Details of VAR-202301-2261

ID

VAR-202301-2261

CVE

CVE-2022-40137

TITLE

plural Lenovo model's WMI SMI Handler Classic buffer overflow vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2022-012568

DESCRIPTION

A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code. (DoS) It may be in a state

Trust: 1.71

sources: NVD: CVE-2022-40137 // JVNDB: JVNDB-2022-012568 // VULMON: CVE-2022-40137

AFFECTED PRODUCTS

vendor:	lenovo	model:	thinkcentre m610	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx7531	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	v530-15icb	scope:	eq	version:	m1ykt72a	Trust: 1.0
vendor:	lenovo	model:	thinkserver sd350	scope:	eq	version:	5.05.0	Trust: 1.0
vendor:	lenovo	model:	ideacentre m75q-1	scope:	eq	version:	m2fkt2ea	Trust: 1.0
vendor:	lenovo	model:	thinkstation p330 workstation	scope:	eq	version:	m1vkt6ba	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3330-f all-flash	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre neo 50t gen 3	scope:	eq	version:	m42kt40a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre e75s	scope:	eq	version:	m16kt69a	Trust: 1.0
vendor:	lenovo	model:	thinksystem dx1100u	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx5521-c	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinksystem st58	scope:	eq	version:	ite125a	Trust: 1.0
vendor:	lenovo	model:	thinksmart hub 500	scope:	eq	version:	m23kt31a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx5530	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx5520	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m6600s	scope:	eq	version:	fwktc0a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m90a gen 2	scope:	eq	version:	m3lkt26a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx5531	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinksmart hub teams	scope:	eq	version:	m2xkt20a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m90s	scope:	eq	version:	m2tkt50a	Trust: 1.0
vendor:	lenovo	model:	thinkserver rs260	scope:	eq	version:	vb1ts307	Trust: 1.0
vendor:	lenovo	model:	legion t5-28icb05	scope:	eq	version:	o4bkt21a	Trust: 1.0
vendor:	lenovo	model:	thinksystem hr610x	scope:	eq	version:	hr6n0661	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-24iil5	scope:	eq	version:	o56kt22a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m810z all-in-one	scope:	eq	version:	m1ckt50a	Trust: 1.0
vendor:	lenovo	model:	ideacentre a340-22icb all-in-one	scope:	eq	version:	o44kt32a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx 2u4n	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx7821	scope:	eq	version:	pse144n	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3320	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx2330	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7330	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre m70a	scope:	eq	version:	m2skt26a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3520-g	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx2330	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3530-h hybrid	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre m715q	scope:	eq	version:	m11kt55a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m720e	scope:	eq	version:	m30kt27a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m75t gen 2	scope:	eq	version:	m46kt2ba	Trust: 1.0
vendor:	lenovo	model:	thinksystem dx8200d	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx2331	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx5521	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3531 h hybrid	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre m80q	scope:	eq	version:	m2wkt55a	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx1021	scope:	eq	version:	hye122f	Trust: 1.0
vendor:	lenovo	model:	ideacentre 510s-07icb	scope:	eq	version:	m22kt48a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m70q gen 2	scope:	eq	version:	m3jkt35a	Trust: 1.0
vendor:	lenovo	model:	thinkstation p520 workstation	scope:	eq	version:	s03kt55a	Trust: 1.0
vendor:	lenovo	model:	thinkstation thinkstation p318	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-24alc6	scope:	eq	version:	o5bkt24a	Trust: 1.0
