CVE-2022-40137

EUVD-2022-43455 · Published Jan 30, 2023

A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Technologies

Lenovo Ideacentre M75T Gen 2Lenovo Thinkagile Hx3320Lenovo Thinkagile Vx 2U FirmwareLenovo Thinkstation P920 Workstation FirmwareLenovo Thinkagile Mx3520 F- All Flash FirmwareLenovo Thinkserver Ts460Lenovo Ideacentre M800 FirmwareLenovo Ideacentre M90A Gen 3Lenovo Ideacentre M80T Gen 3Lenovo Ideacentre M80S Gen 3 FirmwareLenovo Ideacentre T540-15Ama GLenovo Ideacentre A340-22Ick All-In-One FirmwareLenovo Legion C530-19IcbLenovo Ideacentre M920XLenovo Thinksystem Dx8200DLenovo Ideacentre Aio 3-27Imb05 FirmwareLenovo Thinkcentre M8600T FirmwareLenovo Thinkserver Sr860PLenovo Thinksystem Hr630XLenovo Ideacentre 3 07Iab7 FirmwareLenovo V50A-24ImbLenovo Ideacentre M710E FirmwareLenovo Thinkagile Hx2320-E FirmwareLenovo Thinkagile Hx7531 FirmwareLenovo Ideacentre M70C FirmwareLenovo Thinkstation P310 WorkstationLenovo Thinkserver Rd650 FirmwareLenovo Thinkserver Sr588Lenovo Thinkserver Ts150 FirmwareLenovo Thinkstation P330 WorkstationLenovo Thinkstation Stadia Ggp-120Lenovo V530-15Icb FirmwareLenovo Ideacentre M75S Gen 2Lenovo Thinkagile Hx7821 FirmwareLenovo Thinkagile Hx2720-ELenovo Ideacentre 720-18AprLenovo Ideacentre M70A Gen 3 FirmwareLenovo Thinkcentre M8600S FirmwareLenovo Ideacentre Aio 3-22Itl6 FirmwareLenovo Ideacentre M90SLenovo Thinkagile Vx7320 N Lenovo Legion T7-34Imz5Lenovo Thinksmart Core Device For Logitech FirmwareLenovo Legion T7-34Imz5 FirmwareLenovo Thinkcentre M6600T FirmwareLenovo Thinkagile Vx3520-G FirmwareLenovo V520SLenovo Ideacentre M90Q Gen 3Lenovo Ideacentre M630E FirmwareLenovo V530-15Icr FirmwareLenovo Thinkagile Hx1331Lenovo Thinkagile Vx7520 Lenovo Ideacentre M720ELenovo Thinkstation P920 WorkstationLenovo Thinkagile Hx7521Lenovo Yta8900FLenovo Ideacentre 3-07Imb05 FirmwareLenovo Thinkagile Mx3520 H- Hybrid Lenovo Thinkagile Mx3331-H Hybrid FirmwareLenovo Ideacentre M70T Gen 3Lenovo Thinkserver Sr590Lenovo Thinksystem St58Lenovo V55T-15Api FirmwareLenovo Ideacentre 510S-07IckLenovo Ideacentre M70Q Gen 2Lenovo Ideacentre Aio 3-24Alc6Lenovo Thinkagile Vx7520 N Lenovo Thinksmart Core Device For PolyLenovo V530S-07Icr FirmwareLenovo Thinkstation P340 Tiny WorkstationLenovo V530-24Icb All-In-One FirmwareLenovo Thinkagile Vx 4U FirmwareLenovo Ideacentre M630ELenovo Thinkagile Vx 1U FirmwareLenovo Ideacentre M75N FirmwareLenovo Thinkcentre M6600S FirmwareLenovo Thinkagile Hx3321 FirmwareLenovo Ideacentre M910XLenovo Thinkagile Mx 1U - Mx3321 H Lenovo Ideacentre M80QLenovo Thinkstation P620 Workstation FirmwareLenovo Thinksystem St58 FirmwareLenovo Legion