Details of VAR-202301-2263

ID

VAR-202301-2263

CVE

CVE-2022-40134

TITLE

plural Lenovo model's SMI Set BIOS Password WMI SMI Handler Out-of-bounds read vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2022-012567

DESCRIPTION

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory

Trust: 1.71

sources: NVD: CVE-2022-40134 // JVNDB: JVNDB-2022-012567 // VULMON: CVE-2022-40134

AFFECTED PRODUCTS

vendor:	lenovo	model:	thinkpad s3 2nd gen	scope:	eq	version:	r16et33w	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m710s	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	ideacentre a340-22igm	scope:	eq	version:	o51kt12a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx7531	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m70s gen 3	scope:	eq	version:	m2tkt50a	Trust: 1.0
vendor:	lenovo	model:	thinkserver sd350	scope:	eq	version:	5.05.0	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr630	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3531 h	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre gaming 5 17acn7	scope:	eq	version:	o5ekt21a	Trust: 1.0
vendor:	lenovo	model:	thinksystem dx1100u	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx5521-c	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 carbon 7th gen	scope:	eq	version:	n2qet44w	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx5530	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx5520	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkpad p14s gen 2	scope:	eq	version:	n34et46w	Trust: 1.0
vendor:	lenovo	model:	thinksystem st250 v2	scope:	eq	version:	tqe104j	Trust: 1.0
vendor:	lenovo	model:	thinksystem dn8836	scope:	eq	version:	l0.40	Trust: 1.0
vendor:	lenovo	model:	yta8900f	scope:	eq	version:	fwktbaa	Trust: 1.0
vendor:	lenovo	model:	v530-15arr	scope:	eq	version:	not_affected	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx 2u4n	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx2330	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7330	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx7821	scope:	eq	version:	pse144n	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3320	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkpad e15 gen 2	scope:	eq	version:	r1eet45w	Trust: 1.0
vendor:	lenovo	model:	thinksystem st258	scope:	eq	version:	ise130e	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 yoga 4th gen	scope:	eq	version:	n2het66w	Trust: 1.0
vendor:	lenovo	model:	thinkstation p620	scope:	eq	version:	s07kt25a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3520-g	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkstation p340	scope:	eq	version:	s08kt50a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx2330	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	yangtian afq150	scope:	eq	version:	fwktbaa	Trust: 1.0
vendor:	lenovo	model:	thinkpad p73	scope:	eq	version:	n2net49w	Trust: 1.0
vendor:	lenovo	model:	thinkstation p520	scope:	eq	version:	s03kt55a	Trust: 1.0
vendor:	lenovo	model:	thinksystem dx8200d	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx5521	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkpad t15p gen 1	scope:	eq	version:	n30et43w	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx1021	scope:	eq	version:	hye122f	Trust: 1.0
vendor:	lenovo	model:	ideacentre 5-14imb05	scope:	eq	version:	o4hkt38a	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3520 f	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkstation p310	scope:	eq	version:	fwktbaa	Trust: 1.0
vendor:	lenovo	model:	v530s-07icr	scope:	eq	version:	m30kt26a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 5-14iob6	scope:	eq	version:	m3gkt33a	Trust: 1.0
vendor:	lenovo	model:	thinkserver td350	scope:	eq	version:	5.04.0	Trust: 1.0
vendor:	lenovo	model:	thinksystem se350	scope:	eq	version:	hye122f	Trust: 1.0
vendor:	lenovo	model:	v530-24icb	scope:	eq	version:	m20kt52a	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3331-f	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m80q	scope:	eq	version:	m46kt2da	Trust: 1.0
vendor:	lenovo	model:	thinkpad l390	scope:	eq	version:	r10et51w	Trust: 1.0
vendor:	lenovo	model:	thinkserver ts150	scope:	eq	version:	81i\/b7s	Trust: 1.0
vendor:	lenovo	model:	thinkpad t490s	scope:	eq	version:	n2jet97w	Trust: 1.0
vendor:	lenovo	model:	thinkserver rd450	scope:	eq	version:	5.05.0	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx2720-e	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkpad l15 gen 2	scope:	eq	version:	r1jet53w	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr670 v2	scope:	eq	version:	u8e118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx1021	scope:	eq	version:	hye122f	Trust: 1.0
