CVE Feed

    Dashboard / CVE / CVE-2022-40135

    CVE-2022-40135

    An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

    Published:Jan 30, 2023
    Last Modified:Mar 27, 2025
    EPS:Jan 30, 2023
    EPSS Score:0.00043
    CVSS Score:4.4

    Affected Products

    Vendor
    Lenovo
    Product
    Ideacentre 3-07ada05
    Vendor
    Lenovo
    Product
    Ideacentre 3-07ada05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 3-07imb05
    Vendor
    Lenovo
    Product
    Ideacentre 3-07imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 3 07iab7
    Vendor
    Lenovo
    Product
    Ideacentre 3 07iab7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14acn6
    Vendor
    Lenovo
    Product
    Ideacentre 5-14acn6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14are05
    Vendor
    Lenovo
    Product
    Ideacentre 5-14are05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14imb05
    Vendor
    Lenovo
    Product
    Ideacentre 5-14imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 510-15ick
    Vendor
    Lenovo
    Product
    Ideacentre 510-15ick Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 510a-15arr
    Vendor
    Lenovo
    Product
    Ideacentre 510a-15arr Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 510a-15ick
    Vendor
    Lenovo
    Product
    Ideacentre 510a-15ick Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 510s-07icb
    Vendor
    Lenovo
    Product
    Ideacentre 510s-07icb Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 510s-07ick
    Vendor
    Lenovo
    Product
    Ideacentre 510s-07ick Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5 14iab7
    Vendor
    Lenovo
    Product
    Ideacentre 5 14iab7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 720-18apr
    Vendor
    Lenovo
    Product
    Ideacentre 720-18apr Firmware
    Vendor
    Lenovo
    Product
    Ideacentre A340-22igm
    Vendor
    Lenovo
    Product
    Ideacentre A340-22igm Firmware
    Vendor
    Lenovo
    Product
    Ideacentre A340-24igm
    Vendor
    Lenovo
    Product
    Ideacentre A340-24igm Firmware
    Vendor
    Lenovo
    Product
    Ideacentre C5-14imb05
    Vendor
    Lenovo
    Product
    Ideacentre C5-14imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Creator 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre Creator 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre G5-14amr05
    Vendor
    Lenovo
    Product
    Ideacentre G5-14amr05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre G5-14imb05
    Vendor
    Lenovo
    Product
    Ideacentre G5-14imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14acn6
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14acn6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5 17acn7
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5 17acn7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5 17iab7
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5 17iab7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre T540-15ama G
    Vendor
    Lenovo
    Product
    Ideacentre T540-15ama G Firmware
    Vendor
    Lenovo
    Product
    Ideacentre T540-15ick
    Vendor
    Lenovo
    Product
    Ideacentre T540-15ick Firmware
    Vendor
    Lenovo
    Product
    Legion C530-19icb
    Vendor
    Lenovo
    Product
    Legion C530-19icb Firmware
    Vendor
    Lenovo
    Product
    Legion T5-26iob6
    Vendor
    Lenovo
    Product
    Legion T5-26iob6 Firmware
    Vendor
    Lenovo
    Product
    Legion T5-28icb05
    Vendor
    Lenovo
    Product
    Legion T5-28icb05 Firmware
    Vendor
    Lenovo
    Product
    Legion T530-28apr
    Vendor
    Lenovo
    Product
    Legion T530-28apr Firmware
    Vendor
    Lenovo
    Product
    Legion T530-28icb
    Vendor
    Lenovo
    Product
    Legion T530-28icb Firmware
    Vendor
    Lenovo
    Product
    Legion T7-34imz5
    Vendor
    Lenovo
    Product
    Legion T7-34imz5 Firmware
    Vendor
    Lenovo
    Product
    Qitian A815
    Vendor
    Lenovo
    Product
    Qitian A815 Firmware
    Vendor
    Lenovo
    Product
    Qt B415
    Vendor
    Lenovo
    Product
    Qt B415 Firmware
    Vendor
    Lenovo
    Product
    Qt M410
    Vendor
    Lenovo
    Product
    Qt M410 Firmware
    Vendor
    Lenovo
    Product
    Qt M415
    Vendor
    Lenovo
    Product
    Qt M415 Firmware
    Vendor
    Lenovo
    Product
    Stadia Ggp-120
    Vendor
    Lenovo
    Product
    Stadia Ggp-120 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre E75 T\/s
    Vendor
    Lenovo
    Product
    Thinkcentre E75 T\/s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre E96z
    Vendor
    Lenovo
    Product
    Thinkcentre E96z Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M60e Tiny
    Vendor
    Lenovo
    Product
    Thinkcentre M60e Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M610
    Vendor
    Lenovo
    Product
    Thinkcentre M610 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M625q
    Vendor
    Lenovo
    Product
    Thinkcentre M625q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M630e
    Vendor
    Lenovo
    Product
    Thinkcentre M630e Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M6600q
    Vendor
    Lenovo
    Product
    Thinkcentre M6600q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M6600s
    Vendor
    Lenovo
    Product