T5-28Icb05Lenovo Ideacentre M818Z FirmwareLenovo Thinkcentre M6600Q FirmwareLenovo Ideacentre M920QLenovo Ideacentre M70T FirmwareLenovo Thinkedge Se30 FirmwareLenovo Thinkagile Vx 1Se FirmwareLenovo Thinkagile Hx3720 FirmwareLenovo Ideacentre Aio 3-22Ada05 FirmwareLenovo Ideacentre M70S Gen 3Lenovo Ideacentre 510A-15Arr FirmwareLenovo Thinkagile Hx1320Lenovo Thinkstation Thinkstation P318Lenovo Thinkserver Ts560Lenovo Qt M410 FirmwareLenovo Yangtian Afq150 FirmwareLenovo Thinkagile Mx 1U - Mx3321 H FirmwareLenovo Thinkagile Mx Edge- Mx1020 FirmwareLenovo Thinkagile Vx1320 FirmwareLenovo Qitian A815 FirmwareLenovo Thinksystem Dx1100U FirmwareLenovo Ideacentre M70A Gen 2Lenovo Thinkagile Mx1021Lenovo Ideacentre Mini 5-01Imh05Lenovo Thinkagile Hx5531Lenovo Thinkserver Rd450Lenovo Ideacentre M90A Gen 3 FirmwareLenovo Ideacentre 720-18Apr FirmwareLenovo Thinksystem Hr630X FirmwareLenovo V520 FirmwareLenovo Thinksystem Hr650X FirmwareLenovo Thinkstation P320 Workstation FirmwareLenovo Thinkstation P348 WorkstationLenovo Thinkserver Rd450 FirmwareLenovo V50S-07ImbLenovo Ideacentre M75T Gen 2 FirmwareLenovo Ideacentre M910Q FirmwareLenovo Ideacentre M720QLenovo Thinkserver Rs160Lenovo Thinkagile Hx2330Lenovo Ideacentre M75Q-1 FirmwareLenovo Ideacentre G5-14Imb05Lenovo Ideacentre Gaming 5 17Acn7Lenovo Ideacentre A340-24Iwl All-In-One FirmwareLenovo Yangtian Afq150Lenovo Legion T530-28Apr FirmwareLenovo Thinkagile Vx 2U4NLenovo Ideacentre Aio 3-24Iil5Lenovo Ideacentre G5-14Amr05 FirmwareLenovo Ideacentre G5-14Imb05 FirmwareLenovo Ideacentre M720S FirmwareLenovo V50T-13ImbLenovo V530-15ArrLenovo Thinkagile Hx7521 FirmwareLenovo Thinkagile Mx 1U - Mx3321 F FirmwareLenovo Ideacentre 5-14Are05 FirmwareLenovo Thinkagile Hx1520-RLenovo Ideacentre M70QLenovo Ideacentre M800Lenovo Thinkagile Vx3330Lenovo Thinkstation P720 WorkstationLenovo Thinkcentre E75T FirmwareLenovo V530-24Icb All-In-OneLenovo Thinkagile Vx3320 Lenovo Ideacentre M70TLenovo Thinkagile Hx5521Lenovo Ideacentre M920T FirmwareLenovo Thinkagile Hx1331 FirmwareLenovo Ideacentre Gaming 5 17Iab7 FirmwareLenovo Thinkcentre E75TLenovo Ideacentre Aio 3-22Imb05Lenovo Thinkagile Mx3531-F All-FlashLenovo Thinkagile Mx- Hybrid FirmwareLenovo Thinkstation P360 Tiny WorkstationLenovo Thinkserver Sr588 FirmwareLenovo Ideacentre 510A-15ArrLenovo Ideacentre 510A-15IckLenovo Ideacentre A340-22Ast All-In-One FirmwareLenovo Thinkstation P350 WorkstationLenovo Thinkagile Hx3521-GLenovo Ideacentre Mini 5-01Imh05 FirmwareLenovo Ideacentre M90TLenovo V540-24Iwl All-In-OneLenovo Ideacentre Neo 70T Gen 3Lenovo Thinkagile Mx3530 F All FlashLenovo Ideacentre M70A Gen 3Lenovo Thinkstation