CVE-2022-40134CWE-125

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated…

Medium · published January 30, 2023

CVSS v3.1
4.4
EPSS
0%
Percentile
8.7
In the wild
Unconfirmed
What it is

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.7th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2023-01-30T21:20Z
EPSS history
Timeline
  • 30 JAN 21:20Z
    An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated…
    cvelistv5