Attacker Value

Unknown

CVE-2022-40134

CVE ID

AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:

CVE ID:

Add References:

Advisory

Description: URL:

Add Another

Exploit

Description: URL:

Add Another

Mitigation

Description: URL:

Add Another

Government or Industry Alert

Description: URL:

Add Another

Miscellaneous

Description: URL:

Add Another

Attacker Value

Unknown

(0 users assessed)

Exploitability

Unknown

(0 users assessed)

User Interaction

None

Privileges Required

High

Attack Vector

Local

CVE-2022-40134

Disclosure Date: January 30, 2023 •

(Last updated October 08, 2023) ▾

CVE-2022-40134 CVSS v3 Base Score: 4.4

MITRE ATT&CK Log in to add MITRE ATT&CK tag

Add MITRE ATT&CK tactics and techniques that apply to this CVE.

MITRE ATT&CK

Select the MITRE ATT&CK Tactics that apply to this CVE

Collection

Select any Techniques used:

Data from Local System

Data from Removable Media

Data from Network Shared Drive

Input Capture

Input Capture: Keylogging

Input Capture: GUI Input Capture

Input Capture: Web Portal Capture

Input Capture: Credential API Hooking

Data Staged

Data Staged: Local Data Staging

Data Staged: Remote Data Staging

Screen Capture

Email Collection

Email Collection: Local Email Collection

Email Collection: Remote Email Collection

Email Collection: Email Forwarding Rule

Clipboard Data

Automated Collection

Audio Capture

Video Capture

Man in the Browser

Data from Information Repositories

Data from Information Repositories: Confluence

Data from Information Repositories: Sharepoint

Data from Cloud Storage Object

Man-in-the-Middle

Man-in-the-Middle: LLMNR/NBT-NS Poisoning and SMB Relay

Archive Collected Data

Archive Collected Data: Archive via Utility

Archive Collected Data: Archive via Library

Archive Collected Data: Archive via Custom Method

Command and Control

Select any Techniques used:

Data Obfuscation

Data Obfuscation: Junk Data

Data Obfuscation: Steganography

Data Obfuscation: Protocol Impersonation

Fallback Channels

Application Layer Protocol

Application Layer Protocol: Web Protocols

Application Layer Protocol: File Transfer Protocols

Application Layer Protocol: Mail Protocols

Application Layer Protocol: DNS

Proxy

Proxy: Internal Proxy

Proxy: External Proxy

Proxy: Multi-hop Proxy

Proxy: Domain Fronting

Communication Through Removable Media

Non-Application Layer Protocol

Web Service

Web Service: Dead Drop Resolver

Web Service: Bidirectional Communication

Web Service: One-Way Communication

Multi-Stage Channels

Ingress Tool Transfer

Data Encoding

Data Encoding: Standard Encoding

Data Encoding: Non-Standard Encoding

Traffic Signaling

Traffic Signaling: Port Knocking

Remote Access Software

Dynamic Resolution

Dynamic Resolution: Fast Flux DNS

Dynamic Resolution: Domain Generation Algorithms

Dynamic Resolution: DNS Calculation

Non-Standard Port

Protocol Tunneling

Encrypted Channel

Encrypted Channel: Symmetric Cryptography

Encrypted Channel: Asymmetric Cryptography

Credential Access

Select any Techniques used:

OS Credential Dumping

OS Credential Dumping: LSASS Memory

OS Credential Dumping: Security Account Manager

OS Credential Dumping: NTDS

OS Credential Dumping: LSA Secrets

OS Credential Dumping: Cached Domain Credentials

OS Credential Dumping: DCSync

OS Credential Dumping: Proc Filesystem

OS Credential Dumping: /etc/passwd and /etc/shadow

Network Sniffing

Input Capture

Input Capture: Keylogging

Input Capture: GUI Input Capture

Input Capture: Web Portal Capture

Input Capture: Credential API Hooking

Brute Force

Brute Force: Password Guessing

Brute Force: Password Cracking

Brute Force: Password Spraying

Brute Force: Credential Stuffing

Two-Factor Authentication Interception

Forced Authentication

Exploitation for Credential Access

Steal Application Access Token

Steal Web Session Cookie

Unsecured Credentials

Unsecured Credentials: Credentials In Files

Unsecured Credentials: Credentials in Registry

Unsecured Credentials: Bash History

Unsecured Credentials: Private Keys

Unsecured Credentials: Cloud Instance Metadata API

Unsecured Credentials: Group Policy Preferences

Credentials from Password Stores

Credentials from Password Stores: Keychain

Credentials from Password Stores: Securityd Memory

Credentials from Password Stores: Credentials from Web Browsers

Modify Authentication Process

Modify Authentication Process: Domain Controller Authentication

Modify Authentication Process: Password Filter DLL

Modify Authentication Process: Pluggable Authentication Modules

Man-in-the-Middle

Man-in-the-Middle: LLMNR/NBT-NS Poisoning and SMB Relay

Steal or Forge Kerberos Tickets

Steal or Forge Kerberos Tickets: Golden Ticket

Steal or Forge Kerberos Tickets: Silver Ticket

Steal or Forge Kerberos Tickets: Kerberoasting

Defense Evasion

Select any Techniques used:

