CVE-2022-40136: Lenovo Ideacentre 3-07ada05 Firmware

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Affected products

  • Lenovo Ideacentre 3-07ada05 Firmware: before o4fkt29a (fixed in o4fkt29a)
  • Lenovo Ideacentre 3-07imb05 Firmware: before m2vkt1da (fixed in m2vkt1da)
  • Lenovo Ideacentre 3 07iab7 Firmware: before m49kt1da (fixed in m49kt1da)
  • Lenovo Ideacentre 5-14acn6 Firmware: before o5ekt21a (fixed in o5ekt21a)
  • Lenovo Ideacentre 5-14are05 Firmware: before o4zkt29a (fixed in o4zkt29a)
  • Lenovo Ideacentre 5-14imb05 Firmware: before o4hkt38a (fixed in o4hkt38a)
  • Lenovo Ideacentre 5-14iob6 Firmware: before m3gkt33a (fixed in m3gkt33a)
  • Lenovo Ideacentre 510-15ick Firmware: before o4kkt16a (fixed in o4kkt16a)
  • Lenovo Ideacentre 510a-15arr Firmware: before o4dkt43a (fixed in o4dkt43a)
  • Lenovo Ideacentre 510a-15ick Firmware: before o4kkt16a (fixed in o4kkt16a)
  • Lenovo Ideacentre 510s-07icb Firmware: before m22kt47a (fixed in m22kt47a)
  • Lenovo Ideacentre 510s-07ick Firmware: before m30kt26a (fixed in m30kt26a)
  • Lenovo Ideacentre 5 14iab7 Firmware: before m42kt40a (fixed in m42kt40a)
  • Lenovo Ideacentre 720-18apr Firmware: before m25kt61a (fixed in m25kt61a)
  • Lenovo Ideacentre a340-22igm Firmware: before o51kt12a (fixed in o51kt12a)
  • Lenovo Ideacentre a340-24igm Firmware: before o51kt12a (fixed in o51kt12a)
  • Lenovo Ideacentre c5-14imb05 Firmware: before o4hkt38a (fixed in o4hkt38a)
  • Lenovo Ideacentre Creator 5-14iob6 Firmware: up to and including m3gkt33a
  • Lenovo Ideacentre g5-14amr05 Firmware: before o4zkt29a (fixed in o4zkt29a)
  • Lenovo Ideacentre g5-14imb05 Firmware: before o4hkt38a (fixed in o4hkt38a)
  • Lenovo Ideacentre Gaming 5-14acn6 Firmware: before o5ekt21a (fixed in o5ekt21a)
  • Lenovo Ideacentre Gaming 5-14iob6 Firmware: before m3gkt33a (fixed in m3gkt33a)
  • Lenovo Ideacentre Gaming 5 17acn7 Firmware: before o5ekt21a (fixed in o5ekt21a)
  • Lenovo Ideacentre Gaming 5 17iab7 Firmware: before m42kt40a (fixed in m42kt40a)
  • Lenovo Ideacentre t540-15ama G Firmware: before m2ckt4da (fixed in m2ckt4da)
  • and 124 more

Published 2023-01-30. Last modified 2026-06-17.