P340 Tiny Workstation FirmwareLenovo Ideacentre E96Z FirmwareLenovo V530S-07IcbLenovo Thinkagile Hx7820Lenovo Thinkagile Mx- All Flash FirmwareLenovo Ideacentre M910X FirmwareLenovo Ideacentre M70ALenovo Thinkstation P350 Tiny Workstation FirmwareLenovo Thinkagile Hx3721Lenovo Ideacentre M90T FirmwareLenovo Thinkagile Hx7530Lenovo Thinkagile Hx1521-R FirmwareLenovo Ideacentre 510S-07Icb FirmwareLenovo Ideacentre A340-24Icb All-In-OneLenovo Ideacentre M90Q Gen 2Lenovo Ideacentre M70A FirmwareLenovo Ideacentre M910SLenovo Thinkserver Ts560 FirmwareLenovo Thinkagile Vx7820 FirmwareLenovo Thinkagile Hx5530Lenovo Thinkagile Mx1021 FirmwareLenovo Ideacentre M90T Gen 3Lenovo Thinkagile Mx3531 H HybridLenovo V30A-24Iml FirmwareLenovo Thinkagile Vx5520 Lenovo N4610 StorageLenovo Ideacentre M710SLenovo Thinkstation P330 Tiny WorkstationLenovo Ideacentre M920SLenovo Ideacentre M90S Gen 3Lenovo Ideacentre 510S-07IcbLenovo Ideacentre Aio 3-24Ada6 FirmwareLenovo Thinkagile Vx7520 N FirmwareLenovo Thinksystem Hr650XLenovo Thinkserver Ts450Lenovo Thinkstation P520C WorkstationLenovo Ideacentre M625Q FirmwareLenovo Ideacentre Aio 3-22Imb05 FirmwareLenovo Ideacentre G5-14Amr05Lenovo Thinkagile Hx3376Lenovo Ideacentre 3-07Ada05Lenovo Thinkagile Mx3330-H Hybrid FirmwareLenovo Ideacentre M710TLenovo Ideacentre Neo 50S Gen 3Lenovo Thinksmart Core Device For Poly FirmwareLenovo Ideacentre M70Q FirmwareLenovo Thinkagile Hx3331 FirmwareLenovo Thinkstation P360 Tiny Workstation FirmwareLenovo Thinkstation P348 Workstation FirmwareLenovo Thinkagile Hx1321Lenovo Thinkagile Vx 1ULenovo Ideacentre M90Q Tiny FirmwareLenovo Thinkstation P520 WorkstationLenovo Ideacentre M90A Gen 2 FirmwareLenovo V55T Gen 2 13AcnLenovo Thinkagile Hx2321Lenovo Ideacentre M70Q Gen 3Lenovo Ideacentre M90A Gen 2Lenovo V530S-07IcrLenovo V520S FirmwareLenovo Thinkcentre M6600QLenovo Ideacentre Aio 3-24Imb05Lenovo Ideacentre Neo 70T Gen 3 FirmwareLenovo Ideacentre M710S FirmwareLenovo Thinksystem Dx1100ULenovo Thinkagile Hx3330 FirmwareLenovo Ideacentre T540-15Ama G FirmwareLenovo Legion C530-19Icb FirmwareLenovo Ideacentre Gaming 5-14Iob6Lenovo Thinkagile Vx2330 FirmwareLenovo Yoga A940-27Icb All-In-One FirmwareLenovo Thinkstation P620 WorkstationLenovo Thinkagile Vx2320 FirmwareLenovo Ideacentre Neo 50S Gen 3 FirmwareLenovo Thinkcentre M8600SLenovo Thinkagile Hx5530 FirmwareLenovo V50T-13Iob G2Lenovo V530S-07Icb FirmwareLenovo Thinkstation P520C Workstation FirmwareLenovo Thinkcentre E75SLenovo Thinkagile Hx5520 FirmwareLenovo Thinkstation P350 Tiny WorkstationLenovo Ideacentre Aio 3-24Ada6Lenovo Ideacentre 5-14Imb05Lenovo Legion T530-28Icb FirmwareLenovo