Direct Volume Access

Rootkit

Obfuscated Files or Information

Obfuscated Files or Information: Binary Padding

Obfuscated Files or Information: Software Packing

Obfuscated Files or Information: Steganography

Obfuscated Files or Information: Compile After Delivery

Obfuscated Files or Information: Indicator Removal from Tools

Masquerading

Masquerading: Invalid Code Signature

Masquerading: Right-to-Left Override

Masquerading: Rename System Utilities

Masquerading: Masquerade Task or Service

Masquerading: Match Legitimate Name or Location

Masquerading: Space after Filename

Process Injection

Process Injection: Dynamic-link Library Injection

Process Injection: Portable Executable Injection

Process Injection: Thread Execution Hijacking

Process Injection: Asynchronous Procedure Call

Process Injection: Thread Local Storage

Process Injection: Ptrace System Calls

Process Injection: Proc Memory

Process Injection: Extra Window Memory Injection

Process Injection: Process Hollowing

Process Injection: Process Doppelgänging

Process Injection: VDSO Hijacking

Indicator Removal on Host

Indicator Removal on Host: Clear Windows Event Logs

Indicator Removal on Host: Clear Linux or Mac System Logs

Indicator Removal on Host: Clear Command History

Indicator Removal on Host: File Deletion

Indicator Removal on Host: Network Share Connection Removal

Indicator Removal on Host: Timestomp

Valid Accounts

Valid Accounts: Default Accounts

Valid Accounts: Domain Accounts

Valid Accounts: Local Accounts

Valid Accounts: Cloud Accounts

Modify Registry

Trusted Developer Utilities Proxy Execution

Trusted Developer Utilities Proxy Execution: MSBuild

Access Token Manipulation

Access Token Manipulation: Token Impersonation/Theft

Access Token Manipulation: Create Process with Token

Access Token Manipulation: Make and Impersonate Token

Access Token Manipulation: Parent PID Spoofing

Access Token Manipulation: SID-History Injection

Deobfuscate/Decode Files or Information

BITS Jobs

Indirect Command Execution

Traffic Signaling

Traffic Signaling: Port Knocking

Rogue Domain Controller

Exploitation for Defense Evasion

Signed Script Proxy Execution

Signed Script Proxy Execution: PubPrn

Signed Binary Proxy Execution

Signed Binary Proxy Execution: Compiled HTML File

Signed Binary Proxy Execution: Control Panel

Signed Binary Proxy Execution: CMSTP

Signed Binary Proxy Execution: InstallUtil

Signed Binary Proxy Execution: Mshta

Signed Binary Proxy Execution: Msiexec

Signed Binary Proxy Execution: Odbcconf

Signed Binary Proxy Execution: Regsvcs/Regasm

Signed Binary Proxy Execution: Regsvr32

Signed Binary Proxy Execution: Rundll32

XSL Script Processing

Template Injection

File and Directory Permissions Modification

File and Directory Permissions Modification: Windows File and Directory Permissions Modification

File and Directory Permissions Modification: Linux and Mac File and Directory Permissions Modification

Execution Guardrails

Execution Guardrails: Environmental Keying

Group Policy Modification

Virtualization/Sandbox Evasion

Virtualization/Sandbox Evasion: System Checks

Virtualization/Sandbox Evasion: User Activity Based Checks

Virtualization/Sandbox Evasion: Time Based Evasion

Unused/Unsupported Cloud Regions

Pre-OS Boot

Pre-OS Boot: System Firmware

Pre-OS Boot: Component Firmware

Pre-OS Boot: Bootkit

Abuse Elevation Control Mechanism

Abuse Elevation Control Mechanism: Setuid and Setgid

Abuse Elevation Control Mechanism: Bypass User Access Control

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

Abuse Elevation Control Mechanism: Elevated Execution with Prompt

Use Alternate Authentication Material

Use Alternate Authentication Material: Application Access Token

Use Alternate Authentication Material: Pass the Hash

Use Alternate Authentication Material: Pass the Ticket

Use Alternate Authentication Material: Web Session Cookie

Subvert Trust Controls

Subvert Trust Controls: Gatekeeper Bypass

Subvert Trust Controls: Code Signing

Subvert Trust Controls: SIP and Trust Provider Hijacking

Subvert Trust Controls: Install Root Certificate

Modify Authentication Process

Modify Authentication Process: Domain Controller Authentication

Modify Authentication Process: Password Filter DLL

Modify Authentication Process: Pluggable Authentication Modules

Impair Defenses

Impair Defenses: Disable or Modify Tools

Impair Defenses: Disable Windows Event Logging

Impair Defenses: HISTCONTROL

Impair Defenses: Disable or Modify System Firewall

Impair Defenses: Indicator Blocking

Impair Defenses: Disable or Modify Cloud Firewall

Hide Artifacts

Hide Artifacts: Hidden Files and Directories

Hide Artifacts: Hidden Users

Hide Artifacts: Hidden Window

Hide Artifacts: NTFS File Attributes

Hide Artifacts: Hidden File System

Hide Artifacts: Run Virtual Instance

Hijack Execution Flow

Hijack Execution Flow: DLL Search Order Hijacking

Hijack Execution Flow: DLL Side-Loading

Hijack Execution Flow: Dylib Hijacking

Hijack Execution Flow: Executable Installer File Permissions Weakness

Hijack Execution Flow: LD_PRELOAD

Hijack Execution Flow: Path Interception by PATH Environment Variable

Hijack Execution Flow: Path Interception by Search Order Hijacking

Hijack Execution Flow: Path Interception by Unquoted Path

Hijack Execution Flow: Services File Permissions Weakness

Hijack Execution Flow: Services Registry Permissions Weakness

Hijack Execution Flow: COR_PROFILER

Modify Cloud Compute Infrastructure

Modify Cloud Compute Infrastructure: Create Snapshot

Modify Cloud Compute Infrastructure: Create Cloud Instance

Modify Cloud Compute Infrastructure: Delete Cloud Instance

Modify Cloud Compute Infrastructure: Revert Cloud Instance

Discovery

Select any Techniques used:

System Service Discovery

Application Window Discovery

Query Registry

System Network Configuration Discovery

Remote System Discovery

System Owner/User Discovery

Network Sniffing

Network Service Scanning

System Network Connections Discovery

Process Discovery

Permission Groups Discovery

Permission Groups Discovery: Local Groups

Permission Groups Discovery: Domain Groups

Permission Groups Discovery: Cloud Groups

System Information Discovery

File and Directory Discovery

Account Discovery

Account Discovery: Local Account

Account Discovery: Domain Account

Account Discovery: Email Account

Account Discovery: Cloud Account

Peripheral Device Discovery

System Time Discovery

Network Share Discovery

Password Policy Discovery

Browser Bookmark Discovery

Domain Trust Discovery

Virtualization/Sandbox Evasion

Virtualization/Sandbox Evasion: System Checks

Virtualization/Sandbox Evasion: User Activity Based Checks

Virtualization/Sandbox Evasion: Time Based Evasion

Software Discovery

Software Discovery: Security Software Discovery

Cloud Service Discovery

Cloud Service Dashboard

Execution

Select any Techniques used:

Windows Management Instrumentation

Scheduled Task/Job

Scheduled Task/Job: At (Linux)

Scheduled Task/Job: At (Windows)

Scheduled Task/Job: Cron

Scheduled Task/Job: Launchd

Scheduled Task/Job: Scheduled Task

Command and Scripting Interpreter

Command and Scripting Interpreter: PowerShell

Command and Scripting Interpreter: AppleScript

Command and Scripting Interpreter: Windows Command Shell

Command and Scripting Interpreter: Unix Shell

Command and Scripting Interpreter: Visual Basic

Command and Scripting Interpreter: Python

Command and Scripting Interpreter: JavaScript/JScript

Software Deployment Tools

Native API

Shared Modules

Exploitation for Client Execution

User Execution

User Execution: Malicious Link

User Execution: Malicious File

Inter-Process Communication

Inter-Process Communication: Component Object Model

Inter-Process Communication: Dynamic Data Exchange

System Services

System Services: Launchctl

System Services: Service Execution

Exfiltration

Select any Techniques used:

Exfiltration Over Other Network Medium

Exfiltration Over Other Network Medium: Exfiltration Over Bluetooth

Automated Exfiltration

Scheduled Transfer

Data Transfer Size Limits

Exfiltration Over C2 Channel

Exfiltration Over Alternative Protocol

Exfiltration Over Alternative Protocol: Exfiltration Over Symmetric Encrypted Non-C2 Protocol

Exfiltration Over Alternative Protocol: Exfiltration Over Asymmetric Encrypted Non-C2 Protocol

Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol

Exfiltration Over Physical Medium

Exfiltration Over Physical Medium: Exfiltration over USB

Transfer Data to Cloud Account

Exfiltration Over Web Service

Exfiltration Over Web Service: Exfiltration to Code Repository

Exfiltration Over Web Service: Exfiltration to Cloud Storage

Impact

Select any Techniques used:

Data Destruction

Data Encrypted for Impact

Service Stop

Inhibit System Recovery

Defacement

Defacement: Internal Defacement

Defacement: External Defacement

Firmware Corruption

Resource Hijacking

Network Denial of Service

Network Denial of Service: Direct Network Flood

Network Denial of Service: Reflection Amplification

Endpoint Denial of Service

Endpoint Denial of Service: OS Exhaustion Flood

Endpoint Denial of Service: Service Exhaustion Flood

Endpoint Denial of Service: Application Exhaustion Flood

Endpoint Denial of Service: Application or System Exploitation

System Shutdown/Reboot

Account Access Removal

Disk Wipe

Disk Wipe: Disk Content Wipe

Disk Wipe: Disk Structure Wipe

Data Manipulation

Data Manipulation: Stored Data Manipulation

Data Manipulation: Transmitted Data Manipulation

Data Manipulation: Runtime Data Manipulation

Initial Access

Select any Techniques used:

Valid Accounts

Valid Accounts: Default Accounts

Valid Accounts: Domain Accounts

Valid Accounts: Local Accounts

Valid Accounts: Cloud Accounts

Replication Through Removable Media

External Remote Services

Drive-by Compromise

Exploit Public-Facing Application

Supply Chain Compromise

Supply Chain Compromise: Compromise Software Dependencies and Development Tools

Supply Chain Compromise: Compromise Software Supply Chain

Supply Chain Compromise: Compromise Hardware Supply Chain

Trusted Relationship

Hardware Additions

Phishing

Phishing: Spearphishing Attachment

Phishing: Spearphishing Link

Phishing: Spearphishing via Service

Lateral Movement

Select any Techniques used:

Remote Services

Remote Services: Remote Desktop Protocol

Remote Services: SMB/Windows Admin Shares

Remote Services: Distributed Component Object Model

Remote Services: SSH

Remote Services: VNC

Remote Services: Windows Remote Management

Software Deployment Tools

Taint Shared Content

Replication Through Removable Media

Exploitation of Remote Services

Internal Spearphishing

Use Alternate Authentication Material

Use Alternate Authentication Material: Application Access Token

Use Alternate Authentication Material: Pass the Hash

Use Alternate Authentication Material: Pass the Ticket

Use Alternate Authentication Material: Web Session Cookie

Remote Service Session Hijacking

Remote Service Session Hijacking: SSH Hijacking

Remote Service Session Hijacking: RDP Hijacking

Lateral Tool Transfer

Persistence

Select any Techniques used:

Boot or Logon Initialization Scripts

Boot or Logon Initialization Scripts: Logon Script (Windows)

