{"answers":{"affected":"It affects 287 products.","exploited":"There is no known exploitation of CVE-2022-40137 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2022-40137 yet. Limit exposure of the affected software until one is available.","what":"CVE-2022-40137 is a medium-severity memory corruption vulnerability in Lenovo BIOS, published on 30 Jan 2023. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2022-40137 and fix it if it is affected.\n\nWhat it is: CVE-2022-40137 is a medium-severity memory corruption vulnerability in Lenovo BIOS, published on 30 Jan 2023. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2022-40137 in the wild and no public exploit code.\n\nAffected product: Lenovo BIOS. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2022-40137/ (Markdown: https://insights.sbomify.com/CVE-2022-40137/index.md)","id":"CVE-2022-40137","markdown":"https://insights.sbomify.com/CVE-2022-40137/index.md","name":"CVE-2022-40137","record":{"aliases":["GHSA-wqx8-q4r7-4c45"],"analysis":{"component_type":"hardware_firmware","fix_type":"patch","impacts":["code_execution","privilege_escalation"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Lenovo BIOS","requires_auth":"high_privilege","summary":"Local attackers with elevated privileges can execute arbitrary code via a buffer overflow in the Lenovo BIOS WMI SMI Handler.","user_interaction":"not_required","vuln_class":"memory_corruption"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"lenovo","cpe":[{"product":"ideacentre_3-07ada05_firmware","vendor":"lenovo"},{"product":"ideacentre_3-07imb05_firmware","vendor":"lenovo"},{"product":"ideacentre_3_07iab7_firmware","vendor":"lenovo"},{"product":"ideacentre_5-14acn6_firmware","vendor":"lenovo"},{"product":"ideacentre_5-14are05_firmware","vendor":"lenovo"},{"product":"ideacentre_5-14imb05_firmware","vendor":"lenovo"},{"product":"ideacentre_5-14iob6_firmware","vendor":"lenovo"},{"product":"ideacentre_510-15ick_firmware","vendor":"lenovo"},{"product":"ideacentre_510a-15arr_firmware","vendor":"lenovo"},{"product":"ideacentre_510a-15ick_firmware","vendor":"lenovo"},{"product":"ideacentre_510s-07icb_firmware","vendor":"lenovo"},{"product":"ideacentre_510s-07ick_firmware","vendor":"lenovo"},{"product":"ideacentre_5_14iab7_firmware","vendor":"lenovo"},{"product":"ideacentre_720-18apr_firmware","vendor":"lenovo"},{"product":"ideacentre_a340-22ast_all-in-one_firmware","vendor":"lenovo"},{"product":"ideacentre_a340-22icb_all-in-one_firmware","vendor":"lenovo"},{"product":"ideacentre_a340-22ick_all-in-one_firmware","vendor":"lenovo"},{"product":"ideacentre_a340-22igm_all-in-one_firmware","vendor":"lenovo"},{"product":"ideacentre_a340-22iwl_all-in-one_firmware","vendor":"lenovo"},{"product":"ideacentre_a340-24icb_all-in-one_firmware","vendor":"lenovo"},{"product":"ideacentre_a340-24ick_all-in-one_firmware","vendor":"lenovo"},{"product":"ideacentre_a340-24igm_all-in-one_firmware","vendor":"lenovo"},{"product":"ideacentre_a340-24iwl_all-in-one_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-22ada05_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-22ada6_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-22iil5_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-22imb05_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-22itl6_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-24ada6_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-24alc6_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-24are05_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-24iil5_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-24imb05_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-24itl6_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-27alc6_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-27imb05_firmware","vendor":"lenovo"},{"product":"ideacentre_aio_3-27itl6_firmware","vendor":"lenovo"},{"product":"ideacentre_c5-14imb05_firmware","vendor":"lenovo"},{"product":"ideacentre_e96z_firmware","vendor":"lenovo"},{"product":"ideacentre_g5-14amr05_firmware","vendor":"lenovo"},{"product":"ideacentre_g5-14imb05_firmware","vendor":"lenovo"},{"product":"ideacentre_gaming_5-14acn6_firmware","vendor":"lenovo"},{"product":"ideacentre_gaming_5-14iob6_firmware","vendor":"lenovo"},{"product":"ideacentre_gaming_5_17acn7_firmware","vendor":"lenovo"},{"product":"ideacentre_gaming_5_17iab7_firmware","vendor":"lenovo"},{"product":"ideacentre_m60e_tiny_firmware","vendor":"lenovo"},{"product":"ideacentre_m625q_firmware","vendor":"lenovo"},{"product":"ideacentre_m630e_firmware","vendor":"lenovo"},{"product":"ideacentre_m700_tiny_firmware","vendor":"lenovo"},{"product":"ideacentre_m70a_firmware","vendor":"lenovo"},{"product":"ideacentre_m70a_gen_2_firmware","vendor":"lenovo"},{"product":"ideacentre_m70a_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_m70c_firmware","vendor":"lenovo"},{"product":"ideacentre_m70q_firmware","vendor":"lenovo"},{"product":"ideacentre_m70q_gen_2_firmware","vendor":"lenovo"},{"product":"ideacentre_m70q_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_m70s_firmware","vendor":"lenovo"},{"product":"ideacentre_m70s_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_m70t_firmware","vendor":"lenovo"},{"product":"ideacentre_m70t_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_m710e_firmware","vendor":"lenovo"},{"product":"ideacentre_m710q_firmware","vendor":"lenovo"},{"product":"ideacentre_m710s_firmware","vendor":"lenovo"},{"product":"ideacentre_m710t_firmware","vendor":"lenovo"},{"product":"ideacentre_m715q_2nd_gen_firmware","vendor":"lenovo"},{"product":"ideacentre_m715q_firmware","vendor":"lenovo"},{"product":"ideacentre_m715s_firmware","vendor":"lenovo"},{"product":"ideacentre_m715t_firmware","vendor":"lenovo"},{"product":"ideacentre_m720e_firmware","vendor":"lenovo"},{"product":"ideacentre_m720q_firmware","vendor":"lenovo"},{"product":"ideacentre_m720s_firmware","vendor":"lenovo"},{"product":"ideacentre_m720t_firmware","vendor":"lenovo"},{"product":"ideacentre_m725s_firmware","vendor":"lenovo"},{"product":"ideacentre_m75n_firmware","vendor":"lenovo"},{"product":"ideacentre_m75q-1_firmware","vendor":"lenovo"},{"product":"ideacentre_m75q_gen_2_firmware","vendor":"lenovo"},{"product":"ideacentre_m75s-1_firmware","vendor":"lenovo"},{"product":"ideacentre_m75s_gen_2_firmware","vendor":"lenovo"},{"product":"ideacentre_m75t_gen_2_firmware","vendor":"lenovo"},{"product":"ideacentre_m800_firmware","vendor":"lenovo"},{"product":"ideacentre_m80q_firmware","vendor":"lenovo"},{"product":"ideacentre_m80q_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_m80s_firmware","vendor":"lenovo"},{"product":"ideacentre_m80s_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_m80t_firmware","vendor":"lenovo"},{"product":"ideacentre_m80t_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_m810z_all-in-one_firmware","vendor":"lenovo"},{"product":"ideacentre_m818z_firmware","vendor":"lenovo"},{"product":"ideacentre_m820z_all-in-one_firmware","vendor":"lenovo"},{"product":"ideacentre_m900_firmware","vendor":"lenovo"},{"product":"ideacentre_m900x_firmware","vendor":"lenovo"},{"product":"ideacentre_m90a_firmware","vendor":"lenovo"},{"product":"ideacentre_m90a_gen_2_firmware","vendor":"lenovo"},{"product":"ideacentre_m90a_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_m90q_gen_2_firmware","vendor":"lenovo"},{"product":"ideacentre_m90q_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_m90q_tiny_firmware","vendor":"lenovo"},{"product":"ideacentre_m90s_firmware","vendor":"lenovo"},{"product":"ideacentre_m90s_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_m90t_firmware","vendor":"lenovo"},{"product":"ideacentre_m90t_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_m910q_firmware","vendor":"lenovo"},{"product":"ideacentre_m910s_firmware","vendor":"lenovo"},{"product":"ideacentre_m910t_firmware","vendor":"lenovo"},{"product":"ideacentre_m910x_firmware","vendor":"lenovo"},{"product":"ideacentre_m920q_firmware","vendor":"lenovo"},{"product":"ideacentre_m920s_firmware","vendor":"lenovo"},{"product":"ideacentre_m920t_firmware","vendor":"lenovo"},{"product":"ideacentre_m920x_firmware","vendor":"lenovo"},{"product":"ideacentre_mini_5-01imh05_firmware","vendor":"lenovo"},{"product":"ideacentre_neo_50s_