{"answers":{"affected":"It affects 325 products.","exploited":"There is no known exploitation of CVE-2022-40134 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2022-40134 yet. Limit exposure of the affected software until one is available.","what":"CVE-2022-40134 is a medium-severity vulnerability in Lenovo BIOS, published on 30 Jan 2023. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2022-40134 and fix it if it is affected.\n\nWhat it is: CVE-2022-40134 is a medium-severity vulnerability in Lenovo BIOS, published on 30 Jan 2023. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2022-40134 in the wild and no public exploit code.\n\nAffected product: Lenovo BIOS. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2022-40134/ (Markdown: https://insights.sbomify.com/CVE-2022-40134/index.md)","id":"CVE-2022-40134","markdown":"https://insights.sbomify.com/CVE-2022-40134/index.md","name":"CVE-2022-40134","record":{"aliases":["GHSA-p7vc-qcj9-2mj9"],"analysis":{"component_type":"hardware_firmware","fix_type":"patch","impacts":["data_read"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Lenovo BIOS","requires_auth":"high_privilege","summary":"Local attackers with elevated privileges can read SMM memory via a BIOS handler flaw, exposing sensitive system data.","user_interaction":"not_required","vuln_class":"information_disclosure"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"lenovo","cpe":[{"product":"ideacentre_3-07ada05_firmware","vendor":"lenovo"},{"product":"ideacentre_3-07imb05_firmware","vendor":"lenovo"},{"product":"ideacentre_3_07iab7_firmware","vendor":"lenovo"},{"product":"ideacentre_5-14acn6_firmware","vendor":"lenovo"},{"product":"ideacentre_5-14are05_firmware","vendor":"lenovo"},{"product":"ideacentre_5-14imb05_firmware","vendor":"lenovo"},{"product":"ideacentre_5-14iob6_firmware","vendor":"lenovo"},{"product":"ideacentre_510s-07icb_firmware","vendor":"lenovo"},{"product":"ideacentre_510s-07ick_firmware","vendor":"lenovo"},{"product":"ideacentre_5_14iab7_firmware","vendor":"lenovo"},{"product":"ideacentre_a340-22igm_firmware","vendor":"lenovo"},{"product":"ideacentre_a340-24igm_firmware","vendor":"lenovo"},{"product":"ideacentre_c5-14imb05_firmware","vendor":"lenovo"},{"product":"ideacentre_creator_5-14iob6_firmware","vendor":"lenovo"},{"product":"ideacentre_g5-14amr05_firmware","vendor":"lenovo"},{"product":"ideacentre_g5-14imb05_firmware","vendor":"lenovo"},{"product":"ideacentre_gaming_5-14acn6_firmware","vendor":"lenovo"},{"product":"ideacentre_gaming_5-14iob6_firmware","vendor":"lenovo"},{"product":"ideacentre_gaming_5_17acn7_firmware","vendor":"lenovo"},{"product":"ideacentre_gaming_5_17iab7_firmware","vendor":"lenovo"},{"product":"legion_c530-19icb_firmware","vendor":"lenovo"},{"product":"legion_t5-26iob6_firmware","vendor":"lenovo"},{"product":"legion_t5-28icb05_firmware","vendor":"lenovo"},{"product":"legion_t530-28apr_firmware","vendor":"lenovo"},{"product":"legion_t530-28icb_firmware","vendor":"lenovo"},{"product":"legion_t7-34imz5_firmware","vendor":"lenovo"},{"product":"n3310_storage_firmware","vendor":"lenovo"},{"product":"n4610_storage_firmware","vendor":"lenovo"},{"product":"qitian_a815_firmware","vendor":"lenovo"},{"product":"qt_b415_firmware","vendor":"lenovo"},{"product":"qt_m410_firmware","vendor":"lenovo"},{"product":"qt_m415_firmware","vendor":"lenovo"},{"product":"stadia_ggp-120_firmware","vendor":"lenovo"},{"product":"thinkagile_hx1021_firmware","vendor":"lenovo"},{"product":"thinkagile_hx1320_firmware","vendor":"lenovo"},{"product":"thinkagile_hx1321_firmware","vendor":"lenovo"},{"product":"thinkagile_hx1331_firmware","vendor":"lenovo"},{"product":"thinkagile_hx1520-r_firmware","vendor":"lenovo"},{"product":"thinkagile_hx1521-r_firmware","