Boot or Logon Initialization Scripts: Logon Script (Mac)

Boot or Logon Initialization Scripts: Network Logon Script

Boot or Logon Initialization Scripts: Rc.common

Boot or Logon Initialization Scripts: Startup Items

Scheduled Task/Job

Scheduled Task/Job: At (Linux)

Scheduled Task/Job: At (Windows)

Scheduled Task/Job: Cron

Scheduled Task/Job: Launchd

Scheduled Task/Job: Scheduled Task

Valid Accounts

Valid Accounts: Default Accounts

Valid Accounts: Domain Accounts

Valid Accounts: Local Accounts

Valid Accounts: Cloud Accounts

Account Manipulation

Account Manipulation: Additional Azure Service Principal Credentials

Account Manipulation: Exchange Email Delegate Permissions

Account Manipulation: Add Office 365 Global Administrator Role

Account Manipulation: SSH Authorized Keys

External Remote Services

Create Account

Create Account: Local Account

Create Account: Domain Account

Create Account: Cloud Account

Office Application Startup

Office Application Startup: Office Template Macros

Office Application Startup: Office Test

Office Application Startup: Outlook Forms

Office Application Startup: Outlook Home Page

Office Application Startup: Outlook Rules

Office Application Startup: Add-ins

Browser Extensions

BITS Jobs

Traffic Signaling

Traffic Signaling: Port Knocking

Server Software Component

Server Software Component: SQL Stored Procedures

Server Software Component: Transport Agent

Server Software Component: Web Shell

Implant Container Image

Pre-OS Boot

Pre-OS Boot: System Firmware

Pre-OS Boot: Component Firmware

Pre-OS Boot: Bootkit

Create or Modify System Process

Create or Modify System Process: Launch Agent

Create or Modify System Process: Systemd Service

Create or Modify System Process: Windows Service

Create or Modify System Process: Launch Daemon

Event Triggered Execution

Event Triggered Execution: Change Default File Association

Event Triggered Execution: Screensaver

Event Triggered Execution: Windows Management Instrumentation Event Subscription

Event Triggered Execution: .bash_profile and .bashrc

Event Triggered Execution: Trap

Event Triggered Execution: LC_LOAD_DYLIB Addition

Event Triggered Execution: Netsh Helper DLL

Event Triggered Execution: Accessibility Features

Event Triggered Execution: AppCert DLLs

Event Triggered Execution: AppInit DLLs

Event Triggered Execution: Application Shimming

Event Triggered Execution: Image File Execution Options Injection

Event Triggered Execution: PowerShell Profile

Event Triggered Execution: Emond

Event Triggered Execution: Component Object Model Hijacking

Boot or Logon Autostart Execution

Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder

Boot or Logon Autostart Execution: Authentication Package

Boot or Logon Autostart Execution: Time Providers

Boot or Logon Autostart Execution: Winlogon Helper DLL

Boot or Logon Autostart Execution: Security Support Provider

Boot or Logon Autostart Execution: Kernel Modules and Extensions

Boot or Logon Autostart Execution: Re-opened Applications

Boot or Logon Autostart Execution: LSASS Driver

Boot or Logon Autostart Execution: Shortcut Modification

Boot or Logon Autostart Execution: Port Monitors

Boot or Logon Autostart Execution: Plist Modification

Compromise Client Software Binary

Hijack Execution Flow

Hijack Execution Flow: DLL Search Order Hijacking

Hijack Execution Flow: DLL Side-Loading

Hijack Execution Flow: Dylib Hijacking

Hijack Execution Flow: Executable Installer File Permissions Weakness

Hijack Execution Flow: LD_PRELOAD

Hijack Execution Flow: Path Interception by PATH Environment Variable

Hijack Execution Flow: Path Interception by Search Order Hijacking

Hijack Execution Flow: Path Interception by Unquoted Path

Hijack Execution Flow: Services File Permissions Weakness

Hijack Execution Flow: Services Registry Permissions Weakness

Hijack Execution Flow: COR_PROFILER

Privilege Escalation

Select any Techniques used:

Boot or Logon Initialization Scripts

Boot or Logon Initialization Scripts: Logon Script (Windows)

Boot or Logon Initialization Scripts: Logon Script (Mac)

Boot or Logon Initialization Scripts: Network Logon Script

Boot or Logon Initialization Scripts: Rc.common

Boot or Logon Initialization Scripts: Startup Items

Scheduled Task/Job

Scheduled Task/Job: At (Linux)

Scheduled Task/Job: At (Windows)