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_neo_50t_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_neo_70t_gen_3_firmware","vendor":"lenovo"},{"product":"ideacentre_t540-15ama_g_firmware","vendor":"lenovo"},{"product":"ideacentre_t540-15ick_firmware","vendor":"lenovo"},{"product":"legion_c530-19icb_firmware","vendor":"lenovo"},{"product":"legion_t5-26iob6_firmware","vendor":"lenovo"},{"product":"legion_t5-28icb05_firmware","vendor":"lenovo"},{"product":"legion_t530-28apr_firmware","vendor":"lenovo"},{"product":"legion_t530-28icb_firmware","vendor":"lenovo"},{"product":"legion_t7-34imz5_firmware","vendor":"lenovo"},{"product":"n3310_storage_firmware","vendor":"lenovo"},{"product":"n4610_storage_firmware","vendor":"lenovo"},{"product":"qitian_a815_firmware","vendor":"lenovo"},{"product":"qt_b415_firmware","vendor":"lenovo"},{"product":"qt_m410_firmware","vendor":"lenovo"},{"product":"qt_m415_firmware","vendor":"lenovo"},{"product":"thinkagile_hx1021_edg_firmware","vendor":"lenovo"},{"product":"thinkagile_hx1320_firmware","vendor":"lenovo"},{"product":"thinkagile_hx1321_firmware","vendor":"lenovo"},{"product":"thinkagile_hx1331_firmware","vendor":"lenovo"},{"product":"thinkagile_hx1520-r_firmware","vendor":"lenovo"},{"product":"thinkagile_hx1521-r_firmware","vendor":"lenovo"},{"product":"thinkagile_hx2320-e_firmware","vendor":"lenovo"},{"product":"thinkagile_hx2320_firmware","vendor":"lenovo"},{"product":"thinkagile_hx2321_firmware","vendor":"lenovo"},{"product":"thinkagile_hx2330_firmware","vendor":"lenovo"},{"product":"thinkagile_hx2331_firmware","vendor":"lenovo"},{"product":"thinkagile_hx2720-e_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3320_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3321_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3330_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3331_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3375_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3376_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3520-g_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3521-g_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3720_firmware","vendor":"lenovo"},{"product":"thinkagile_hx3721_firmware","vendor":"lenovo"},{"product":"thinkagile_hx5520-c_firmware","vendor":"lenovo"},{"product":"thinkagile_hx5520_firmware","vendor":"lenovo"},{"product":"thinkagile_hx5521-c_firmware","vendor":"lenovo"},{"product":"thinkagile_hx5521_firmware","vendor":"lenovo"},{"product":"thinkagile_hx5530_firmware","vendor":"lenovo"},{"product":"thinkagile_hx5531_firmware","vendor":"lenovo"},{"product":"thinkagile_hx7520_firmware","vendor":"lenovo"},{"product":"thinkagile_hx7521_firmware","vendor":"lenovo"},{"product":"thinkagile_hx7530_firmware","vendor":"lenovo"},{"product":"thinkagile_hx7531_firmware","vendor":"lenovo"},{"product":"thinkagile_hx7820_firmware","vendor":"lenovo"},{"product":"thinkagile_hx7821_firmware","vendor":"lenovo"},{"product":"thinkagile_mx-_all_flash_firmware","vendor":"lenovo"},{"product":"thinkagile_mx-_hybrid_firmware","vendor":"lenovo"},{"product":"thinkagile_mx1021_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3330-f_all-flash_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3330-h_hybrid_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3331-f_all-flash_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3331-h_hybrid_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3520_f-_all_flash__firmware","vendor":"lenovo"},{"product":"thinkagile_mx3520_h-_hybrid__firmware","vendor":"lenovo"},{"product":"thinkagile_mx3530-h_hybrid_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3530_f_all_flash_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3531-f_all-flash_firmware","vendor":"lenovo"},{"product":"thinkagile_mx3531_h_hybrid_firmware","vendor":"lenovo"},{"product":"thinkagile_mx_1u_-_mx3321_f__firmware","vendor":"lenovo"},{"product":"thinkagile_mx_1u_-_mx3321_h__firmware","vendor":"lenovo"},{"product":"thinkagile_mx_edge-_mx1020__firmware","vendor":"lenovo"},{"product":"thinkagile_vx1320__firmware","vendor":"lenovo"},{"product":"thinkagile_vx2320__firmware","