CVE-2022-40136CWE-125

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and…

Medium · published January 30, 2023

CVSS v3.1
4.4
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.8th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2023-01-30T21:20Z
EPSS history
Timeline
  • 30 JAN 21:20Z
    An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and…
    cvelistv5