{"id":"CVE-2022-40135","aliases":["EUVD-2022-43453","GHSA-rwwv-hvjg-wcrp"],"status":"published","title":"An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models...","description":"An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00196,"percentile":0.09332,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2023-01-30T21:20:33Z","modified":"2026-06-17T05:01:00Z","products":[{"vendor":"lenovo","product":"bios"},{"vendor":"lenovo","product":"ideacentre_3-07ada05_firmware"},{"vendor":"lenovo","product":"ideacentre_3-07imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_3_07iab7_firmware"},{"vendor":"lenovo","product":"ideacentre_5-14acn6_firmware"},{"vendor":"lenovo","product":"ideacentre_5-14are05_firmware"},{"vendor":"lenovo","product":"ideacentre_5-14imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_5-14iob6_firmware"},{"vendor":"lenovo","product":"ideacentre_510-15ick_firmware"},{"vendor":"lenovo","product":"ideacentre_510a-15arr_firmware"},{"vendor":"lenovo","product":"ideacentre_510a-15ick_firmware"},{"vendor":"lenovo","product":"ideacentre_510s-07icb_firmware"},{"vendor":"lenovo","product":"ideacentre_510s-07ick_firmware"},{"vendor":"lenovo","product":"ideacentre_5_14iab7_firmware"},{"vendor":"lenovo","product":"ideacentre_720-18apr_firmware"},{"vendor":"lenovo","product":"ideacentre_a340-22igm_firmware"},{"vendor":"lenovo","product":"ideacentre_a340-24igm_firmware"},{"vendor":"lenovo","product":"ideacentre_c5-14imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_creator_5-14iob6_firmware"},{"vendor":"lenovo","product":"ideacentre_g5-14amr05_firmware"},{"vendor":"lenovo","product":"ideacentre_g5-14imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_gaming_5-14acn6_firmware"},{"vendor":"lenovo","product":"ideacentre_gaming_5-14iob6_firmware"},{"vendor":"lenovo","product":"ideacentre_gaming_5_17acn7_firmware"},{"vendor":"lenovo","product":"ideacentre_gaming_5_17iab7_firmware"},{"vendor":"lenovo","product":"ideacentre_t540-15ama_g_firmware"},{"vendor":"lenovo","product":"ideacentre_t540-15ick_firmware"},{"vendor":"lenovo","product":"legion_c530-19icb_firmware"},{"vendor":"lenovo","product":"legion_t5-26iob6_firmware"},{"vendor":"lenovo","product":"legion_t5-28icb05_firmware"},{"vendor":"lenovo","product":"legion_t530-28apr_firmware"},{"vendor":"lenovo","product":"legion_t530-28icb_firmware"},{"vendor":"lenovo","product":"legion_t7-34imz5_firmware"},{"vendor":"lenovo","product":"qitian_a815_firmware"},{"vendor":"lenovo","product":"qt_b415_firmware"},{"vendor":"lenovo","product":"qt_m410_firmware"},{"vendor":"lenovo","product":"qt_m415_firmware"},{"vendor":"lenovo","product":"stadia_ggp-120_firmware"},{"vendor":"lenovo","product":"thinkcentre_e75_t\\/s_firmware"},{"vendor":"lenovo","product":"thinkcentre_e96z_firmware"},{"vendor":"lenovo","product":"thinkcentre_m60e_tiny_firmware"},{"vendor":"lenovo","product":"thinkcentre_m610_firmware"},{"vendor":"lenovo","product":"thinkcentre_m625q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m630e_firmware"},{"vendor":"lenovo","product":"thinkcentre_m6600q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m6600s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m6600t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70a_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70a_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70c_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70q_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70q_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70s_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70t_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m710e_firmware"},{"vendor":"lenovo","product":"thinkcentre_m710q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m710s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m710t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m715q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m715t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m720e_firmware"},{"vendor":"lenovo","product":"thinkcentre_m720q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m720s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m720t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m725s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m75n_firmware"},{"vendor":"lenovo","product":"thinkcentre_m75q-1_firmware"},{"vendor":"lenovo","product":"thinkcentre_m75q_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m75s-1_firmware"},{"vendor":"lenovo","product":"thinkcentre_m75s_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m75t_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m80q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m810z_firmware"},{"vendor":"lenovo","product":"thinkcentre_m818z_firmware"},{"vendor":"lenovo","product":"thinkcentre_m820z_