vendor":"lenovo"},{"product":"thinkagile_vx2330_firmware","vendor":"lenovo"},{"product":"thinkagile_vx3320__firmware","vendor":"lenovo"},{"product":"thinkagile_vx3330_firmware","vendor":"lenovo"},{"product":"thinkagile_vx3331_firmware","vendor":"lenovo"},{"product":"thinkagile_vx3520-g__firmware","vendor":"lenovo"},{"product":"thinkagile_vx3530-g_firmware","vendor":"lenovo"},{"product":"thinkagile_vx3720__firmware","vendor":"lenovo"},{"product":"thinkagile_vx5520__firmware","vendor":"lenovo"},{"product":"thinkagile_vx5530_firmware","vendor":"lenovo"},{"product":"thinkagile_vx7320_n__firmware","vendor":"lenovo"},{"product":"thinkagile_vx7330_firmware","vendor":"lenovo"},{"product":"thinkagile_vx7520__firmware","vendor":"lenovo"},{"product":"thinkagile_vx7520_n__firmware","vendor":"lenovo"},{"product":"thinkagile_vx7530_firmware","vendor":"lenovo"},{"product":"thinkagile_vx7531_firmware","vendor":"lenovo"},{"product":"thinkagile_vx7820__firmware","vendor":"lenovo"},{"product":"thinkagile_vx_1se_firmware","vendor":"lenovo"},{"product":"thinkagile_vx_1u_firmware","vendor":"lenovo"},{"product":"thinkagile_vx_2u4n_firmware","vendor":"lenovo"},{"product":"thinkagile_vx_2u_firmware","vendor":"lenovo"},{"product":"thinkagile_vx_4u_firmware","vendor":"lenovo"},{"product":"thinkcentre_e75s_firmware","vendor":"lenovo"},{"product":"thinkcentre_e75t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m610_firmware","vendor":"lenovo"},{"product":"thinkcentre_m6600q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m6600s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m6600t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m700q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m8600s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m8600t_firmware","vendor":"lenovo"},{"product":"thinkedge_se30_firmware","vendor":"lenovo"},{"product":"thinkserver_rd350_firmware","vendor":"lenovo"},{"product":"thinkserver_rd350g_firmware","vendor":"lenovo"},{"product":"thinkserver_rd450_firmware","vendor":"lenovo"},{"product":"thinkserver_rd550_firmware","vendor":"lenovo"},{"product":"thinkserver_rd650_firmware","vendor":"lenovo"},{"product":"thinkserver_rs160_firmware","vendor":"lenovo"},{"product":"thinkserver_rs260_firmware","vendor":"lenovo"},{"product":"thinkserver_sd350_firmware","vendor":"lenovo"},{"product":"thinkserver_sr588_firmware","vendor":"lenovo"},{"product":"thinkserver_sr590_firmware","vendor":"lenovo"},{"product":"thinkserver_sr860p_firmware","vendor":"lenovo"},{"product":"thinkserver_td350_firmware","vendor":"lenovo"},{"product":"thinkserver_ts150_firmware","vendor":"lenovo"},{"product":"thinkserver_ts250_firmware","vendor":"lenovo"},{"product":"thinkserver_ts450_firmware","vendor":"lenovo"},{"product":"thinkserver_ts460_firmware","vendor":"lenovo"},{"product":"thinkserver_ts550_firmware","vendor":"lenovo"},{"product":"thinkserver_ts560_firmware","vendor":"lenovo"},{"product":"thinksmart_core_\\\u0026_controller_full_room_kit\\","vendor":"lenovo"},{"product":"thinksmart_core_\\\u0026_controller_kit\\","vendor":"lenovo"},{"product":"thinksmart_core_device\\","vendor":"lenovo"},{"product":"thinksmart_core_device_for_logitech_firmware","vendor":"lenovo"},{"product":"thinksmart_core_device_for_poly_firmware","vendor":"lenovo"},{"product":"thinksmart_hub_500_firmware","vendor":"lenovo"},{"product":"thinksmart_hub_teams_firmware","vendor":"lenovo"},{"product":"thinksmart_hub_zoom_firmware","vendor":"lenovo"},{"product":"thinkstation_p310_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p320_tiny_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p320_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p330_tiny_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p330_workstation_2nd_gen_firmware","vendor":"lenovo"},{"product":"thinkstation_p330_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p340_tiny_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p340_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p348_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p350_tiny_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p350_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