vendor:	lenovo	model:	thinkstation p340 workstation	scope:	eq	version:	s08kt50a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m90t gen 3	scope:	eq	version:	m40kt2da	Trust: 1.0
vendor:	lenovo	model:	thinksmart core device\: zoom rooms	scope:	eq	version:	m4ckt14a	Trust: 1.0
vendor:	lenovo	model:	ideacentre mini 5-01imh05	scope:	eq	version:	o4ekt17a	Trust: 1.0
vendor:	lenovo	model:	thinkserver td350	scope:	eq	version:	5.04.0	Trust: 1.0
vendor:	lenovo	model:	ideacentre neo 70t gen 3	scope:	eq	version:	m40kt2da	Trust: 1.0
vendor:	lenovo	model:	ideacentre neo 50s gen 3	scope:	eq	version:	m49kt1da	Trust: 1.0
vendor:	lenovo	model:	thinkserver rd550	scope:	eq	version:	5.03.0	Trust: 1.0
vendor:	lenovo	model:	ideacentre 5-14iob6	scope:	eq	version:	m3gkt38a	Trust: 1.0
vendor:	lenovo	model:	thinkstation p720 workstation	scope:	eq	version:	s04kt62a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m70a gen 2	scope:	eq	version:	m3nkt21a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m75t gen 2	scope:	eq	version:	m3akt44a	Trust: 1.0
vendor:	lenovo	model:	legion t530-28icb	scope:	eq	version:	o4bkt21a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m8600t	scope:	eq	version:	fwktc0a	Trust: 1.0
vendor:	lenovo	model:	v530-24icb all-in-one	scope:	eq	version:	m20kt53a	Trust: 1.0
vendor:	lenovo	model:	legion t5-26iob6	scope:	eq	version:	o54kt20a	Trust: 1.0
vendor:	lenovo	model:	thinkserver sr590	scope:	eq	version:	tee176k	Trust: 1.0
vendor:	lenovo	model:	ideacentre t540-15ama g	scope:	eq	version:	m2ckt4da	Trust: 1.0
vendor:	lenovo	model:	thinkserver ts150	scope:	eq	version:	81i\/b7s	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7520	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx5520	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	v540-24iwl all-in-one	scope:	eq	version:	m29kt40a	Trust: 1.0
vendor:	lenovo	model:	qt m415	scope:	eq	version:	m16kt69a	Trust: 1.0
vendor:	lenovo	model:	thinksmart hub zoom	scope:	eq	version:	m2xkt20a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m720s	scope:	eq	version:	m1ukt6ba	Trust: 1.0
vendor:	lenovo	model:	thinkserver rd450	scope:	eq	version:	5.05.0	Trust: 1.0
vendor:	lenovo	model:	thinkserver rs160	scope:	eq	version:	vb1ts307	Trust: 1.0
vendor:	lenovo	model:	thinkstation p920 workstation	scope:	eq	version:	s05kt62a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx2720-e	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx3520-g	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	ideacentre e96z	scope:	eq	version:	m26kt24a	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-22itl6	scope:	eq	version:	o5akt31a	Trust: 1.0
vendor:	lenovo	model:	ideacentre a340-22igm all-in-one	scope:	eq	version:	o51kt12a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3331	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre m920q	scope:	eq	version:	m1ukt6ba	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3721	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx- all flash	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	ideacentre m90a	scope:	eq	version:	m2rkt55a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx3720	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7820	scope:	eq	version:	pse144n	Trust: 1.0
vendor:	lenovo	model:	thinkstation p350 workstation	scope:	eq	version:	s0akt35a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3375	scope:	eq	version:	d8e128f	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-24itl6	scope:	eq	version:	o5akt31a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m70q	scope:	eq	version:	m2wkt55a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m80t gen 3	scope:	eq	version:	m40kt2da	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3376	scope:	eq	version:	d8e128f	Trust: 1.0
vendor:	lenovo	model:	ideacentre m80q gen 3	scope:	eq	version:	m4gkt1da	Trust: 1.0
vendor:	lenovo	model:	ideacentre m820z all-in-one	scope:	eq	version:	m1nkt59a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m90a gen 3	scope:	eq	version:	m4ikt17a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx1521-r	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	ideacentre 720-18apr	scope:	eq	version:	m25kt61a	Trust: 1.0