vendor":"lenovo"},{"product":"thinkagile_hx2320-e_firmware","vendor":"lenovo"},{"product":"thinkagile_hx2320_firmware","vendor":"lenovo"},{"product":"thinkagile_hx2321_firmware","vendor":"lenovo"},{"product":"thinkagile_hx2330_firmware","vendor":"lenovo"},{"product":"thinkagile_hx2331_firmware","vendor":"lenovo"},{"product":"thinkagile_hx2720-e_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3320_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3321_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3330_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3331_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3375_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3376_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3520-g_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3521-g_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3720_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3721_firmware","vendor":"lenovo"},{"product":"thinkagile_hx5520-c_firmware","vendor":"lenovo"},{"product":"thinkagile_hx5520_firmware","vendor":"lenovo"},{"product":"thinkagile_hx5521-c_firmware","vendor":"lenovo"},{"product":"thinkagile_hx5521_firmware","vendor":"lenovo"},{"product":"thinkagile_hx5530_firmware","vendor":"lenovo"},{"product":"thinkagile_hx5531_firmware","vendor":"lenovo"},{"product":"thinkagile_hx7520_firmware","vendor":"lenovo"},{"product":"thinkagile_hx7521_firmware","vendor":"lenovo"},{"product":"thinkagile_hx7530_firmware","vendor":"lenovo"},{"product":"thinkagile_hx7531_firmware","vendor":"lenovo"},{"product":"thinkagile_hx7820_firmware","vendor":"lenovo"},{"product":"thinkagile_hx7821_firmware","vendor":"lenovo"},{"product":"thinkagile_mx1020_firmware","vendor":"lenovo"},{"product":"thinkagile_mx1021_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3321_f_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3321_h_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3330-f_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3330-h_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3331-f_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3331-h_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3520_f_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3520_h_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3530-h_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3530_f_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3531-f_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3531_h_firmware","vendor":"lenovo"},{"product":"thinkagile_mx_certified_node_-_all_flash_firmware","vendor":"lenovo"},{"product":"thinkagile_mx_certified_node_-_hybrid_firmware","vendor":"lenovo"},{"product":"thinkagile_vx1320_firmware","vendor":"lenovo"},{"product":"thinkagile_vx2320_firmware","vendor":"lenovo"},{"product":"thinkagile_vx2330_firmware","vendor":"lenovo"},{"product":"thinkagile_vx3320_firmware","vendor":"lenovo"},{"product":"thinkagile_vx3330_firmware","vendor":"lenovo"},{"product":"thinkagile_vx3331_firmware","vendor":"lenovo"},{"product":"thinkagile_vx3520-g_firmware","vendor":"lenovo"},{"product":"thinkagile_vx3530-g_firmware","vendor":"lenovo"},{"product":"thinkagile_vx3720_firmware","vendor":"lenovo"},{"product":"thinkagile_vx5520_firmware","vendor":"lenovo"},{"product":"thinkagile_vx5530_firmware","vendor":"lenovo"},{"product":"thinkagile_vx7320_n_firmware","vendor":"lenovo"},{"product":"thinkagile_vx7330_firmware","vendor":"lenovo"},{"product":"thinkagile_vx7520_firmware","vendor":"lenovo"},{"product":"thinkagile_vx7520_n_firmware","vendor":"lenovo"},{"product":"thinkagile_vx7530_firmware","vendor":"lenovo"},{"product":"thinkagile_vx7531_firmware","vendor":"lenovo"},{"product":"thinkagile_vx7820_firmware","vendor":"lenovo"},{"product":"thinkagile_vx_1se_firmware","vendor":"lenovo"},{"product":"thinkagile_vx_1u_firmware","vendor":"lenovo"},{"product":"thinkagile_vx_2u4n_firmware","vendor":"lenovo"},{"product":"thinkagile_vx_2u_firmware","vendor":"lenovo"},{"product":"thinkagile_vx_4u_firmware","vendor":"lenovo"},{"product":"thinkcentre_e75s_firmware","vendor":"lenovo"},{"product":"thinkcentre_e75t_firmware","vendor":"lenovo"},{"product":"thinkcentre_e96z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m60e_tiny_firmware","vendor":"lenovo"},{"product":"thinkcentre_m610_firmware","vendor":"lenovo"},{"product":"thinkcentre_m625q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m630e_firmware","vendor":"lenovo"},{"product":"thinkcentre_m6600q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m6600s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m6600t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m700q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m70a_firmware","vendor":"lenovo"},{"product":"thinkcentre_m70a_gen_2_firmware","vendor":"lenovo"},{"product":"thinkcentre_m70c_firmware","vendor":"lenovo"},{"product":"thinkcentre_m70q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m70q_gen_2_firmware","vendor":"lenovo"},{"product":"thinkcentre_m70q_gen_3_firmware","vendor":"lenovo"},{"product":"thinkcentre_m70s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m70s_gen_3_firmware","vendor":"lenovo"},{"product":"thinkcentre_m70t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m70t_gen_3_firmware","vendor":"lenovo"},{"product":"thinkcentre_m710e_firmware","vendor":"lenovo"},{"product":"thinkcentre_m710q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m710s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m710t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m715q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m720e_firmware","vendor":"lenovo"},{"product":"thinkcentre_m75n_firmware","vendor":"lenovo"},{"product":"thinkcentre_m75q_gen_2_firmware","vendor":"lenovo"},{"product":"thinkcentre_m75s_gen_2_firmware","vendor":"lenovo"},{"product":"thinkcentre_m75t_gen_2_firmware","vendor":"lenovo"},{"product":"thinkcentre_m80q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m80s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m80t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m810z_all-in-one_firmware","vendor":"lenovo"},{"product":"thinkcentre_m818z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m820z_all-in-one_firmware","vendor":"lenovo"},{"product":"thinkcentre_m8600s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m8600t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m90a_firmware","vendor":"lenovo"},{"product":"thinkcentre_m90a_gen_2_firmware","vendor":"lenovo"},{"product":"thinkcentre_m90q_gen_2_firmware","vendor":"lenovo"},{"product":"thinkcentre_m90q_tiny_firmware","vendor":"lenovo"},{"product":"thinkcentre_m90s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m90t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m910q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m910s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m910t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m910x_firmware","vendor":"lenovo"},{"product":"thinkcentre_neo_50s_gen_3_firmware","vendor":"lenovo"},{"product":"thinkedge_se30_firmware","vendor":"lenovo"},{"product":"thinkpad_e14_firmware","vendor":"lenovo"},{"product":"thinkpad_e14_gen_2_firmware","vendor":"lenovo"},{"product":"thinkpad_e15_firmware","vendor":"lenovo"},{"product":"thinkpad_e15_gen_2_firmware","vendor":"lenovo"},{"product":"thinkpad_e490_firmware","vendor":"lenovo"},{"product":"thinkpad_e490s_firmware","vendor":"lenovo"},{"product":"thinkpad_e590_firmware","vendor":"lenovo"},{"product":"thinkpad_l13_firmware