    Thinkcentre M6600s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M6600t
    Vendor
    Lenovo
    Product
    Thinkcentre M6600t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70a
    Vendor
    Lenovo
    Product
    Thinkcentre M70a Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70a Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M70a Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70c
    Vendor
    Lenovo
    Product
    Thinkcentre M70c Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70q
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70s Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M70s Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70t Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M70t Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M710e
    Vendor
    Lenovo
    Product
    Thinkcentre M710e Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M710q
    Vendor
    Lenovo
    Product
    Thinkcentre M710q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M710s
    Vendor
    Lenovo
    Product
    Thinkcentre M710s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M710t
    Vendor
    Lenovo
    Product
    Thinkcentre M710t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M715q
    Vendor
    Lenovo
    Product
    Thinkcentre M715q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M715t
    Vendor
    Lenovo
    Product
    Thinkcentre M715t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M720e
    Vendor
    Lenovo
    Product
    Thinkcentre M720e Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M720q
    Vendor
    Lenovo
    Product
    Thinkcentre M720q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M720s
    Vendor
    Lenovo
    Product
    Thinkcentre M720s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M720t
    Vendor
    Lenovo
    Product
    Thinkcentre M720t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M725s
    Vendor
    Lenovo
    Product
    Thinkcentre M725s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75n
    Vendor
    Lenovo
    Product
    Thinkcentre M75n Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75q-1
    Vendor
    Lenovo
    Product
    Thinkcentre M75q-1 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75q Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M75q Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75s-1
    Vendor
    Lenovo
    Product
    Thinkcentre M75s-1 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75s Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M75s Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75t Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M75t Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80q
    Vendor
    Lenovo
    Product
    Thinkcentre M80q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M810z
    Vendor
    Lenovo
    Product
    Thinkcentre M810z Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M818z
    Vendor
    Lenovo
    Product
    Thinkcentre M818z Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M820z
    Vendor
    Lenovo
    Product
    Thinkcentre M820z Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90a
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Gen2
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Gen2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Tiny
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M910q
    Vendor
    Lenovo
    Product
    Thinkcentre M910q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M910s
    Vendor
    Lenovo
    Product
    Thinkcentre M910s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M910t
    Vendor
    Lenovo
    Product
    Thinkcentre M910t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M910x
    Vendor
    Lenovo
    Product
    Thinkcentre M910x Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920q
    Vendor
    Lenovo
    Product
    Thinkcentre M920q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920s
    Vendor
    Lenovo
    Product
    Thinkcentre M920s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920t
    Vendor
    Lenovo
    Product
    Thinkcentre M920t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920x
    Vendor
    Lenovo
    Product
    Thinkcentre M920x Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50s Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50s Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50t Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50t Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkedge Se30
    Vendor
    Lenovo
    Product
    Thinkedge Se30 Firmware
    Vendor
    Lenovo
    Product
    Thinksmart Core \& Controller Full Room Kit\
    Vendor
    Lenovo
    Product
    Thinksmart Core \& Controller Kit\
    Vendor
    Lenovo
    Product
    Thinksmart Core Device\
    Vendor
    Lenovo
    Product
    Thinksmart Core Device For Logitech
    Vendor
    Lenovo
    Product
    Thinksmart Core Device For Logitech Firmware
    Vendor
    Lenovo
    Product
    Thinksmart Core Device For Poly
    Vendor
    Lenovo
    Product
    Thinksmart Core Device For Poly Firmware
    Vendor
    Lenovo
    Product
    Thinksmart Hub Teams
    Vendor
    Lenovo
    Product
    Thinksmart Hub Teams Firmware
    Vendor
    Lenovo
    Product
    Thinksmart Hub Zoom
    Vendor
    Lenovo
    Product