Scheduled Task/Job: Cron

Scheduled Task/Job: Launchd

Scheduled Task/Job: Scheduled Task

Process Injection

Process Injection: Dynamic-link Library Injection

Process Injection: Portable Executable Injection

Process Injection: Thread Execution Hijacking

Process Injection: Asynchronous Procedure Call

Process Injection: Thread Local Storage

Process Injection: Ptrace System Calls

Process Injection: Proc Memory

Process Injection: Extra Window Memory Injection

Process Injection: Process Hollowing

Process Injection: Process Doppelgänging

Process Injection: VDSO Hijacking

Exploitation for Privilege Escalation

Valid Accounts

Valid Accounts: Default Accounts

Valid Accounts: Domain Accounts

Valid Accounts: Local Accounts

Valid Accounts: Cloud Accounts

Access Token Manipulation

Access Token Manipulation: Token Impersonation/Theft

Access Token Manipulation: Create Process with Token

Access Token Manipulation: Make and Impersonate Token

Access Token Manipulation: Parent PID Spoofing

Access Token Manipulation: SID-History Injection

Group Policy Modification

Create or Modify System Process

Create or Modify System Process: Launch Agent

Create or Modify System Process: Systemd Service

Create or Modify System Process: Windows Service

Create or Modify System Process: Launch Daemon

Event Triggered Execution

Event Triggered Execution: Change Default File Association

Event Triggered Execution: Screensaver

Event Triggered Execution: Windows Management Instrumentation Event Subscription

Event Triggered Execution: .bash_profile and .bashrc

Event Triggered Execution: Trap

Event Triggered Execution: LC_LOAD_DYLIB Addition

Event Triggered Execution: Netsh Helper DLL

Event Triggered Execution: Accessibility Features

Event Triggered Execution: AppCert DLLs

Event Triggered Execution: AppInit DLLs

Event Triggered Execution: Application Shimming

Event Triggered Execution: Image File Execution Options Injection

Event Triggered Execution: PowerShell Profile

Event Triggered Execution: Emond

Event Triggered Execution: Component Object Model Hijacking

Boot or Logon Autostart Execution

Boot or Logon Autostart Execution: Registry Run Keys / Startup Folder

Boot or Logon Autostart Execution: Authentication Package

Boot or Logon Autostart Execution: Time Providers

Boot or Logon Autostart Execution: Winlogon Helper DLL

Boot or Logon Autostart Execution: Security Support Provider

Boot or Logon Autostart Execution: Kernel Modules and Extensions

Boot or Logon Autostart Execution: Re-opened Applications

Boot or Logon Autostart Execution: LSASS Driver

Boot or Logon Autostart Execution: Shortcut Modification

Boot or Logon Autostart Execution: Port Monitors

Boot or Logon Autostart Execution: Plist Modification

Abuse Elevation Control Mechanism

Abuse Elevation Control Mechanism: Setuid and Setgid

Abuse Elevation Control Mechanism: Bypass User Access Control

Abuse Elevation Control Mechanism: Sudo and Sudo Caching

Abuse Elevation Control Mechanism: Elevated Execution with Prompt

Hijack Execution Flow

Hijack Execution Flow: DLL Search Order Hijacking

Hijack Execution Flow: DLL Side-Loading

Hijack Execution Flow: Dylib Hijacking

Hijack Execution Flow: Executable Installer File Permissions Weakness

Hijack Execution Flow: LD_PRELOAD

Hijack Execution Flow: Path Interception by PATH Environment Variable

Hijack Execution Flow: Path Interception by Search Order Hijacking

Hijack Execution Flow: Path Interception by Unquoted Path

Hijack Execution Flow: Services File Permissions Weakness

Hijack Execution Flow: Services Registry Permissions Weakness

Hijack Execution Flow: COR_PROFILER

Topic Tags

Select the tags that apply to this CVE (Assessment added tags are disabled and cannot be removed)

What makes this of high-value to an attacker?

Vulnerable in default configuration

Unauthenticated

Observed in state-sponsored attacks

Observed in ransomware attacks

Gives privileged access

Easy to weaponize

Difficult to patch

Common in enterprise

CISA KEV Listed

What makes this of low-value to an attacker?

Vulnerable in uncommon configuration

Requires user interaction

Requires physical access

Requires elevated access

No useful access

Difficult to weaponize

Authenticated

Description

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

See More See Less

Ratings & Analysis
Vulnerability Details

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics

Data provided by the National Vulnerability Database (NVD)

Base Score:

4.4 Medium

Impact Score:

3.6

Exploitability Score:

0.8

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack Vector (AV):

Local

Attack Complexity (AC):

Low

Privileges Required (PR):

High

User Interaction (UI):

None

Scope (S):

Unchanged

Confidentiality (C):

High

Integrity (I):

None

Availability (A):