vendor:	lenovo	model:	v30a-22iml	scope:	eq	version:	m37kt28a	Trust: 1.0
vendor:	lenovo	model:	v50a-24imb	scope:	eq	version:	m36kt28a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3721	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3375	scope:	eq	version:	d8e128f	Trust: 1.0
vendor:	lenovo	model:	thinkpad x13 yoga gen 1	scope:	eq	version:	n2uet58w	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3376	scope:	eq	version:	d8e128f	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx2321	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 carbon 7th gen	scope:	eq	version:	n2het66w	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx7530	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 extreme 3rd gen	scope:	eq	version:	n2vet34w	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr250	scope:	eq	version:	ise130e	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m70s	scope:	eq	version:	m43kt16a	Trust: 1.0
vendor:	lenovo	model:	thinkpad p15v gen 1	scope:	eq	version:	n30et43w	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3321	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx5530	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx3331	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7531	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkpad e15	scope:	eq	version:	r16et33w	Trust: 1.0
vendor:	lenovo	model:	v30a-24iml	scope:	eq	version:	m37kt28a	Trust: 1.0
vendor:	lenovo	model:	ideacentre g5-14imb05	scope:	eq	version:	o4hkt38a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m90t	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m75t gen 2	scope:	eq	version:	m3bkt29a	Trust: 1.0
vendor:	lenovo	model:	ideacentre a340-24igm	scope:	eq	version:	o51kt12a	Trust: 1.0
vendor:	lenovo	model:	thinkpad p1 gen 1	scope:	eq	version:	n2eet56w	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m625q	scope:	eq	version:	m3skt21a	Trust: 1.0
vendor:	lenovo	model:	thinksystem sn550	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	v530s-07icb	scope:	eq	version:	not_affected	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m818z	scope:	eq	version:	m1nkt58a	Trust: 1.0
vendor:	lenovo	model:	thinkpad p52	scope:	eq	version:	n2cet61w	Trust: 1.0
vendor:	lenovo	model:	v520	scope:	eq	version:	m16kt68a	Trust: 1.0
vendor:	lenovo	model:	v35s-07ada	scope:	eq	version:	o4fkt29a	Trust: 1.0
vendor:	lenovo	model:	thinkserver sr860p	scope:	eq	version:	tee176k	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m70c	scope:	eq	version:	m3nkt20a	Trust: 1.0
vendor:	lenovo	model:	legion t530-28apr	scope:	eq	version:	o4gkt16a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m90a	scope:	eq	version:	m3lkt26a	Trust: 1.0
vendor:	lenovo	model:	thinkpad l15	scope:	eq	version:	r17et33w	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m910s	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3521-g	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkpad t490	scope:	eq	version:	n2iet98w	Trust: 1.0
vendor:	lenovo	model:	thinksystem hr630x	scope:	eq	version:	hr6n0661	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m80t	scope:	eq	version:	m1ckt49a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m90q gen 2	scope:	eq	version:	m2wkt57a	Trust: 1.0
vendor:	lenovo	model:	thinkpad t15 gen 2	scope:	eq	version:	n34et46w	Trust: 1.0
vendor:	lenovo	model:	ideacentre 3-07ada05	scope:	eq	version:	o4fkt29a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m90q tiny	scope:	eq	version:	m2tkt50a	Trust: 1.0
vendor:	lenovo	model:	thinkserver ts550	scope:	eq	version:	fwktb7s	Trust: 1.0
vendor:	lenovo	model:	legion t5-26iob6	scope:	eq	version:	o54kt1da	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m75s gen 2	scope:	eq	version:	m3bkt29a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre e96z	scope:	eq	version:	m26kt22a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m6600t	scope:	eq	version:	fwktbaa	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr158	scope:	eq	version:	ise130e	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr850	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr860	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m60e tiny	scope:	eq	version:	o5fkt14a	Trust: 1.0
vendor:	lenovo	model:	n3310 storage	scope:	eq	version:	5.05.0	Trust: 1.0
vendor:	lenovo	model:	thinkpad p53	scope:	eq	version:	n2net49w	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m70q	scope:	eq	version:	m2vkt1da	Trust: 1.0
vendor:	lenovo	model:	yoga a940-27icb	scope:	eq	version:	o43kt43a	Trust: 1.0
