kt26a
lenovo ideacentre m75q gen 2 firmware Versi m47kt24a

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 296 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.