None

General Information

Offensive Application

Unknown

Utility Class

Unknown

Ports

Unknown

Vulnerable Versions

BIOS various

Prerequisites

Unknown

Discovered By

Unknown

PoC Author

Unknown

Metasploit Module

Unknown

Reporter

Unknown

Vendors

lenovo

Products

ideacentre 3 07iab7 firmware m49kt1da
ideacentre 3 07ada05 firmware o4fkt29a
ideacentre 3 07imb05 firmware m2vkt1da
ideacentre 5 14iab7 firmware m42kt40a
ideacentre 5 14acn6 firmware o5ekt21a
ideacentre 5 14are05 firmware o4zkt29a
ideacentre 5 14imb05 firmware o4hkt38a
ideacentre 5 14iob6 firmware m3gkt33a
ideacentre 510s 07icb firmware m22kt47a
ideacentre 510s 07icb firmware m22kt48a
ideacentre 510s 07ick firmware m30kt26a
ideacentre a340 22igm firmware o51kt12a
ideacentre a340 24igm firmware o51kt12a
ideacentre c5 14imb05 firmware o4hkt38a
ideacentre creator 5 14iob6 firmware m3gkt33a
ideacentre g5 14amr05 firmware o4zkt29a
ideacentre g5 14imb05 firmware o4hkt38a
ideacentre gaming 5 17acn7 firmware o5ekt21a
ideacentre gaming 5 17iab7 firmware m42kt40a
ideacentre gaming 5 14acn6 firmware o5ekt21a
ideacentre gaming 5 14iob6 firmware m3gkt33a
legion c530 19icb firmware o4bkt20a
legion t5 26iob6 firmware o54kt1da
legion t5 28icb05 firmware o4bkt20a
legion t530 28apr firmware o4gkt16a
legion t530 28icb firmware o4bkt20a
legion t7 34imz5 firmware o4lkt1ea
n3310 storage firmware 5.05.0
n4610 storage firmware 5.05.0
qitian a815 firmware m1rkt38a
qt b415 firmware m16kt68a
qt m410 firmware m16kt68a
qt m415 firmware m16kt68a
stadia ggp 120 firmware s03kt55a
thinkagile hx1021 firmware hye122f
thinkagile hx1320 firmware ive178i
thinkagile hx1321 firmware ive178i
thinkagile hx1331 firmware afe118m
thinkagile hx1520 r firmware ive178i
thinkagile hx1521 r firmware ive178i
thinkagile hx2320 firmware ive178i
thinkagile hx2320 e firmware ive178i
thinkagile hx2321 firmware ive178i
thinkagile hx2330 firmware afe118m
thinkagile hx2331 firmware afe118m
thinkagile hx2720 e firmware tee178i
thinkagile hx3320 firmware ive178i
thinkagile hx3321 firmware ive178i
thinkagile hx3330 firmware afe118m
thinkagile hx3331 firmware afe118m
thinkagile hx3375 firmware d8e128f
thinkagile hx3376 firmware d8e128f
thinkagile hx3520 g firmware ive178i
thinkagile hx3521 g firmware ive178i
thinkagile hx3720 firmware tee178i
thinkagile hx3721 firmware tee178i
thinkagile hx5520 firmware ive178i
thinkagile hx5520 c firmware ive178i
thinkagile hx5521 firmware ive178i
thinkagile hx5521 c firmware ive178i
thinkagile hx5530 firmware afe118m
thinkagile hx5531 firmware afe118m
thinkagile hx7520 firmware ive178i
thinkagile hx7521 firmware ive178i
thinkagile hx7530 firmware afe118m
thinkagile hx7531 firmware afe118m
thinkagile hx7820 firmware pse144n
thinkagile hx7821 firmware pse144n
thinkagile mx certified node all flash firmware ive178i
thinkagile mx certified node hybrid firmware ive178i
thinkagile mx1020 firmware hye122f
thinkagile mx1021 firmware hye122f
thinkagile mx3321 f firmware ive178i
thinkagile mx3321 h firmware ive178i
thinkagile mx3330 f firmware afe118m
thinkagile mx3330 h firmware afe118m
thinkagile mx3331 f firmware afe118m
thinkagile mx3331 h firmware afe118m
thinkagile mx3520 f firmware ive178i
thinkagile mx3520 h firmware ive178i
thinkagile mx3530 f firmware afe118m
thinkagile mx3530 h firmware afe118m
thinkagile mx3531 h firmware afe118m
thinkagile mx3531 f firmware afe118m
thinkagile vx 1se firmware ise130e
thinkagile vx 1u firmware ive178i
thinkagile vx 2u firmware ive178i
thinkagile vx 2u4n firmware tee178i
thinkagile vx 4u firmware pse144n
thinkagile vx1320 firmware ise130e
thinkagile vx2320 firmware ive178i
thinkagile vx2330 firmware afe118m
thinkagile vx3320 firmware ive178i
thinkagile vx3330 firmware afe118m
thinkagile vx3331 firmware afe118m
thinkagile vx3520 g firmware ive178i
thinkagile vx3530 g firmware afe118m
thinkagile vx3720 firmware tee178i
thinkagile vx5520 firmware ive178i
thinkagile vx5530 firmware afe118m
thinkagile vx7320 n firmware ive178i
thinkagile vx7330 firmware afe118m
thinkagile vx7520 firmware ive178i
thinkagile vx7520 n firmware ive178i
thinkagile vx7530 firmware afe118m
thinkagile vx7531 firmware afe118m
thinkagile vx7820 firmware pse144n
thinkcentre e75s firmware m16kt68a
thinkcentre e75t firmware m16kt68a
thinkcentre e96z firmware m26kt22a
thinkcentre m60e tiny firmware o5fkt14a
thinkcentre m610 firmware m1akt56a
thinkcentre m625q firmware m3skt21a
thinkcentre m630e firmware m1wkt45a
thinkcentre m6600q firmware fwktbaa
thinkcentre m6600s firmware fwktbaa
thinkcentre m6600t firmware fwktbaa
thinkcentre m700q firmware fwktbaa
thinkcentre m70a firmware m28kt37a
thinkcentre m70a gen 2 firmware m2skt25a
thinkcentre m70c firmware m3nkt20a
thinkcentre m70q firmware m2vkt1da
thinkcentre m70q gen 2 firmware m2wkt57a
thinkcentre m70q gen 3 firmware m3jkt34a
thinkcentre m70s firmware m43kt16a
thinkcentre m70s gen 3 firmware m2tkt50a
thinkcentre m70t firmware m41kt2da
thinkcentre m70t gen 3 firmware m2tkt50a
thinkcentre m710e firmware m41kt2da
thinkcentre m710q firmware m1zkt38a
thinkcentre m710s firmware m1akt56a
thinkcentre m710t firmware m16kt68a
thinkcentre m715q firmware m16kt68a
thinkcentre m720e firmware m11kt54a
thinkcentre m75n firmware m30kt26a
thinkcentre m75q gen 2 firmware m33kt25a
thinkcentre m75s gen 2 firmware m3akt44a
thinkcentre m75s gen 2 firmware m3bkt29a
thinkcentre m75t gen 2 firmware
thinkcentre m75t gen 2 firmware m3akt44a
thinkcentre m75t gen 2 firmware m3bkt29a
thinkcentre m75t gen 2 firmware m46kt2da
thinkcentre m75t gen 2 firmware m47kt24a
thinkcentre m80q firmware m46kt2da
thinkcentre m80s firmware m2tkt50a
thinkcentre m80s firmware m2wkt57a
thinkcentre m80t firmware m1ckt49a
thinkcentre m80t firmware m2tkt50a
thinkcentre m810z all in one firmware m1ekt25a
thinkcentre m818z firmware m1nkt58a
thinkcentre m820z all in one firmware m2rkt52a
thinkcentre m8600s firmware fwktbaa
thinkcentre m8600t firmware fwktbaa
thinkcentre m90a firmware m3lkt26a
thinkcentre m90a gen 2 firmware m3jkt34a
thinkcentre m90q gen 2 firmware m2wkt57a
thinkcentre m90q tiny firmware m2tkt50a
thinkcentre m90s firmware m2tkt50a
thinkcentre m90t firmware m1akt56a
thinkcentre m910q firmware m1akt56a
thinkcentre m910s firmware m1akt56a
thinkcentre m910t firmware m1akt56a