vendor:	lenovo	model:	thinkpad p14s gen 1	scope:	eq	version:	n2xet33w	Trust: 1.0
vendor:	lenovo	model:	legion t530-28icb	scope:	eq	version:	o4bkt20a	Trust: 1.0
vendor:	lenovo	model:	thinkpad p15s gen 1	scope:	eq	version:	n2xet33w	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx7521	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3321 h	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkstation p318	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 extreme 1st gen	scope:	eq	version:	n2eet56w	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx3520-g	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m6600s	scope:	eq	version:	fwktbaa	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m70q gen 2	scope:	eq	version:	m2wkt57a	Trust: 1.0
vendor:	lenovo	model:	thinkserver ts560	scope:	eq	version:	tb1ts307	Trust: 1.0
vendor:	lenovo	model:	v530s-07icb	scope:	eq	version:	m22kt48a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx3330	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinksystem hr650x	scope:	eq	version:	hr6n0661	Trust: 1.0
vendor:	lenovo	model:	thinkserver rd350	scope:	eq	version:	5.05.0	Trust: 1.0
vendor:	lenovo	model:	thinkstation p350 tiny	scope:	eq	version:	m3jkt34a	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 extreme 2nd gen	scope:	eq	version:	n2oet54w	Trust: 1.0
vendor:	lenovo	model:	n4610 storage	scope:	eq	version:	5.05.0	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 yoga 6th gen	scope:	eq	version:	n2tet72w	Trust: 1.0
vendor:	lenovo	model:	ideacentre g5-14amr05	scope:	eq	version:	o4zkt29a	Trust: 1.0
vendor:	lenovo	model:	v530-15icr	scope:	eq	version:	m2ykt31a	Trust: 1.0
vendor:	lenovo	model:	stadia ggp-120	scope:	eq	version:	s03kt55a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m90a gen 2	scope:	eq	version:	m3jkt34a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m75t gen 2	scope:	eq	version:	m3akt44a	Trust: 1.0
vendor:	lenovo	model:	thinkpad p1 gen 3	scope:	eq	version:	n2vet34w	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr670	scope:	eq	version:	g1e130i	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3321 f	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkpad e14 gen 2	scope:	eq	version:	r1eet45w	Trust: 1.0
vendor:	lenovo	model:	thinkpad p15 gen 1	scope:	eq	version:	n30et43w	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 carbon 8th gen	scope:	eq	version:	n2wet32w	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m715q	scope:	eq	version:	m16kt68a	Trust: 1.0
vendor:	lenovo	model:	thinkstation p348	scope:	eq	version:	m3kkt34a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 3 07iab7	scope:	eq	version:	m49kt1da	Trust: 1.0
vendor:	lenovo	model:	thinkpad l590	scope:	eq	version:	r0zet50w	Trust: 1.0
vendor:	lenovo	model:	thinksystem sd530	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m8600t	scope:	eq	version:	fwktbaa	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx7520	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkpad p53s	scope:	eq	version:	n2iet98w	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx3530-g	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx3720	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre e75s	scope:	eq	version:	m16kt68a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m80s	scope:	eq	version:	m2wkt57a	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3530 f	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	v50a-22imb	scope:	eq	version:	m36kt28a	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr850p	scope:	eq	version:	tee176k	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m75s gen 2	scope:	eq	version:	m3akt44a	Trust: 1.0
vendor:	lenovo	model:	thinkpad l13 yoga	scope:	eq	version:	r15et51w	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7320 n	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkpad t14 gen 2	scope:	eq	version:	n34et46w	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m75t gen 2	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkedge se30	scope:	eq	version:	m3fkt29a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m6600q	scope:	eq	version:	fwktbaa	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3330-f	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr650	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	v530-22icb	scope:	eq	version:	m20kt52a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx2320-e	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7520 n	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkpad x12 detachable gen 1	scope:	eq	version:	r1get43w	Trust: 1.0
