VULNERABILITY INTELLIGENCE

CVE-2022-40134

CVSS score4.4 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2023-01-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Weakness classification

  • CWE-125: Out-of-bounds Read

Primary references