vendor:	lenovo	model:	ideacentre gaming 5 17acn7	scope:	eq	version:	o5ekt23a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx2321	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx7530	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx 1se	scope:	eq	version:	ise130e	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m6600q	scope:	eq	version:	fwktc0a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m715s	scope:	eq	version:	m2ckt4da	Trust: 1.0
vendor:	lenovo	model:	yoga a940-27icb all-in-one	scope:	eq	version:	o43kt43a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m70c	scope:	eq	version:	m2vkt1fa	Trust: 1.0
vendor:	lenovo	model:	qitian a815	scope:	eq	version:	m1rkt39a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3321	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3531-f all-flash	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinksmart core \& controller kit\: zoom rooms	scope:	eq	version:	m4ckt14a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx3331	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx5530	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7531	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre m910t	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	ideacentre g5-14imb05	scope:	eq	version:	o4hkt3aa	Trust: 1.0
vendor:	lenovo	model:	ideacentre m910x	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	thinkserver sr588	scope:	eq	version:	tee176k	Trust: 1.0
vendor:	lenovo	model:	thinkserver ts250	scope:	eq	version:	81i\/b7s	Trust: 1.0
vendor:	lenovo	model:	v330-20icb all-in-one	scope:	eq	version:	m1qkt49a	Trust: 1.0
vendor:	lenovo	model:	v50a-24imb	scope:	eq	version:	m36kt31a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m715t	scope:	eq	version:	m2ckt4da	Trust: 1.0
vendor:	lenovo	model:	ideacentre m90t	scope:	eq	version:	m2tkt50a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m710e	scope:	eq	version:	m1zkt39a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m625q	scope:	eq	version:	m1wkt46a	Trust: 1.0
vendor:	lenovo	model:	v50t-13iob g2	scope:	eq	version:	m3gkt38a	Trust: 1.0
vendor:	lenovo	model:	thinkstation p340 tiny workstation	scope:	eq	version:	m2wkt55a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m720t	scope:	eq	version:	m1ukt6ba	Trust: 1.0
vendor:	lenovo	model:	ideacentre m75s-1	scope:	eq	version:	m2ckt4da	Trust: 1.0
vendor:	lenovo	model:	ideacentre m920t	scope:	eq	version:	m1ukt6ba	Trust: 1.0
vendor:	lenovo	model:	v530-22icb all-in-one	scope:	eq	version:	m20kt53a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx 4u	scope:	eq	version:	pse144n	Trust: 1.0
vendor:	lenovo	model:	thinkstation p348 workstation	scope:	eq	version:	m3kkt36a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m80s	scope:	eq	version:	m2tkt50a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 3-07imb05	scope:	eq	version:	m2vkt1fa	Trust: 1.0
vendor:	lenovo	model:	legion t530-28apr	scope:	eq	version:	o4gkt17a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m910s	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	ideacentre a340-22iwl all-in-one	scope:	eq	version:	o46kt36a	Trust: 1.0
vendor:	lenovo	model:	ideacentre a340-24ick all-in-one	scope:	eq	version:	o4pkt15a	Trust: 1.0
vendor:	lenovo	model:	thinkserver sr860p	scope:	eq	version:	tee176k	Trust: 1.0
vendor:	lenovo	model:	thinkserver ts460	scope:	eq	version:	tb1ts307	Trust: 1.0
vendor:	lenovo	model:	thinkserver rd350g	scope:	eq	version:	vb3ts891	Trust: 1.0
vendor:	lenovo	model:	thinkstation p720 workstation	scope:	eq	version:	s04kt62p	Trust: 1.0
vendor:	lenovo	model:	ideacentre m800	scope:	eq	version:	fwktbfa	Trust: 1.0
vendor:	lenovo	model:	ideacentre m75s gen 2	scope:	eq	version:	m46kt2ba	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-22imb05	scope:	eq	version:	o4rkt3a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m80s gen 3	scope:	eq	version:	m40kt2da	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3521-g	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	legion t7-34imz5	scope:	eq	version:	o4lkt1fa	Trust: 1.0
vendor:	lenovo	model:	ideacentre m70t gen 3	scope:	eq	version:	m41kt2da	Trust: 1.0
vendor:	lenovo	model:	ideacentre a340-22ick all-in-one	scope:	eq	version:	o4pkt15a	Trust: 1.0