vendor:	lenovo	model:	thinkserver ts450	scope:	eq	version:	fwktb7s	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3330	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinksystem st258 v2	scope:	eq	version:	tqe104j	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m820z all-in-one	scope:	eq	version:	m2rkt52a	Trust: 1.0
vendor:	lenovo	model:	qt m415	scope:	eq	version:	m16kt68a	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr665	scope:	eq	version:	d8e128f	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m610	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m710e	scope:	eq	version:	m41kt2da	Trust: 1.0
vendor:	lenovo	model:	v50t-13imb	scope:	eq	version:	o4hkt38a	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr860 v2	scope:	eq	version:	m5e118i	Trust: 1.0
vendor:	lenovo	model:	thinksystem st58	scope:	eq	version:	ite125a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m710t	scope:	eq	version:	m16kt68a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m75t gen 2	scope:	eq	version:	m47kt24a	Trust: 1.0
vendor:	lenovo	model:	thinkpad l490	scope:	eq	version:	r0zet50w	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx5531	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx1320	scope:	eq	version:	ise130e	Trust: 1.0
vendor:	lenovo	model:	thinksmart hub teams	scope:	eq	version:	m2xkt20a	Trust: 1.0
vendor:	lenovo	model:	thinksystem sn550 v2	scope:	eq	version:	u8e118m	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr630 v2	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkserver rs260	scope:	eq	version:	vb1ts307	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr645	scope:	eq	version:	d8e128f	Trust: 1.0
vendor:	lenovo	model:	thinksystem hr610x	scope:	eq	version:	hr6n0661	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m700q	scope:	eq	version:	fwktbaa	Trust: 1.0
vendor:	lenovo	model:	ideacentre 510s-07icb	scope:	eq	version:	m22kt47a	Trust: 1.0
vendor:	lenovo	model:	thinkpad e590	scope:	eq	version:	r0yet48w	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3330-h	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkpad t14s gen 2	scope:	eq	version:	n35et43w	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr590	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx2331	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m75q gen 2	scope:	eq	version:	m33kt25a	Trust: 1.0
vendor:	lenovo	model:	thinkpad t14 gen 1	scope:	eq	version:	n2xet33w	Trust: 1.0
vendor:	lenovo	model:	v330-20icb	scope:	eq	version:	m1qkt47a	Trust: 1.0
vendor:	lenovo	model:	legion c530-19icb	scope:	eq	version:	o4bkt20a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 510s-07icb	scope:	eq	version:	m22kt48a	Trust: 1.0
vendor:	lenovo	model:	thinkpad p1 gen 2	scope:	eq	version:	n2oet54w	Trust: 1.0
vendor:	lenovo	model:	ideacentre 510s-07ick	scope:	eq	version:	m30kt26a	Trust: 1.0
vendor:	lenovo	model:	v530-15icb	scope:	eq	version:	m1ykt70a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m70a	scope:	eq	version:	m28kt37a	Trust: 1.0
vendor:	lenovo	model:	v540-24iwl	scope:	eq	version:	m29kt39a	Trust: 1.0
vendor:	lenovo	model:	thinkserver rd550	scope:	eq	version:	5.03.0	Trust: 1.0
vendor:	lenovo	model:	thinkstation p320 tiny	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	thinkpad l14	scope:	eq	version:	r17et33w	Trust: 1.0
vendor:	lenovo	model:	thinkpad r14 gen 2	scope:	eq	version:	r1eet45w	Trust: 1.0
vendor:	lenovo	model:	thinkserver sr590	scope:	eq	version:	tee176k	Trust: 1.0
vendor:	lenovo	model:	thinkpad l390 yoga	scope:	eq	version:	r10et51w	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m80t	scope:	eq	version:	m2tkt50a	Trust: 1.0
vendor:	lenovo	model:	thinksmart hub zoom	scope:	eq	version:	m2xkt20a	Trust: 1.0
vendor:	lenovo	model:	thinkserver rs160	scope:	eq	version:	vb1ts307	Trust: 1.0
vendor:	lenovo	model:	thinksystem st550	scope:	eq	version:	o0e178i	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr550	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m70q gen 3	scope:	eq	version:	m3jkt34a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3331	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkpad x13	scope:	eq	version:	n2yet34w	Trust: 1.0
vendor:	lenovo	model:	v520s	scope:	eq	version:	m16kt68a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m70t	scope:	eq	version:	m41kt2da	Trust: 1.0
vendor:	lenovo	model:	thinksmart hub 500	scope:	eq	version:	m23kt29a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7520	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m70t gen 3	scope:	eq	version:	m2tkt50a	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr950	scope:	eq	version:	pse144n	Trust: 1.0
