VULNERABILITY INTELLIGENCE

CVE-2022-40136

CVSS score4.4 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2023-01-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Weakness classification

  • psirt@lenovo.com: CWE-125
  • nvd@nist.gov: CWE-125

Primary references