vendor:	lenovo	model:	thinksystem hr630x	scope:	eq	version:	hr6n0661	Trust: 1.0
vendor:	lenovo	model:	ideacentre m75s gen 2	scope:	eq	version:	m3bkt2aa	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx1320	scope:	eq	version:	ise130e	Trust: 1.0
vendor:	lenovo	model:	v530-15arr	scope:	eq	version:	o4dkt44a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7320 n	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	ideacentre m710s	scope:	eq	version:	m16kt69a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 5-14are05	scope:	eq	version:	o4zkt29a	Trust: 1.0
vendor:	lenovo	model:	thinkstation p330 workstation 2nd gen	scope:	eq	version:	m1vkt6ba	Trust: 1.0
vendor:	lenovo	model:	thinkserver ts550	scope:	eq	version:	fwktb7s	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3331-h hybrid	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre a340-22ast all-in-one	scope:	eq	version:	o4ckt23a	Trust: 1.0
vendor:	lenovo	model:	v30a-22iml	scope:	eq	version:	m37kt29a	Trust: 1.0
vendor:	lenovo	model:	v520s	scope:	eq	version:	m16kt69a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m70s gen 3	scope:	eq	version:	m41kt2da	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-27imb05	scope:	eq	version:	o4rkt3a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m90q gen 3	scope:	eq	version:	m4gkt1da	Trust: 1.0
vendor:	lenovo	model:	ideacentre m720q	scope:	eq	version:	m1ukt6ba	Trust: 1.0
vendor:	lenovo	model:	thinkstation p360 tiny workstation	scope:	eq	version:	m4gkt1da	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-24imb05	scope:	eq	version:	o4rkt3a	Trust: 1.0
vendor:	lenovo	model:	yta8900f	scope:	eq	version:	fwktc0a	Trust: 1.0
vendor:	lenovo	model:	n3310 storage	scope:	eq	version:	5.05.0	Trust: 1.0
vendor:	lenovo	model:	ideacentre 510s-07ick	scope:	eq	version:	m30kt27a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m90q gen 2	scope:	eq	version:	m3jkt35a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx7820	scope:	eq	version:	pse144n	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx1021 edg	scope:	eq	version:	hye122f	Trust: 1.0
vendor:	lenovo	model:	ideacentre c5-14imb05	scope:	eq	version:	o4hkt3aa	Trust: 1.0
vendor:	lenovo	model:	ideacentre m90s gen 3	scope:	eq	version:	m40kt2da	Trust: 1.0
vendor:	lenovo	model:	ideacentre m700 tiny	scope:	eq	version:	fwktbfa	Trust: 1.0
vendor:	lenovo	model:	ideacentre m60e tiny	scope:	eq	version:	m3skt21a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m700q	scope:	eq	version:	fwktc0a	Trust: 1.0
vendor:	lenovo	model:	v530s-07icr	scope:	eq	version:	m30kt27a	Trust: 1.0
vendor:	lenovo	model:	v530-15icr	scope:	eq	version:	m2ykt33a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx7521	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	ideacentre 510a-15arr	scope:	eq	version:	o4dkt44a	Trust: 1.0
vendor:	lenovo	model:	yangtian afq150	scope:	eq	version:	fwktc0a	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3520 f- all flash	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	v30a-24iml	scope:	eq	version:	m37kt29a	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-22ada05	scope:	eq	version:	o4tkt29a	Trust: 1.0
vendor:	lenovo	model:	v55t-15api	scope:	eq	version:	o4dkt44a	Trust: 1.0
vendor:	lenovo	model:	ideacentre gaming 5 17iab7	scope:	eq	version:	m42kt40a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7530	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-22ada6	scope:	eq	version:	o5ckt24a	Trust: 1.0
vendor:	lenovo	model:	thinkserver ts560	scope:	eq	version:	tb1ts307	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-24ada6	scope:	eq	version:	o5ckt24a	Trust: 1.0
vendor:	lenovo	model:	v530s-07icb	scope:	eq	version:	m22kt48a	Trust: 1.0
vendor:	lenovo	model:	thinkstation p520c workstation	scope:	eq	version:	s03kt55a	Trust: 1.0