    Thinksmart Hub Zoom Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P310
    Vendor
    Lenovo
    Product
    Thinkstation P310 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P318
    Vendor
    Lenovo
    Product
    Thinkstation P318 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P320 Tiny
    Vendor
    Lenovo
    Product
    Thinkstation P320 Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P330 Tiny
    Vendor
    Lenovo
    Product
    Thinkstation P330 Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P340
    Vendor
    Lenovo
    Product
    Thinkstation P340 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P340 Tiny
    Vendor
    Lenovo
    Product
    Thinkstation P340 Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P348
    Vendor
    Lenovo
    Product
    Thinkstation P348 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P350
    Vendor
    Lenovo
    Product
    Thinkstation P350 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P350 Tiny
    Vendor
    Lenovo
    Product
    Thinkstation P350 Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P520
    Vendor
    Lenovo
    Product
    Thinkstation P520 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P520c
    Vendor
    Lenovo
    Product
    Thinkstation P520c Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P620
    Vendor
    Lenovo
    Product
    Thinkstation P620 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St50
    Vendor
    Lenovo
    Product
    Thinksystem St50 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St58
    Vendor
    Lenovo
    Product
    Thinksystem St58 Firmware
    Vendor
    Lenovo
    Product
    V30a-22iml
    Vendor
    Lenovo
    Product
    V30a-22iml Firmware
    Vendor
    Lenovo
    Product
    V30a-24iml
    Vendor
    Lenovo
    Product
    V30a-24iml Firmware
    Vendor
    Lenovo
    Product
    V330-20icb
    Vendor
    Lenovo
    Product
    V330-20icb Firmware
    Vendor
    Lenovo
    Product
    V35s-07ada
    Vendor
    Lenovo
    Product
    V35s-07ada Firmware
    Vendor
    Lenovo
    Product
    V50a-22imb
    Vendor
    Lenovo
    Product
    V50a-22imb Firmware
    Vendor
    Lenovo
    Product
    V50a-24imb
    Vendor
    Lenovo
    Product
    V50a-24imb Firmware
    Vendor
    Lenovo
    Product
    V50s-07imb
    Vendor
    Lenovo
    Product
    V50s-07imb Firmware
    Vendor
    Lenovo
    Product
    V50t-13imb
    Vendor
    Lenovo
    Product
    V50t-13imb Firmware
    Vendor
    Lenovo
    Product
    V50t-13iob G2
    Vendor
    Lenovo
    Product
    V50t-13iob G2 Firmware
    Vendor
    Lenovo
    Product
    V520
    Vendor
    Lenovo
    Product
    V520 Firmware
    Vendor
    Lenovo
    Product
    V520s
    Vendor
    Lenovo
    Product
    V520s Firmware
    Vendor
    Lenovo
    Product
    V530-15arr
    Vendor
    Lenovo
    Product
    V530-15arr Firmware
    Vendor
    Lenovo
    Product
    V530-15icb
    Vendor
    Lenovo
    Product
    V530-15icb Firmware
    Vendor
    Lenovo
    Product
    V530-15icr
    Vendor
    Lenovo
    Product
    V530-15icr Firmware
    Vendor
    Lenovo
    Product
    V530-22icb
    Vendor
    Lenovo
    Product
    V530-22icb Firmware
    Vendor
    Lenovo
    Product
    V530-24icb
    Vendor
    Lenovo
    Product
    V530-24icb Firmware
    Vendor
    Lenovo
    Product
    V530s-07icb
    Vendor
    Lenovo
    Product
    V530s-07icb Firmware
    Vendor
    Lenovo
    Product
    V530s-07icr
    Vendor
    Lenovo
    Product
    V530s-07icr Firmware
    Vendor
    Lenovo
    Product
    V540-24iwl
    Vendor
    Lenovo
    Product
    V540-24iwl Firmware
    Vendor
    Lenovo
    Product
    V55t-15api
    Vendor
    Lenovo
    Product
    V55t-15api Firmware
    Vendor
    Lenovo
    Product
    V55t-15are
    Vendor
    Lenovo
    Product
    V55t-15are Firmware
    Vendor
    Lenovo
    Product
    V55t Gen 2 13acn
    Vendor
    Lenovo
    Product
    V55t Gen 2 13acn Firmware
    Vendor
    Lenovo
    Product
    Yangtian Afq150
    Vendor
    Lenovo
    Product
    Yangtian Afq150 Firmware
    Vendor
    Lenovo
    Product
    Yoga A940-27icb
    Vendor
    Lenovo
    Product
    Yoga A940-27icb Firmware
    Vendor
    Lenovo
    Product
    Yta8900f
    Vendor
    Lenovo
    Product
    Yta8900f Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2023-43577 (CVSS 6.7) — A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local at…
    CVE-2023-43576 (CVSS 6.7) — A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local a…
    CVE-2023-43575 (CVSS 6.7) — A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow…
    CVE-2023-43574 (CVSS 4.4) — A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products …
    CVE-2023-43573 (CVSS 6.7) — A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products t…
    CVE-2023-43572 (CVSS 4.4) — A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may all…
    CVE-2023-45079 (CVSS 6.7) — A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with e…
    CVE-2023-45078 (CVSS 6.7) — A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attack…
    CVE-2023-45077 (CVSS 6.7) — A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with el…
    CVE-2023-45076 (CVSS 6.7) — A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with el…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High