V35S-07AdaLenovo Thinksmart Hub 500 FirmwareLenovo Thinkagile Hx2330 FirmwareLenovo Ideacentre Aio 3-24Itl6 FirmwareLenovo V30A-22ImlLenovo Thinkagile Hx1520-R FirmwareLenovo Thinksmart Core Device\Lenovo Ideacentre C5-14Imb05 FirmwareLenovo Thinkstation P330 Tiny Workstation FirmwareLenovo Thinkserver Sd350 FirmwareLenovo Ideacentre Neo 50T Gen 3Lenovo Thinkstation P340 Workstation FirmwareLenovo V50S-07Imb FirmwareLenovo Thinkagile Vx3530-GLenovo Ideacentre M80SLenovo Thinkagile Hx5521-CLenovo Thinkagile Hx7530 FirmwareLenovo Thinkserver Rd650Lenovo Thinkagile Vx7820 Lenovo Thinkserver Rs260 FirmwareLenovo Ideacentre A340-22Ast All-In-OneLenovo V35S-07Ada FirmwareLenovo Ideacentre 5-14Iob6Lenovo V55T Gen 2 13Acn FirmwareLenovo Thinkstation P520 Workstation FirmwareLenovo Thinkagile Hx1321 FirmwareLenovo Ideacentre A340-22Iwl All-In-OneLenovo Ideacentre M90ALenovo Thinkagile Mx3331-F All-Flash FirmwareLenovo Thinkserver Rs260Lenovo Ideacentre M70T Gen 3 FirmwareLenovo Ideacentre M900X FirmwareLenovo Thinkagile Vx 2ULenovo Ideacentre Aio 3-24Alc6 FirmwareLenovo Ideacentre M810Z All-In-One FirmwareLenovo Ideacentre M720T FirmwareLenovo Ideacentre M720TLenovo N3310 StorageLenovo Ideacentre A340-24Ick All-In-OneLenovo Ideacentre M920X FirmwareLenovo Ideacentre M60E TinyLenovo Thinkagile Mx- All FlashLenovo Legion T530-28AprLenovo Thinkagile Vx7330Lenovo Thinkagile Hx3320 FirmwareLenovo Thinkagile Mx3330-F All-Flash FirmwareLenovo Legion T5-28Icb05 FirmwareLenovo Ideacentre M80Q Gen 3Lenovo Ideacentre M90Q Gen 3 FirmwareLenovo Thinkstation Stadia Ggp-120 FirmwareLenovo Ideacentre 3 07Iab7Lenovo Ideacentre M90Q TinyLenovo Thinkagile Vx5520 FirmwareLenovo Ideacentre Aio 3-22Itl6Lenovo Ideacentre Aio 3-27Itl6 FirmwareLenovo Thinkagile Hx3330Lenovo Ideacentre M715T FirmwareLenovo Thinkagile Vx3331Lenovo Ideacentre Aio 3-27Imb05Lenovo Ideacentre Aio 3-24Itl6Lenovo Ideacentre Aio 3-24Are05 FirmwareLenovo Ideacentre M80T Gen 3 FirmwareLenovo Qt B415Lenovo Thinkagile Hx5520-CLenovo Ideacentre M715TLenovo Thinkcentre M6600TLenovo Thinkagile Vx7530Lenovo Ideacentre M75Q Gen 2 FirmwareLenovo Thinkserver Rd350Lenovo Ideacentre 5-14Are05Lenovo Thinksmart Core \& Controller Full Room Kit\Lenovo Thinkcentre M610Lenovo Thinkagile Hx2320-ELenovo V50T-13Imb FirmwareLenovo Ideacentre Gaming 5 17Acn7 FirmwareLenovo Thinkserver Ts250 FirmwareLenovo Ideacentre M70A Gen 2 FirmwareLenovo Qt B415 FirmwareLenovo Ideacentre M80Q Gen 3 FirmwareLenovo Ideacentre A340-24Ick All-In-One FirmwareLenovo V50A-22Imb FirmwareLenovo Thinksmart Core \& Controller Kit\Lenovo Thinkstation Thinkstation P318 FirmwareLenovo Thinkagile Mx3530-H Hybrid FirmwareLenovo