vendor:	lenovo	model:	thinkstation p340 tiny	scope:	eq	version:	m2wkt57a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx1521-r	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx 1se	scope:	eq	version:	ise130e	Trust: 1.0
vendor:	lenovo	model:	thinksystem sn850	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkpad x390	scope:	eq	version:	n2jet97w	Trust: 1.0
vendor:	lenovo	model:	thinksystem sd650 dwc dual node tray	scope:	eq	version:	ote178g	Trust: 1.0
vendor:	lenovo	model:	thinkserver sr588	scope:	eq	version:	tee176k	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 carbon 9th gen	scope:	eq	version:	n2tet72w	Trust: 1.0
vendor:	lenovo	model:	thinkserver ts250	scope:	eq	version:	81i\/b7s	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m75n	scope:	eq	version:	m30kt26a	Trust: 1.0
vendor:	lenovo	model:	v50t-13iob g2	scope:	eq	version:	m3gkt33a	Trust: 1.0
vendor:	lenovo	model:	legion t7-34imz5	scope:	eq	version:	o4lkt1ea	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m80s	scope:	eq	version:	m2tkt50a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m8600s	scope:	eq	version:	fwktbaa	Trust: 1.0
vendor:	lenovo	model:	ideacentre creator 5-14iob6	scope:	eq	version:	m3gkt33a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx 4u	scope:	eq	version:	pse144n	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3530-h	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkserver ts460	scope:	eq	version:	tb1ts307	Trust: 1.0
vendor:	lenovo	model:	thinkpad x390 yoga	scope:	eq	version:	n2let88w	Trust: 1.0
vendor:	lenovo	model:	thinkserver rd350g	scope:	eq	version:	vb3ts891	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx3320	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr850p	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m70a gen 2	scope:	eq	version:	m2skt25a	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr650 v2	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	ideacentre gaming 5-14acn6	scope:	eq	version:	o5ekt21a	Trust: 1.0
vendor:	lenovo	model:	legion t5-28icb05	scope:	eq	version:	o4bkt20a	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr250 v2	scope:	eq	version:	tqe104j	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m910q	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 5-14are05	scope:	eq	version:	o4zkt29a	Trust: 1.0
vendor:	lenovo	model:	thinkpad x13 gen 2	scope:	eq	version:	n35et43w	Trust: 1.0
vendor:	lenovo	model:	thinksystem sd630 v2	scope:	eq	version:	u8e118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx certified node - all flash	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinksystem st650 v2	scope:	eq	version:	u8e118m	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx1020	scope:	eq	version:	hye122f	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx7820	scope:	eq	version:	pse144n	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3331-h	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinksystem st250	scope:	eq	version:	ise130e	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr530	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m710q	scope:	eq	version:	m1zkt38a	Trust: 1.0
vendor:	lenovo	model:	ideacentre c5-14imb05	scope:	eq	version:	o4hkt38a	Trust: 1.0
vendor:	lenovo	model:	thinkstation p520c	scope:	eq	version:	s03kt55a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 5-14acn6	scope:	eq	version:	o5ekt21a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx2320	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	qt m410	scope:	eq	version:	m16kt68a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx5520	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m910x	scope:	eq	version:	m49kt1da	Trust: 1.0
vendor:	lenovo	model:	thinkpad p43s	scope:	eq	version:	n2iet98w	Trust: 1.0
vendor:	lenovo	model:	ideacentre gaming 5 17iab7	scope:	eq	version:	m42kt40a	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7530	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m75t gen 2	scope:	eq	version:	m46kt2da	Trust: 1.0
vendor:	lenovo	model:	thinkpad p15s gen 2	scope:	eq	version:	n34et46w	Trust: 1.0
vendor:	lenovo	model:	thinksystem st50	scope:	eq	version:	ite125a	Trust: 1.0
vendor:	lenovo	model:	ideacentre 3-07imb05	scope:	eq	version:	m2vkt1da	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 nano gen 1	scope:	eq	version:	n2tet71w	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx1320	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m720e	scope:	eq	version:	m11kt54a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx1321	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx1520-r	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre e75t	scope:	eq	version:	m16kt68a	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m910t	scope:	eq	version:	m1akt56a	Trust: 1.0