vendor:	lenovo	model:	thinksystem st50	scope:	eq	version:	ite125a	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3330-h hybrid	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	v50a-22imb	scope:	eq	version:	m36kt31a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx1320	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx- hybrid	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	ideacentre m70t	scope:	eq	version:	m2tkt50a	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-24are05	scope:	eq	version:	o4skt28a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m90q tiny	scope:	eq	version:	m2wkt55a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx1321	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	ideacentre m920s	scope:	eq	version:	m1ukt6ba	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx1520-r	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinksystem hr650x	scope:	eq	version:	hr6n0661	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx3330	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkserver rd350	scope:	eq	version:	5.05.0	Trust: 1.0
vendor:	lenovo	model:	thinksmart core \& controller full room kit\: zoom rooms	scope:	eq	version:	m4ckt14a	Trust: 1.0
vendor:	lenovo	model:	thinkstation stadia ggp-120	scope:	eq	version:	s03kt55a	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx 1u - mx3321 f	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinksmart core device for logitech	scope:	eq	version:	m4ckt14a	Trust: 1.0
vendor:	lenovo	model:	ideacentre gaming 5-14iob6	scope:	eq	version:	m3gkt38a	Trust: 1.0
vendor:	lenovo	model:	n4610 storage	scope:	eq	version:	5.05.0	Trust: 1.0
vendor:	lenovo	model:	ideacentre g5-14amr05	scope:	eq	version:	o4zkt29a	Trust: 1.0
vendor:	lenovo	model:	legion t7-34imz5	scope:	eq	version:	o5fkt14a	Trust: 1.0
vendor:	lenovo	model:	v50s-07imb	scope:	eq	version:	m2vkt1fa	Trust: 1.0
vendor:	lenovo	model:	ideacentre m630e	scope:	eq	version:	m28kt39a	Trust: 1.0
vendor:	lenovo	model:	v520	scope:	eq	version:	m16kt69a	Trust: 1.0
vendor:	lenovo	model:	thinksmart core device for poly	scope:	eq	version:	m4ckt14a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx5520-c	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	v35s-07ada	scope:	eq	version:	o4fkt33a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx 1u	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m6600t	scope:	eq	version:	fwktc0a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx 2u	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkstation p320 tiny workstation	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx2320	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	ideacentre m920x	scope:	eq	version:	m1ukt6ba	Trust: 1.0
vendor:	lenovo	model:	ideacentre gaming 5-14acn6	scope:	eq	version:	o5ekt23a	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3520 h- hybrid	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkserver rd650	scope:	eq	version:	5.05.0	Trust: 1.0
vendor:	lenovo	model:	ideacentre a340-24icb all-in-one	scope:	eq	version:	o44kt32a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 3-07ada05	scope:	eq	version:	o4fkt33a	Trust: 1.0
vendor:	lenovo	model:	v50t-13imb	scope:	eq	version:	o4hkt3aa	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-22iil5	scope:	eq	version:	o56kt22a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m725s	scope:	eq	version:	m25kt61a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m80t	scope:	eq	version:	m2tkt50a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 3 07iab7	scope:	eq	version:	m49kt1da	Trust: 1.0
vendor:	lenovo	model:	thinkstation p620 workstation	scope:	eq	version:	s07kt4aa	Trust: 1.0
vendor:	lenovo	model:	thinkstation p330 tiny workstation	scope:	eq	version:	m1ukt6ba	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx3320	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkstation p320 workstation	scope:	eq	version:	s06kt61a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx7520	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	ideacentre a340-24iwl all-in-one	scope:	eq	version:	o46kt36a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx3530-g	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre m710t	scope:	eq	version:	m16kt69a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m75s gen 2	scope:	eq	version:	m3akt44a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m70s	scope:	eq	version:	m2tkt50a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m910q	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 5 14iab7	scope:	eq	version:	m42kt40a	Trust: 1.0
