{"uuid": "103c3e35-2830-4108-8018-998e8c6e830e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40136", "type": "seen", "source": "https://t.me/hacking_Attack/69180", "content": "Kali Linux Tutorials\nCVE-2022-40137: High-Severity BIOS Security Flaw in Lenovo devices\n\nFour additional BIOS-related vulnerabilities have recently been discovered, according to a new security advisory from Lenovo. Attackers can use these flaws to allow information exposure, denial of service, or privilege escalation. The first of the bugs, identified as CVE-2022-40137, affects the WMI SMI Handler function and affects the Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models. It could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.\n\nThe three problems, identified as CVE-2022-40134, CVE-2022-40135, and CVE-2022-40136, are all related to information leak vulnerabilities that, according to Lenovo, might allow users on vulnerable computers to gain access to read SMM memory.\n\nSMI Set BIOS Password SMI Handler and Smart USB Protection both contain vulnerabilities. In some Lenovo models, SMI Handler and SMI Handler are used to configure platform parameters via WMI. This time, Lenovo addressed four vulnerabilities, with CVE-2022-40137 having the highest priority. Threats to the UEFI (BIOS) system can be very hazardous and covert. Because they are run early in the boot process, before the operating system takes over, they are able to get around practically all security precautions and mitigations higher in the stack that may prevent their OS payloads from being executed. To reduce potential dangers, users of vulnerable devices are strongly advised to upgrade their firmware.\nDownload\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:24.349837Z"}