vendor:	lenovo	model:	qt b415	scope:	eq	version:	m16kt68a	Trust: 1.0
vendor:	lenovo	model:	thinkpad t15g gen 1	scope:	eq	version:	n30et43w	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx 1u	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx5520-c	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx 2u	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr258	scope:	eq	version:	ise130e	Trust: 1.0
vendor:	lenovo	model:	thinkserver rd650	scope:	eq	version:	5.05.0	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr850 v2	scope:	eq	version:	m5e118i	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3531-f	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkpad p72	scope:	eq	version:	n2cet61w	Trust: 1.0
vendor:	lenovo	model:	ideacentre 5 14iab7	scope:	eq	version:	m42kt40a	Trust: 1.0
vendor:	lenovo	model:	thinkpad t14s	scope:	eq	version:	n2yet34w	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr258 v2	scope:	eq	version:	tqe104j	Trust: 1.0
vendor:	lenovo	model:	thinksystem st558	scope:	eq	version:	o0e178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre neo 50s gen 3	scope:	eq	version:	m42kt40a	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr150	scope:	eq	version:	ise130e	Trust: 1.0
vendor:	lenovo	model:	thinkagile vx7820	scope:	eq	version:	pse144n	Trust: 1.0
vendor:	lenovo	model:	thinkpad x13 yoga gen 2	scope:	eq	version:	n39et50w	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx certified node - hybrid	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m810z all-in-one	scope:	eq	version:	m1ekt25a	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 yoga 4th gen	scope:	eq	version:	n2qet44w	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m90s	scope:	eq	version:	m2tkt50a	Trust: 1.0
vendor:	lenovo	model:	thinkagile mx3520 h	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkpad e490	scope:	eq	version:	r0yet48w	Trust: 1.0
vendor:	lenovo	model:	thinkpad p17 gen 1	scope:	eq	version:	n30et43w	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx2320	scope:	eq	version:	ive178i	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx3720	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	qitian a815	scope:	eq	version:	m1rkt38a	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 titanium	scope:	eq	version:	n2met54w	Trust: 1.0
vendor:	lenovo	model:	v50s-07imb	scope:	eq	version:	m2vkt1da	Trust: 1.0
vendor:	lenovo	model:	ideacentre gaming 5-14iob6	scope:	eq	version:	m3gkt33a	Trust: 1.0
vendor:	lenovo	model:	thinkpad l13	scope:	eq	version:	r15et51w	Trust: 1.0
vendor:	lenovo	model:	thinkpad e14	scope:	eq	version:	r16et33w	Trust: 1.0
vendor:	lenovo	model:	thinkpad l14 gen 2	scope:	eq	version:	r1jet53w	Trust: 1.0
vendor:	lenovo	model:	v55t gen 2 13acn	scope:	eq	version:	o5jkt20a	Trust: 1.0
vendor:	lenovo	model:	thinksystem sd650-n v2	scope:	eq	version:	u8e118m	Trust: 1.0
vendor:	lenovo	model:	thinkpad e490s	scope:	eq	version:	r0yet48w	Trust: 1.0
vendor:	lenovo	model:	thinkcentre m630e	scope:	eq	version:	m1wkt45a	Trust: 1.0
vendor:	lenovo	model:	thinkagile hx1331	scope:	eq	version:	afe118m	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 yoga 5th gen	scope:	eq	version:	n2wet32w	Trust: 1.0
vendor:	lenovo	model:	thinksystem sd650 v2	scope:	eq	version:	u8e118m	Trust: 1.0
vendor:	lenovo	model:	thinkpad t15	scope:	eq	version:	n2xet33w	Trust: 1.0
vendor:	lenovo	model:	thinksystem st658 v2	scope:	eq	version:	u8e118m	Trust: 1.0
vendor:	lenovo	model:	thinkpad t590	scope:	eq	version:	n2iet98w	Trust: 1.0
vendor:	lenovo	model:	thinkstation p350	scope:	eq	version:	s0akt34a	Trust: 1.0
vendor:	lenovo	model:	thinksystem sr570	scope:	eq	version:	tee178i	Trust: 1.0
vendor:	lenovo	model:	ideacentre creator 5-14iob6	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre g5-14imb05	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre 3-07imb05	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre 5-14imb05	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre 5 14iab7	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre c5-14imb05	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre e96z	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre 3 07iab7	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre 5-14acn6	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	ideacentre 5-14iob6	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2022-012567 // NVD: CVE-2022-40134