p360_tiny_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p520_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p520c_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p620_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p720_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_p920_workstation_firmware","vendor":"lenovo"},{"product":"thinkstation_stadia_ggp-120_firmware","vendor":"lenovo"},{"product":"thinkstation_thinkstation_p318_firmware","vendor":"lenovo"},{"product":"thinksystem_dx1100u_firmware","vendor":"lenovo"},{"product":"thinksystem_dx8200d_firmware","vendor":"lenovo"},{"product":"thinksystem_hr610x_firmware","vendor":"lenovo"},{"product":"thinksystem_hr630x_firmware","vendor":"lenovo"},{"product":"thinksystem_hr650x_firmware","vendor":"lenovo"},{"product":"thinksystem_st50_firmware","vendor":"lenovo"},{"product":"thinksystem_st58_firmware","vendor":"lenovo"},{"product":"v30a-22iml_firmware","vendor":"lenovo"},{"product":"v30a-24iml_firmware","vendor":"lenovo"},{"product":"v330-20icb_all-in-one_firmware","vendor":"lenovo"},{"product":"v35s-07ada_firmware","vendor":"lenovo"},{"product":"v50a-22imb_firmware","vendor":"lenovo"},{"product":"v50a-24imb_firmware","vendor":"lenovo"},{"product":"v50s-07imb_firmware","vendor":"lenovo"},{"product":"v50t-13imb_firmware","vendor":"lenovo"},{"product":"v50t-13iob_g2_firmware","vendor":"lenovo"},{"product":"v520_firmware","vendor":"lenovo"},{"product":"v520s_firmware","vendor":"lenovo"},{"product":"v530-15arr_firmware","vendor":"lenovo"},{"product":"v530-15icb_firmware","vendor":"lenovo"},{"product":"v530-15icr_firmware","vendor":"lenovo"},{"product":"v530-22icb_all-in-one_firmware","vendor":"lenovo"},{"product":"v530-24icb_all-in-one_firmware","vendor":"lenovo"},{"product":"v530s-07icb_firmware","vendor":"lenovo"},{"product":"v530s-07icr_firmware","vendor":"lenovo"},{"product":"v540-24iwl_all-in-one_firmware","vendor":"lenovo"},{"product":"v55t-15api_firmware","vendor":"lenovo"},{"product":"v55t-15are_firmware","vendor":"lenovo"},{"product":"v55t_gen_2_13acn_firmware","vendor":"lenovo"},{"product":"yangtian_afq150_firmware","vendor":"lenovo"},{"product":"yoga_a940-27icb_all-in-one_firmware","vendor":"lenovo"},{"product":"yta8900f_firmware","vendor":"lenovo"}],"cvss":{"score":6.7,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"cwes":[{"id":"CWE-120","name":"Buffer Copy without Checking Size of Input"}],"description":"A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Memory corruption in BIOS","id":"CVE-2022-40137","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"memory_corruption","year":"2022"},"n_packages":0,"n_references":1,"next":{"headline":"Integer overflow in Hermes","id":"CVE-2022-40138"},"packages":[],"prev":{"headline":"Information disclosure in BIOS","id":"CVE-2022-40136"},"products":["BIOS"],"published":"2023-01-30","related":[{"cvss_score":6.7,"headline":"Memory corruption in Desktop BIOS","id":"CVE-2023-43567","kev_date_added":null,"published":"2023-11-08"},{"cvss_score":6.7,"headline":"Memory corruption in Desktop BIOS","id":"CVE-2023-43569","kev_date_added":null,"published":"2023-11-08"},{"cvss_score":6.7,"headline":"Code injection in Desktop BIOS","id":"CVE-2023-43570","kev_date_added":null,"published":"2023-11-08"},{"cvss_score":6.7,"headline":"Memory corruption in Desktop BIOS","id":"CVE-2023-43571","kev_date_added":null,"published":"2023-11-08"},{"cvss_score":6.7,"headline":"Memory corruption in Desktop BIOS","id":"CVE-2023-43573","kev_date_added":null,"published":"2023-11-08"},{"cvss_score":6.7,"headline":"Memory corruption in Desktop BIOS","id":"CVE-2023-43575","kev_date_added":null,"published":"2023-11-08"},{"cvss_score":6.7,"headline":"Memory corruption in Desktop BIOS","id":"CVE-2023-43576","kev_date_added":null,"published":"2023-11-08"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"total"},"state":"PUBLISHED","updated":"2025-03-27","vendors":["Lenovo"]},"summary":"Local attackers with elevated privileges can execute arbitrary code via a buffer overflow in the Lenovo BIOS WMI SMI Handler.","url":"https://insights.sbomify.com/CVE-2022-40137/"}