CVE-2022-40137: Lenovo Ideacentre 3-07ada05 Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected products

• Lenovo Ideacentre 3-07ada05 Firmware: version o4fkt33a only
• Lenovo Ideacentre 3-07imb05 Firmware: version m2vkt1fa only
• Lenovo Ideacentre 3 07iab7 Firmware: version m49kt1da only
• Lenovo Ideacentre 5-14acn6 Firmware: version o5ekt23a only
• Lenovo Ideacentre 5-14are05 Firmware: version o4zkt29a only
• Lenovo Ideacentre 5-14imb05 Firmware: version o4hkt3aa only
• Lenovo Ideacentre 5-14iob6 Firmware: version m3gkt38a only
• Lenovo Ideacentre 510-15ick Firmware: version o4kkt16a only
• Lenovo Ideacentre 510a-15arr Firmware: version o4dkt44a only
• Lenovo Ideacentre 510a-15ick Firmware: version o4kkt16a only
• Lenovo Ideacentre 510s-07icb Firmware: version m22kt48a only
• Lenovo Ideacentre 510s-07ick Firmware: version m30kt27a only
• Lenovo Ideacentre 5 14iab7 Firmware: version m42kt40a only
• Lenovo Ideacentre 720-18apr Firmware: version m25kt61a only
• Lenovo Ideacentre a340-22ast All-In-One Firmware: version o4ckt23a only
• Lenovo Ideacentre a340-22icb All-In-One Firmware: version o44kt32a only
• Lenovo Ideacentre a340-22ick All-In-One Firmware: version o4pkt15a only
• Lenovo Ideacentre a340-22igm All-In-One Firmware: version o51kt12a only
• Lenovo Ideacentre a340-22iwl All-In-One Firmware: version o46kt36a only
• Lenovo Ideacentre a340-24icb All-In-One Firmware: version o44kt32a only
• Lenovo Ideacentre a340-24ick All-In-One Firmware: version o4pkt15a only
• Lenovo Ideacentre a340-24igm All-In-One Firmware: version o51kt12a only
• Lenovo Ideacentre a340-24iwl All-In-One Firmware: version o46kt36a only
• Lenovo Ideacentre Aio 3-22ada05 Firmware: version o4tkt29a only
• Lenovo Ideacentre Aio 3-22ada6 Firmware: version o5ckt24a only
• and 264 more

Published 2023-01-30. Last modified 2026-06-17.