Thinkagile Vx2320 Lenovo Ideacentre Aio 3-22Ada05Lenovo Thinkagile Mx3520 F- All Flash Lenovo Thinkserver Ts550Lenovo V55T-15AreLenovo V530-22Icb All-In-OneLenovo Thinkagile Vx3520-G Lenovo Ideacentre M910S FirmwareLenovo Ideacentre M900 FirmwareLenovo Thinkagile Hx3520-GLenovo Thinkagile Hx2331Lenovo Ideacentre T540-15Ick FirmwareLenovo Thinkserver Ts460 FirmwareLenovo Ideacentre M90Q Gen 2 FirmwareLenovo Thinkagile Hx3321Lenovo Thinkagile Hx7520Lenovo Thinkagile Vx3330 FirmwareLenovo Ideacentre M920S FirmwareLenovo V55T-15Are FirmwareLenovo Qt M415Lenovo Ideacentre M75NLenovo Ideacentre A340-24Igm All-In-One FirmwareLenovo Thinkagile Vx3720 FirmwareLenovo Ideacentre M75Q Gen 2Lenovo Ideacentre Aio 3-24Imb05 FirmwareLenovo Thinkcentre E75S FirmwareLenovo Thinkagile Vx7330 FirmwareLenovo Ideacentre M710ELenovo Thinkagile Mx3531-F All-Flash FirmwareLenovo Thinkagile Mx 1U - Mx3321 F Lenovo Thinksmart Hub ZoomLenovo Legion T530-28IcbLenovo Thinkagile Vx7320 N FirmwareLenovo Ideacentre M80Q FirmwareLenovo Ideacentre C5-14Imb05Lenovo Thinkagile Hx1021 EdgLenovo Ideacentre M710T FirmwareLenovo Thinksmart Hub TeamsLenovo Thinksmart Hub Zoom FirmwareLenovo Thinkagile Hx3520-G FirmwareLenovo Ideacentre A340-24Iwl All-In-OneLenovo Thinkagile Mx3330-H HybridLenovo Ideacentre Aio 3-22Ada6 FirmwareLenovo Ideacentre M70Q Gen 2 FirmwareLenovo Ideacentre M75S-1Lenovo Yta8900F FirmwareLenovo Thinkagile Mx Edge- Mx1020 Lenovo Thinkstation P320 WorkstationLenovo Ideacentre 5-14Imb05 FirmwareLenovo Thinkagile Vx3720 Lenovo Thinkserver Sr590 FirmwareLenovo Thinkagile Hx3331Lenovo Ideacentre M820Z All-In-One FirmwareLenovo Thinkagile Vx7520 FirmwareLenovo Ideacentre M818ZLenovo Thinkstation P320 Tiny WorkstationLenovo V50A-22ImbLenovo Thinkserver Rd350G FirmwareLenovo Ideacentre 5-14Iob6 FirmwareLenovo Thinkagile Hx5531 FirmwareLenovo Ideacentre Gaming 5-14Acn6Lenovo Ideacentre 5 14Iab7 FirmwareLenovo Ideacentre 3-07Ada05 FirmwareLenovo Thinkagile Vx7530 FirmwareLenovo V530-15Arr FirmwareLenovo Ideacentre M710QLenovo Ideacentre Aio 3-22Ada6Lenovo Ideacentre M715Q FirmwareLenovo Ideacentre E96ZLenovo Qt M415 FirmwareLenovo Ideacentre A340-22Iwl All-In-One FirmwareLenovo Thinkagile Hx2331 FirmwareLenovo Ideacentre M75S Gen 2 FirmwareLenovo Ideacentre Gaming 5-14Acn6 FirmwareLenovo Thinkagile Hx5521 FirmwareLenovo Ideacentre M80T FirmwareLenovo Ideacentre 5-14Acn6 FirmwareLenovo Ideacentre M715SLenovo Ideacentre M80S FirmwareLenovo Ideacentre M920Q FirmwareLenovo Legion T5-26Iob6Lenovo Thinkagile Hx2720-E FirmwareLenovo Ideacentre M910TLenovo Ideacentre M725S FirmwareLenovo Thinkagile Vx3320 FirmwareLenovo Thinkserver Rd550Lenovo