","vendor":"lenovo"},{"product":"thinkpad_l13_yoga_firmware","vendor":"lenovo"},{"product":"thinkpad_l14_firmware","vendor":"lenovo"},{"product":"thinkpad_l14_gen_2_firmware","vendor":"lenovo"},{"product":"thinkpad_l15_firmware","vendor":"lenovo"},{"product":"thinkpad_l15_gen_2_firmware","vendor":"lenovo"},{"product":"thinkpad_l390_firmware","vendor":"lenovo"},{"product":"thinkpad_l390_yoga_firmware","vendor":"lenovo"},{"product":"thinkpad_l490_firmware","vendor":"lenovo"},{"product":"thinkpad_l590_firmware","vendor":"lenovo"},{"product":"thinkpad_p14s_gen_1_firmware","vendor":"lenovo"},{"product":"thinkpad_p14s_gen_2_firmware","vendor":"lenovo"},{"product":"thinkpad_p15_gen_1_firmware","vendor":"lenovo"},{"product":"thinkpad_p15s_gen_1_firmware","vendor":"lenovo"},{"product":"thinkpad_p15s_gen_2_firmware","vendor":"lenovo"},{"product":"thinkpad_p15v_gen_1_firmware","vendor":"lenovo"},{"product":"thinkpad_p17_gen_1_firmware","vendor":"lenovo"},{"product":"thinkpad_p1_gen_1_firmware","vendor":"lenovo"},{"product":"thinkpad_p1_gen_2_firmware","vendor":"lenovo"},{"product":"thinkpad_p1_gen_3_firmware","vendor":"lenovo"},{"product":"thinkpad_p43s_firmware","vendor":"lenovo"},{"product":"thinkpad_p52_firmware","vendor":"lenovo"},{"product":"thinkpad_p53_firmware","vendor":"lenovo"},{"product":"thinkpad_p53s_firmware","vendor":"lenovo"},{"product":"thinkpad_p72_firmware","vendor":"lenovo"},{"product":"thinkpad_p73_firmware","vendor":"lenovo"},{"product":"thinkpad_r14_gen_2_firmware","vendor":"lenovo"},{"product":"thinkpad_s3_2nd_gen_firmware","vendor":"lenovo"},{"product":"thinkpad_t14_gen_1_firmware","vendor":"lenovo"},{"product":"thinkpad_t14_gen_2_firmware","vendor":"lenovo"},{"product":"thinkpad_t14s_firmware","vendor":"lenovo"},{"product":"thinkpad_t14s_gen_2_firmware","vendor":"lenovo"},{"product":"thinkpad_t15_firmware","vendor":"lenovo"},{"product":"thinkpad_t15_gen_2_firmware","vendor":"lenovo"},{"product":"thinkpad_t15g_gen_1_firmware","vendor":"lenovo"},{"product":"thinkpad_t15p_gen_1__firmware","vendor":"lenovo"},{"product":"thinkpad_t490_firmware","vendor":"lenovo"},{"product":"thinkpad_t490s_firmware","vendor":"lenovo"},{"product":"thinkpad_t590_firmware","vendor":"lenovo"},{"product":"thinkpad_x12_detachable_gen_1_firmware","vendor":"lenovo"},{"product":"thinkpad_x13_firmware","vendor":"lenovo"},{"product":"thinkpad_x13_gen_2_firmware","vendor":"lenovo"},{"product":"thinkpad_x13_yoga_gen_1_firmware","vendor":"lenovo"},{"product":"thinkpad_x13_yoga_gen_2_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_carbon_7th_gen_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_carbon_8th_gen_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_carbon_9th_gen_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_extreme_1st_gen_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_extreme_2nd_gen_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_extreme_3rd_gen_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_nano_gen_1_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_titanium_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_yoga_4th_gen_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_yoga_5th_gen_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_yoga_6th_gen_firmware","vendor":"lenovo"},{"product":"thinkpad_x390_firmware","vendor":"lenovo"},{"product":"thinkpad_x390_yoga_firmware","vendor":"lenovo"},{"product":"thinkserver_rd350_firmware","vendor":"lenovo"},{"product":"thinkserver_rd350g_firmware","vendor":"lenovo"},{"product":"thinkserver_rd450_firmware","vendor":"lenovo"},{"product":"thinkserver_rd550_firmware","vendor":"lenovo"},{"product":"thinkserver_rd650_firmware","vendor":"lenovo"},{"product":"thinkserver_rs160_firmware","vendor":"lenovo"},{"product