thinkcentre m910x firmware m49kt1da
thinkcentre neo 50s gen 3 firmware m42kt40a
thinkedge se30 firmware m3fkt29a
thinkpad e14 firmware r16et33w
thinkpad e14 gen 2 firmware r1eet45w
thinkpad e15 firmware r16et33w
thinkpad e15 gen 2 firmware r1eet45w
thinkpad e490 firmware r0yet48w
thinkpad e490s firmware r0yet48w
thinkpad e590 firmware r0yet48w
thinkpad l13 firmware r15et51w
thinkpad l13 yoga firmware r15et51w
thinkpad l14 firmware r17et33w
thinkpad l14 gen 2 firmware r1jet53w
thinkpad l15 firmware r17et33w
thinkpad l15 gen 2 firmware r1jet53w
thinkpad l390 firmware r10et51w
thinkpad l390 yoga firmware r10et51w
thinkpad l490 firmware r0zet50w
thinkpad l590 firmware r0zet50w
thinkpad p1 gen 1 firmware n2eet56w
thinkpad p1 gen 2 firmware n2oet54w
thinkpad p1 gen 3 firmware n2vet34w
thinkpad p14s gen 1 firmware n2xet33w
thinkpad p14s gen 2 firmware n34et46w
thinkpad p15 gen 1 firmware n30et43w
thinkpad p15s gen 1 firmware n2xet33w
thinkpad p15s gen 2 firmware n34et46w
thinkpad p15v gen 1 firmware n30et43w
thinkpad p17 gen 1 firmware n30et43w
thinkpad p43s firmware n2iet98w
thinkpad p52 firmware n2cet61w
thinkpad p53 firmware n2net49w
thinkpad p53s firmware n2iet98w
thinkpad p72 firmware n2cet61w
thinkpad p73 firmware n2net49w
thinkpad r14 gen 2 firmware r1eet45w
thinkpad s3 2nd gen firmware r16et33w
thinkpad t14 gen 1 firmware n2xet33w
thinkpad t14 gen 2 firmware n34et46w
thinkpad t14s firmware n2yet34w
thinkpad t14s gen 2 firmware n35et43w
thinkpad t15 firmware n2xet33w
thinkpad t15 gen 2 firmware n34et46w
thinkpad t15g gen 1 firmware n30et43w
thinkpad t15p gen 1 firmware n30et43w
thinkpad t490 firmware n2iet98w
thinkpad t490s firmware n2jet97w
thinkpad t590 firmware n2iet98w
thinkpad x1 carbon 7th gen firmware n2het66w
thinkpad x1 carbon 7th gen firmware n2qet44w
thinkpad x1 carbon 8th gen firmware n2wet32w
thinkpad x1 carbon 9th gen firmware n2tet72w
thinkpad x1 extreme 1st gen firmware n2eet56w
thinkpad x1 extreme 2nd gen firmware n2oet54w
thinkpad x1 extreme 3rd gen firmware n2vet34w
thinkpad x1 nano gen 1 firmware n2tet71w
thinkpad x1 titanium firmware n2met54w
thinkpad x1 yoga 4th gen firmware n2het66w
thinkpad x1 yoga 4th gen firmware n2qet44w
thinkpad x1 yoga 5th gen firmware n2wet32w
thinkpad x1 yoga 6th gen firmware n2tet72w
thinkpad x12 detachable gen 1 firmware r1get43w
thinkpad x13 firmware n2yet34w
thinkpad x13 gen 2 firmware n35et43w
thinkpad x13 yoga gen 1 firmware n2uet58w
thinkpad x13 yoga gen 2 firmware n39et50w
thinkpad x390 firmware n2jet97w
thinkpad x390 yoga firmware n2let88w
thinkserver rd350 firmware 5.05.0
thinkserver rd350g firmware vb3ts891
thinkserver rd450 firmware 5.05.0
thinkserver rd550 firmware 5.03.0
thinkserver rd650 firmware 5.05.0
thinkserver rs160 firmware vb1ts307
thinkserver rs260 firmware vb1ts307
thinkserver sd350 firmware 5.05.0
thinkserver sr588 firmware tee176k
thinkserver sr590 firmware tee176k
thinkserver sr860p firmware tee176k
thinkserver td350 firmware 5.04.0
thinkserver ts150 firmware 81i/b7s
thinkserver ts250 firmware 81i/b7s
thinkserver ts450 firmware fwktb7s
thinkserver ts460 firmware tb1ts307
thinkserver ts550 firmware fwktb7s
thinkserver ts560 firmware tb1ts307
thinksmart hub 500 firmware m23kt29a
thinksmart hub teams firmware m2xkt20a
thinksmart hub zoom firmware m2xkt20a
thinkstation p310 firmware fwktbaa
thinkstation p318 firmware m1akt56a
thinkstation p320 tiny firmware m1akt56a
thinkstation p340 firmware s08kt50a
thinkstation p340 tiny firmware m2wkt57a
thinkstation p348 firmware m3kkt34a
thinkstation p350 firmware s0akt34a
thinkstation p350 tiny firmware m3jkt34a
thinkstation p520 firmware s03kt55a
thinkstation p520c firmware s03kt55a
thinkstation p620 firmware s07kt25a
thinksystem dn8836 firmware l0.40
thinksystem dx1100u firmware ive178i
thinksystem dx8200d firmware ive178i
thinksystem hr610x firmware hr6n0661
thinksystem hr630x firmware hr6n0661
thinksystem hr650x firmware hr6n0661
thinksystem sd530 firmware tee178i
thinksystem sd630 v2 firmware u8e118m
thinksystem sd650 dwc dual node tray firmware ote178g
thinksystem sd650 v2 firmware u8e118m
thinksystem sd650 n v2 firmware u8e118m
thinksystem se350 firmware hye122f
thinksystem sn550 firmware ive178i
thinksystem sn550 v2 firmware u8e118m
thinksystem sn850 firmware ive178i
thinksystem sr150 firmware ise130e
thinksystem sr158 firmware ise130e
thinksystem sr250 firmware ise130e
thinksystem sr250 v2 firmware tqe104j
thinksystem sr258 firmware ise130e
thinksystem sr258 v2 firmware tqe104j
thinksystem sr530 firmware tee178i
thinksystem sr550 firmware tee178i
thinksystem sr570 firmware tee178i
thinksystem sr590 firmware tee178i
thinksystem sr630 firmware ive178i
thinksystem sr630 v2 firmware afe118m
thinksystem sr645 firmware d8e128f
thinksystem sr650 firmware ive178i
thinksystem sr650 v2 firmware afe118m
thinksystem sr665 firmware d8e128f
thinksystem sr670 firmware g1e130i
thinksystem sr670 v2 firmware u8e118m
thinksystem sr850 firmware tee178i
thinksystem sr850 v2 firmware m5e118i
thinksystem sr850p firmware tee176k
thinksystem sr850p firmware tee178i
thinksystem sr860 firmware tee178i
thinksystem sr860 v2 firmware m5e118i
thinksystem sr950 firmware pse144n
thinksystem st250 firmware ise130e
thinksystem st250 v2 firmware tqe104j
thinksystem st258 firmware ise130e
thinksystem st258 v2 firmware tqe104j
thinksystem st50 firmware ite125a
thinksystem st550 firmware o0e178i
thinksystem st558 firmware o0e178i
thinksystem st58 firmware ite125a
thinksystem st650 v2 firmware u8e118m
thinksystem st658 v2 firmware u8e118m
v30a 22iml firmware m37kt28a
v30a 24iml firmware m37kt28a
v330 20icb firmware m1qkt47a
v35s 07ada firmware o4fkt29a
v50a 22imb firmware m36kt28a
v50a 24imb firmware m36kt28a
v50s 07imb firmware m2vkt1da
v50t 13imb firmware o4hkt38a
v50t 13iob g2 firmware m3gkt33a
v520 firmware m16kt68a
v520s firmware m16kt68a
v530 15arr firmware not affected
v530 15icb firmware m1ykt70a
v530 15icr firmware m2ykt31a
v530 22icb firmware m20kt52a
v530 24icb firmware m20kt52a
v530s 07icb firmware m22kt48a
v530s 07icb firmware not affected
v530s 07icr firmware m30kt26a
v540 24iwl firmware m29kt39a
v55t gen 2 13acn firmware o5jkt20a
yangtian afq150 firmware fwktbaa
yoga a940 27icb firmware o43kt43a
yta8900f firmware fwktbaa