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90a_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90a_gen2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90q_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90q_tiny_firmware"},{"vendor":"lenovo","product":"thinkcentre_m910q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m910s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m910t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m910x_firmware"},{"vendor":"lenovo","product":"thinkcentre_m920q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m920s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m920t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m920x_firmware"},{"vendor":"lenovo","product":"thinkcentre_neo_50s_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_neo_50t_gen_3_firmware"},{"vendor":"lenovo","product":"thinkedge_se30_firmware"},{"vendor":"lenovo","product":"thinksmart_core_\\\u0026_controller_full_room_kit\\"},{"vendor":"lenovo","product":"thinksmart_core_\\\u0026_controller_kit\\"},{"vendor":"lenovo","product":"thinksmart_core_device\\"},{"vendor":"lenovo","product":"thinksmart_core_device_for_logitech_firmware"},{"vendor":"lenovo","product":"thinksmart_core_device_for_poly_firmware"},{"vendor":"lenovo","product":"thinksmart_hub_teams_firmware"},{"vendor":"lenovo","product":"thinksmart_hub_zoom_firmware"},{"vendor":"lenovo","product":"thinkstation_p310_firmware"},{"vendor":"lenovo","product":"thinkstation_p318_firmware"},{"vendor":"lenovo","product":"thinkstation_p320_tiny_firmware"},{"vendor":"lenovo","product":"thinkstation_p330_tiny_firmware"},{"vendor":"lenovo","product":"thinkstation_p340_firmware"},{"vendor":"lenovo","product":"thinkstation_p340_tiny_firmware"},{"vendor":"lenovo","product":"thinkstation_p348_firmware"},{"vendor":"lenovo","product":"thinkstation_p350_firmware"},{"vendor":"lenovo","product":"thinkstation_p350_tiny_firmware"},{"vendor":"lenovo","product":"thinkstation_p520_firmware"},{"vendor":"lenovo","product":"thinkstation_p520c_firmware"},{"vendor":"lenovo","product":"thinkstation_p620_firmware"},{"vendor":"lenovo","product":"thinksystem_st50_firmware"},{"vendor":"lenovo","product":"thinksystem_st58_firmware"},{"vendor":"lenovo","product":"v30a-22iml_firmware"},{"vendor":"lenovo","product":"v30a-24iml_firmware"},{"vendor":"lenovo","product":"v330-20icb_firmware"},{"vendor":"lenovo","product":"v35s-07ada_firmware"},{"vendor":"lenovo","product":"v50a-22imb_firmware"},{"vendor":"lenovo","product":"v50a-24imb_firmware"},{"vendor":"lenovo","product":"v50s-07imb_firmware"},{"vendor":"lenovo","product":"v50t-13imb_firmware"},{"vendor":"lenovo","product":"v50t-13iob_g2_firmware"},{"vendor":"lenovo","product":"v520_firmware"},{"vendor":"lenovo","product":"v520s_firmware"},{"vendor":"lenovo","product":"v530-15arr_firmware"},{"vendor":"lenovo","product":"v530-15icb_firmware"},{"vendor":"lenovo","product":"v530-15icr_firmware"},{"vendor":"lenovo","product":"v530-22icb_firmware"},{"vendor":"lenovo","product":"v530-24icb_firmware"},{"vendor":"lenovo","product":"v530s-07icb_firmware"},{"vendor":"lenovo","product":"v530s-07icr_firmware"},{"vendor":"lenovo","product":"v540-24iwl_firmware"},{"vendor":"lenovo","product":"v55t-15api_firmware"},{"vendor":"lenovo","product":"v55t-15are_firmware"},{"vendor":"lenovo","product":"v55t_gen_2_13acn_firmware"},{"vendor":"lenovo","product":"yangtian_afq150_firmware"},{"vendor":"lenovo","product":"yoga_a940-27icb_firmware"},{"vendor":"lenovo","product":"yta8900f_firmware"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-94953","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40135"},{"url":"https://github.com/advisories/GHSA-rwwv-hvjg-wcrp"}],"sources":{"cve":[{"id":"CVE-2022-40135","description":"An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.","status":"published","published":"2023-01-30T21:20:33.347Z","modified":"2025-03-27T15:26:04.196Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:34:30.493103Z"}],"euvd":[{"id":"EUVD-2022-43453","description":"An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.","status":"published","published":"2023-01-30T21:20:33Z","modified":"2025-03-27T15:26:04Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:49.499517Z"}],"ghsa":[{"id":"GHSA-rwwv-hvjg-wcrp","title":"An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models...","description":"An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.","status":"published","published":"2023-01-31T00:30:18Z","modified":"2023-02-22T05:07:18Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:54:12.981837Z"}],"nvd":[{"id":"CVE-2022-40135","description":"An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.","status":"published","published":"2023-01-30T22:15:12.257Z","modified":"2026-06-17T05:01:00.143Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:35.561816Z"}]}}