VULNERABILITY INTELLIGENCE

CVE-2022-40135

CVSS score4.4 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2023-01-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Weakness classification

  • psirt@lenovo.com: CWE-125
  • nvd@nist.gov: CWE-125

Primary references