References

Canonical

CVE-2022-40134 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40134)

Miscellaneous

https://support.lenovo.com/us/en/product_security/LEN-94953

Additional Info

Authenticated

Unknown

Exploitable

Unknown

Reliability

Unknown

Stability

Unknown

Available Mitigations

Unknown

Shelf Life

Unknown

Userbase/Installbase

Unknown

Patch Effectiveness

Unknown

Rapid7

Technical Analysis

Report as Emergent Threat Response

Please provide the link to the ETR blog if available.

Add a reference URL (optional):

Report as Zero-day Exploit

Please provide the link to the zero-day exploit reference.

Note: The source link you provide will create a new misc reference if it doesn't already exist.

Add a reference URL (optional):

Report as Exploited in the Wild

AttackerKB users want to know this is information they can trust.
Help the community by indicating the source(s) of your knowledge:

Vendor Advisory

Add a reference URL (required):

Please provide a link to the Vendor Advisory.
Government or Industry Alert

Add a reference URL (required):

Please provide a link to the Government or Industry Alert.
Threat Feed

Add a reference URL (required):

Please provide a link to the Threat Feed.
News Article or Blog

Add a reference URL (required):

Please provide a link to the News Reference.
Exploitation personally observed in an environment (client, customer, employer, or personal environment)

Add a reference URL (required):

Please provide a link or create an assessment as evidence to support your personal observation claim.
Other:

Please explain the source of your report.

Add a reference URL (required):

Please provide a link or create an assessment as evidence of the source of your report.

CVE ID

AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:

CVE ID:

Unknown

CVE-2022-40134

Unknown

Unknown

None

High

Local

CVE-2022-40134

Description

Add Assessment

CVSS V3 Severity and Metrics

General Information

Vendors

Products

References

Canonical

Miscellaneous

Additional Info

Technical Analysis

Quick Cookie Notification