":"thinkserver_rs260_firmware","vendor":"lenovo"},{"product":"thinkserver_sd350_firmware","vendor":"lenovo"},{"product":"thinkserver_sr588_firmware","vendor":"lenovo"},{"product":"thinkserver_sr590_firmware","vendor":"lenovo"},{"product":"thinkserver_sr860p_firmware","vendor":"lenovo"},{"product":"thinkserver_td350_firmware","vendor":"lenovo"},{"product":"thinkserver_ts150_firmware","vendor":"lenovo"},{"product":"thinkserver_ts250_firmware","vendor":"lenovo"},{"product":"thinkserver_ts450_firmware","vendor":"lenovo"},{"product":"thinkserver_ts460_firmware","vendor":"lenovo"},{"product":"thinkserver_ts550_firmware","vendor":"lenovo"},{"product":"thinkserver_ts560_firmware","vendor":"lenovo"},{"product":"thinksmart_hub_500_firmware","vendor":"lenovo"},{"product":"thinksmart_hub_teams_firmware","vendor":"lenovo"},{"product":"thinksmart_hub_zoom_firmware","vendor":"lenovo"},{"product":"thinkstation_p310_firmware","vendor":"lenovo"},{"product":"thinkstation_p318_firmware","vendor":"lenovo"},{"product":"thinkstation_p320_tiny_firmware","vendor":"lenovo"},{"product":"thinkstation_p340_firmware","vendor":"lenovo"},{"product":"thinkstation_p340_tiny_firmware","vendor":"lenovo"},{"product":"thinkstation_p348_firmware","vendor":"lenovo"},{"product":"thinkstation_p350_firmware","vendor":"lenovo"},{"product":"thinkstation_p350_tiny_firmware","vendor":"lenovo"},{"product":"thinkstation_p520_firmware","vendor":"lenovo"},{"product":"thinkstation_p520c_firmware","vendor":"lenovo"},{"product":"thinkstation_p620_firmware","vendor":"lenovo"},{"product":"thinksystem_dn8836_firmware","vendor":"lenovo"},{"product":"thinksystem_dx1100u_firmware","vendor":"lenovo"},{"product":"thinksystem_dx8200d_firmware","vendor":"lenovo"},{"product":"thinksystem_hr610x_firmware","vendor":"lenovo"},{"product":"thinksystem_hr630x_firmware","vendor":"lenovo"},{"product":"thinksystem_hr650x_firmware","vendor":"lenovo"},{"product":"thinksystem_sd530_firmware","vendor":"lenovo"},{"product":"thinksystem_sd630_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_sd650-n_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_sd650_dwc_dual_node_tray_firmware","vendor":"lenovo"},{"product":"thinksystem_sd650_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_se350_firmware","vendor":"lenovo"},{"product":"thinksystem_sn550_firmware","vendor":"lenovo"},{"product":"thinksystem_sn550_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_sn850_firmware","vendor":"lenovo"},{"product":"thinksystem_sr150_firmware","vendor":"lenovo"},{"product":"thinksystem_sr158_firmware","vendor":"lenovo"},{"product":"thinksystem_sr250_firmware","vendor":"lenovo"},{"product":"thinksystem_sr250_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_sr258_firmware","vendor":"lenovo"},{"product":"thinksystem_sr258_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_sr530_firmware","vendor":"lenovo"},{"product":"thinksystem_sr550_firmware","vendor":"lenovo"},{"product":"thinksystem_sr570_firmware","vendor":"lenovo"},{"product":"thinksystem_sr590_firmware","vendor":"lenovo"},{"product":"thinksystem_sr630_firmware","vendor":"lenovo"},{"product":"thinksystem_sr630_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_sr645_firmware","vendor":"lenovo"},{"product":"thinksystem_sr650_firmware","vendor":"lenovo"},{"product":"thinksystem_sr650_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_sr665_firmware","vendor":"lenovo"},{"product":"thinksystem_sr670_firmware","vendor":"lenovo"},{"product":"thinksystem_sr670_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_sr850_firmware","vendor":"lenovo"},{"product":"thinksystem_sr850_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_sr850p_firmware","vendor":"lenovo"},{"product":"thinksystem_sr860_firmware","vendor":"lenovo"},{"product":"thinksystem_sr860_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_sr950_firmware","vendor":"lenovo"},{"product":"thinksystem_st250_firmware","vendor":"lenovo"},{"product":"thinksystem_st250_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_st258_firmware","vendor":"lenovo"},{"product":"thinksystem_st258_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_st50_firmware","vendor":"lenovo"},{"product":"thinksystem_st550_firmware","vendor":"lenovo"},{"product":"thinksystem_st558_firmware","vendor":"lenovo"},{"product":"thinksystem_st58_firmware","vendor":"lenovo"},{"product":"thinksystem_st650_v2_firmware","vendor":"lenovo"},{"product":"thinksystem_st658_v2_firmware","vendor":"lenovo"},{"product":"v30a-22iml_firmware","vendor":"lenovo"},{"product":"v30a-24iml_firmware","vendor":"lenovo"},{"product":"v330-20icb_firmware","vendor":"lenovo"},{"product":"v35s-07ada_firmware","vendor":"lenovo"},{"product":"v50a-22imb_firmware","vendor":"lenovo"},{"product":"v50a-24imb_firmware","vendor":"lenovo"},{"product":"v50s-07imb_firmware","vendor":"lenovo"},{"product":"v50t-13imb_firmware","vendor":"lenovo"},{"product":"v50t-13iob_g2_firmware","vendor":"lenovo"},{"product":"v520_firmware","vendor":"lenovo"},{"product":"v520s_firmware","vendor":"lenovo"},{"product":"v530-15arr_firmware","vendor":"lenovo"},{"product":"v530-15icb_firmware","vendor":"lenovo"},{"product":"v530-15icr_firmware","vendor":"lenovo"},{"product":"v530-22icb_firmware","vendor":"lenovo"},{"product":"v530-24icb_firmware","vendor":"lenovo"},{"product":"v530s-07icb_firmware","vendor":"lenovo"},{"product":"v530s-07icr_firmware","vendor":"lenovo"},{"product":"v540-24iwl_firmware","vendor":"lenovo"},{"product":"v55t_gen_2_13acn_firmware","vendor":"lenovo"},{"product":"yangtian_afq150_firmware","vendor":"lenovo"},{"product":"yoga_a940-27icb_firmware","vendor":"lenovo"},{"product":"yta8900f_firmware","vendor":"lenovo"}],"cvss":{"score":4.4,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"cwes":[{"id":"CWE-125","name":"Out-of-bounds Read"}],"description":"An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Information disclosure in BIOS","id":"CVE-2022-40134","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"information_disclosure","year":"2022"},"n_packages":0,"n_references":1,"next":{"headline":"Information disclosure in BIOS","id":"CVE-2022-40135"},"packages":[],"prev":{"headline":"There is an UAF vulnerability in vmwgfx driver","id":"CVE-2022-40133"},"products":["BIOS"],"published":"2023-01-30","related":[{"cvss_score":6.7,"headline":"Memory corruption in Desktop BIOS","id":"CVE-2023-43567","kev_date_added":null,"published":"2023-11-08"},{"cvss_score":6.7,"headline":"Memory corruption in Desktop BIOS","id":"CVE-2023-43569","kev_date_added":null,"published":"2023-11-08"},{"cvss_score":6.7,"headline":"Code injection in Desktop BIOS","id":"CVE-2023-43570","kev_date_added":null,"published":"2023-11-08"},{"cvss_score":6.7,"headline":"Memory corruption in Desktop BIOS","id":"CVE-2023-43571","kev_date_added":null,"published":"2023-11-08"},{"cvss_score":6.7,"headline":"Memory corruption in Desktop BIOS","id":"CVE-2023-43573","kev_date_added":null,"published":"2023-11-08"},{"cvss_score":6.7,"headline":"Memory corruption in Desktop BIOS","id":"CVE-2023-43575","kev_date_added":null,"published":"2023-11-08"},{"cvss_score":6.7,"headline":"Memory corruption in Desktop BIOS","id":"CVE-2023-43576","kev_date_added":null,"published":"2023-11-08"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2025-03-27","vendors":["Lenovo"]},"summary":"Local attackers with elevated privileges can read SMM memory via a BIOS handler flaw, exposing sensitive system data.","url":"https://insights.sbomify.com/CVE-2022-40134/"}