CVE-2022-40137

MEDIUM

Lenovo Ideacentre C5-14imb05 Firmware - Buffer Overflow

Title source: rule

Description

A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.

References (1)

Core 1

Core References

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-94953

Scores

CVSS v3 6.7

EPSS 0.0005

EPSS Percentile 15.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-120

Status published

Products (50)

lenovo/ideacentre_3-07ada05_firmware o4fkt33a

lenovo/ideacentre_3-07imb05_firmware m2vkt1fa

lenovo/ideacentre_3_07iab7_firmware m49kt1da

lenovo/ideacentre_5-14acn6_firmware o5ekt23a

lenovo/ideacentre_5-14are05_firmware o4zkt29a

lenovo/ideacentre_5-14imb05_firmware o4hkt3aa

lenovo/ideacentre_5-14iob6_firmware m3gkt38a

lenovo/ideacentre_510-15ick_firmware o4kkt16a

lenovo/ideacentre_510a-15arr_firmware o4dkt44a

lenovo/ideacentre_510a-15ick_firmware o4kkt16a

... and 40 more

Published Jan 30, 2023

Tracked Since Feb 18, 2026