CVE-2022-40134: Lenovo Ideacentre 3-07ada05 Firmware

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Affected products

• Lenovo Ideacentre 3-07ada05 Firmware: version o4fkt29a only
• Lenovo Ideacentre 3-07imb05 Firmware: version m2vkt1da only
• Lenovo Ideacentre 3 07iab7 Firmware: version m49kt1da only
• Lenovo Ideacentre 5-14acn6 Firmware: version o5ekt21a only
• Lenovo Ideacentre 5-14are05 Firmware: version o4zkt29a only
• Lenovo Ideacentre 5-14imb05 Firmware: version o4hkt38a only
• Lenovo Ideacentre 5-14iob6 Firmware: version m3gkt33a only
• Lenovo Ideacentre 510s-07icb Firmware: version m22kt47a only; version m22kt48a only
• Lenovo Ideacentre 510s-07ick Firmware: version m30kt26a only
• Lenovo Ideacentre 5 14iab7 Firmware: version m42kt40a only
• Lenovo Ideacentre a340-22igm Firmware: version o51kt12a only
• Lenovo Ideacentre a340-24igm Firmware: version o51kt12a only
• Lenovo Ideacentre c5-14imb05 Firmware: version o4hkt38a only
• Lenovo Ideacentre Creator 5-14iob6 Firmware: version m3gkt33a only
• Lenovo Ideacentre g5-14amr05 Firmware: version o4zkt29a only
• Lenovo Ideacentre g5-14imb05 Firmware: version o4hkt38a only
• Lenovo Ideacentre Gaming 5-14acn6 Firmware: version o5ekt21a only
• Lenovo Ideacentre Gaming 5-14iob6 Firmware: version m3gkt33a only
• Lenovo Ideacentre Gaming 5 17acn7 Firmware: version o5ekt21a only
• Lenovo Ideacentre Gaming 5 17iab7 Firmware: version m42kt40a only
• Lenovo Legion c530-19icb Firmware: version o4bkt20a only
• Lenovo Legion t5-26iob6 Firmware: version o54kt1da only
• Lenovo Legion t5-28icb05 Firmware: version o4bkt20a only
• Lenovo Legion t530-28apr Firmware: version o4gkt16a only
• Lenovo Legion t530-28icb Firmware: version o4bkt20a only
• and 300 more

Published 2023-01-30. Last modified 2026-06-17.