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2022-40134
value:	MEDIUM
Trust: 1.0
psirt@lenovo.com:	CVE-2022-40134
value:	MEDIUM
Trust: 1.0
OTHER:	JVNDB-2022-012567
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-202301-2381
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2022-40134
baseSeverity:	MEDIUM
baseScore:	4.4
vectorString:	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	0.8
impactScore:	3.6
version:	3.1
Trust: 2.0
OTHER:	JVNDB-2022-012567
baseSeverity:	MEDIUM
baseScore:	4.4
vectorString:	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2022-012567 // CNNVD: CNNVD-202301-2381 // NVD: CVE-2022-40134 // NVD: CVE-2022-40134

PROBLEMTYPE DATA

problemtype:	CWE-125	Trust: 1.0
problemtype:	Out-of-bounds read (CWE-125) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2022-012567 // NVD: CVE-2022-40134

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202301-2381

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202301-2381

PATCH

title:	LEN-94953	url:	https://support.lenovo.com/us/en/product_security/LEN-94953	Trust: 0.8
title:	Lenovo Desktops Buffer error vulnerability fix	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=223211	Trust: 0.6
title:	-	url:	https://github.com/Live-Hack-CVE/CVE-2022-40134	Trust: 0.1

sources: VULMON: CVE-2022-40134 // JVNDB: JVNDB-2022-012567 // CNNVD: CNNVD-202301-2381

EXTERNAL IDS

db:	NVD	id:	CVE-2022-40134	Trust: 3.3
db:	LENOVO	id:	LEN-94953	Trust: 1.7
db:	JVNDB	id:	JVNDB-2022-012567	Trust: 0.8
db:	CNNVD	id:	CNNVD-202301-2381	Trust: 0.6
db:	VULMON	id:	CVE-2022-40134	Trust: 0.1

sources: VULMON: CVE-2022-40134 // JVNDB: JVNDB-2022-012567 // CNNVD: CNNVD-202301-2381 // NVD: CVE-2022-40134

REFERENCES

url:	https://support.lenovo.com/us/en/product_security/len-94953	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2022-40134	Trust: 1.4
url:	https://cxsecurity.com/cveshow/cve-2022-40134/	Trust: 0.6
url:	https://github.com/live-hack-cve/cve-2022-40134	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULMON: CVE-2022-40134 // JVNDB: JVNDB-2022-012567 // CNNVD: CNNVD-202301-2381 // NVD: CVE-2022-40134

SOURCES

db:	VULMON	id:	CVE-2022-40134
db:	JVNDB	id:	JVNDB-2022-012567
db:	CNNVD	id:	CNNVD-202301-2381
db:	NVD	id:	CVE-2022-40134

LAST UPDATE DATE

2024-08-14T13:52:48.472000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2022-40134	date:	2023-01-31T00:00:00
db:	JVNDB	id:	JVNDB-2022-012567	date:	2023-08-31T02:59:00
db:	CNNVD	id:	CNNVD-202301-2381	date:	2023-02-09T00:00:00
db:	NVD	id:	CVE-2022-40134	date:	2023-02-08T22:19:11.150

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2022-40134	date:	2023-01-30T00:00:00
db:	JVNDB	id:	JVNDB-2022-012567	date:	2023-08-31T00:00:00
db:	CNNVD	id:	CNNVD-202301-2381	date:	2023-01-30T00:00:00
db:	NVD	id:	CVE-2022-40134	date:	2023-01-30T22:15:12.180