vendor:	lenovo	model:	legion c530-19icb	scope:	eq	version:	o4bkt21a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m70a gen 3	scope:	eq	version:	m4ekt18a	Trust: 1.0
vendor:	lenovo	model:	v55t-15are	scope:	eq	version:	o52kt23a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m900x	scope:	eq	version:	fwktbfa	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3331-f all-flash	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre m715q 2nd gen	scope:	eq	version:	m1xkt58a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m8600s	scope:	eq	version:	fwktc0a	Trust: 1.0
vendor:	lenovo	model:	thinkstation p350 tiny workstation	scope:	eq	version:	m3jkt35a	Trust: 1.0
vendor:	lenovo	model:	qt m410	scope:	eq	version:	m16kt69a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 5-14acn6	scope:	eq	version:	o5ekt23a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m900	scope:	eq	version:	fwktbfa	Trust: 1.0
vendor:	lenovo	model:	thinkedge se30	scope:	eq	version:	m3fkt29a	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx 1u - mx3321 h	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-27alc6	scope:	eq	version:	o5bkt24a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 5-14imb05	scope:	eq	version:	o4hkt3aa	Trust: 1.0
vendor:	lenovo	model:	ideacentre m710q	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 510a-15ick	scope:	eq	version:	o4kkt16a	Trust: 1.0
vendor:	lenovo	model:	thinksmart core \& controller kit\: microsoft teams rooms	scope:	eq	version:	m4ckt14a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx2320-e	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	ideacentre m75t gen 2	scope:	eq	version:	m3bkt2aa	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx2320	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3720	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7520 n	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinksmart core \& controller full room kit\: microsoft teams rooms	scope:	eq	version:	m4ckt14a	Trust: 1.0
vendor:	lenovo	model:	thinkserver ts450	scope:	eq	version:	fwktb7s	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-27itl6	scope:	eq	version:	o5akt31a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre e75t	scope:	eq	version:	m16kt69a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3330	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3530 f all flash	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre m818z	scope:	eq	version:	m1ekt27a	Trust: 1.0
vendor:	lenovo	model:	qt b415	scope:	eq	version:	m16kt69a	Trust: 1.0
vendor:	lenovo	model:	thinkstation p310 workstation	scope:	eq	version:	fwktc0a	Trust: 1.0
vendor:	lenovo	model:	v55t gen 2 13acn	scope:	eq	version:	o5jkt20a	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx edge- mx1020	scope:	eq	version:	hye122f	Trust: 1.0
vendor:	lenovo	model:	ideacentre m70q gen 3	scope:	eq	version:	m43kt16a	Trust: 1.0
vendor:	lenovo	model:	thinkstation p920 workstation	scope:	eq	version:	s05kt62p	Trust: 1.0
vendor:	lenovo	model:	ideacentre 510-15ick	scope:	eq	version:	o4kkt16a	Trust: 1.0
vendor:	lenovo	model:	ideacentre a340-24igm all-in-one	scope:	eq	version:	o51kt12a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx1331	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre m75n	scope:	eq	version:	m33kt26a	Trust: 1.0
vendor:	lenovo	model:	ideacentre t540-15ick	scope:	eq	version:	o4kkt16a	Trust: 1.0
vendor:	lenovo	model:	ideacentre m75q gen 2	scope:	eq	version:	m47kt24a	Trust: 1.0
vendor:	lenovo	model:	ideacentre aio 3-22ada6	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre 3-07imb05	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre 5-14imb05	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre 5 14iab7	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre aio 3-22iil5	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre e96z	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre 3 07iab7	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre aio 3-22itl6	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre 5-14acn6	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre 5-14iob6	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2022-012568 // NVD: CVE-2022-40137

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2022-40137
value:	MEDIUM
Trust: 1.0
psirt@lenovo.com:	CVE-2022-40137
value:	MEDIUM
Trust: 1.0
OTHER:	JVNDB-2022-012568
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-202301-2384
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2022-40137
baseSeverity:	MEDIUM
baseScore:	6.7
vectorString:	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	0.8
impactScore:	5.9
version:	3.1
Trust: 2.0
OTHER:	JVNDB-2022-012568
baseSeverity:	MEDIUM
baseScore:	6.7
vectorString:	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2022-012568 // CNNVD: CNNVD-202301-2384 // NVD: CVE-2022-40137 // NVD: CVE-2022-40137

PROBLEMTYPE DATA

problemtype:	CWE-120	Trust: 1.0
problemtype:	Classic buffer overflow (CWE-120) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2022-012568 // NVD: CVE-2022-40137

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202301-2384

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202301-2384

PATCH

title:	LEN-94953	url:	https://support.lenovo.com/us/en/product_security/LEN-94953	Trust: 0.8
title:	Lenovo Desktop Security vulnerabilities	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=224344	Trust: 0.6
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2022-40137	Trust: 0.1

sources: VULMON: CVE-2022-40137 // JVNDB: JVNDB-2022-012568 // CNNVD: CNNVD-202301-2384

EXTERNAL IDS

db:	NVD	id:	CVE-2022-40137	Trust: 3.3
db:	LENOVO	id:	LEN-94953	Trust: 1.7
db:	JVNDB	id:	JVNDB-2022-012568	Trust: 0.8
db:	CNNVD	id:	CNNVD-202301-2384	Trust: 0.6
db:	VULMON	id:	CVE-2022-40137	Trust: 0.1

sources: VULMON: CVE-2022-40137 // JVNDB: JVNDB-2022-012568 // CNNVD: CNNVD-202301-2384 // NVD: CVE-2022-40137

REFERENCES

url:	https://support.lenovo.com/us/en/product_security/len-94953	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2022-40137	Trust: 0.8
url:	https://cxsecurity.com/cveshow/cve-2022-40137/	Trust: 0.6
url:	https://github.com/live-hack-cve/cve-2022-40137	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULMON: CVE-2022-40137 // JVNDB: JVNDB-2022-012568 // CNNVD: CNNVD-202301-2384 // NVD: CVE-2022-40137

SOURCES

db:	VULMON	id:	CVE-2022-40137
db:	JVNDB	id:	JVNDB-2022-012568
db:	CNNVD	id:	CNNVD-202301-2384
db:	NVD	id:	CVE-2022-40137

LAST UPDATE DATE

2024-08-14T13:52:48.436000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2022-40137	date:	2023-01-31T00:00:00
db:	JVNDB	id:	JVNDB-2022-012568	date:	2023-08-31T03:16:00
db:	CNNVD	id:	CNNVD-202301-2384	date:	2023-02-09T00:00:00
db:	NVD	id:	CVE-2022-40137	date:	2023-02-08T22:20:28.487

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2022-40137	date:	2023-01-30T00:00:00
db:	JVNDB	id:	JVNDB-2022-012568	date:	2023-08-31T00:00:00
db:	CNNVD	id:	CNNVD-202301-2384	date:	2023-01-30T00:00:00
db:	NVD	id:	CVE-2022-40137	date:	2023-01-30T22:15:12.387