Thinksmart Hub Teams FirmwareLenovo Qt M410Lenovo Ideacentre Aio 3-27Itl6Lenovo Ideacentre A340-22Igm All-In-OneLenovo Thinkagile Hx7531Lenovo Thinkstation P340 WorkstationLenovo Thinkagile Mx3530-H HybridLenovo V50T-13Iob G2 FirmwareLenovo Thinkserver Ts550 FirmwareLenovo Ideacentre M900XLenovo Thinkstation P720 Workstation FirmwareLenovo Ideacentre 510A-15Ick FirmwareLenovo Thinkcentre M700QLenovo N3310 Storage FirmwareLenovo Thinkagile Hx5521-C FirmwareLenovo V55T-15ApiLenovo Thinkagile Hx3721 FirmwareLenovo V530-15IcrLenovo Ideacentre 5-14Acn6Lenovo Thinkagile Vx 1SeLenovo V30A-22Iml FirmwareLenovo Thinkagile Vx5530Lenovo Ideacentre M60E Tiny FirmwareLenovo Thinkagile Hx3375Lenovo Ideacentre M720SLenovo Thinkedge Se30Lenovo Ideacentre Aio 3-27Alc6Lenovo Thinkagile Vx3331 FirmwareLenovo Thinkagile Vx 2U4N FirmwareLenovo Thinkagile Vx7531 FirmwareLenovo Ideacentre Aio 3-22Iil5Lenovo Ideacentre M710Q FirmwareLenovo Thinksystem Hr610X FirmwareLenovo Thinkserver Ts250Lenovo Thinksystem Hr610XLenovo Thinkagile Mx3330-F All-FlashLenovo Ideacentre M80TLenovo Ideacentre M90S Gen 3 FirmwareLenovo Ideacentre A340-22Icb All-In-OneLenovo Thinkagile Hx7520 FirmwareLenovo Thinkagile Vx7531Lenovo Ideacentre M625QLenovo Ideacentre M720Q FirmwareLenovo Thinkagile Hx2320 FirmwareLenovo Thinkagile Hx7821Lenovo Ideacentre M700 TinyLenovo Ideacentre 510-15Ick FirmwareLenovo V50A-24Imb FirmwareLenovo Ideacentre M720E FirmwareLenovo Ideacentre M920TLenovo Thinkagile Hx5520Lenovo Thinkstation P320 Tiny Workstation FirmwareLenovo N4610 Storage FirmwareLenovo Ideacentre M70S FirmwareLenovo Ideacentre M70S Gen 3 FirmwareLenovo Thinkagile Hx3376 FirmwareLenovo Thinkagile Mx3520 H- Hybrid FirmwareLenovo Thinkserver Rs160 FirmwareLenovo Thinkagile Vx5530 FirmwareLenovo Ideacentre Aio 3-24Iil5 FirmwareLenovo Ideacentre M725SLenovo Ideacentre M90A FirmwareLenovo V530-15IcbLenovo Ideacentre A340-24Igm All-In-OneLenovo Thinksystem Dx8200D FirmwareLenovo Legion T5-26Iob6 FirmwareLenovo Thinkserver Ts450 FirmwareLenovo Ideacentre A340-22Icb All-In-One FirmwareLenovo Thinkstation P350 Workstation FirmwareLenovo Ideacentre Aio 3-22Iil5 FirmwareLenovo Thinkagile Hx3720Lenovo Thinkstation P330 Workstation 2Nd GenLenovo Thinkagile Vx2330Lenovo Thinkstation P310 Workstation FirmwareLenovo Ideacentre M810Z All-In-OneLenovo Ideacentre M70SLenovo Ideacentre Aio 3-27Alc6 FirmwareLenovo Thinksmart Hub 500Lenovo Ideacentre M910QLenovo Qitian A815Lenovo V540-24Iwl All-In-One FirmwareLenovo Thinkagile Hx3375 FirmwareLenovo Thinkagile Hx2320Lenovo Thinksystem St50 FirmwareLenovo Thinkagile Vx 4ULenovo Ideacentre M910T FirmwareLenovo Thinkagile Mx3530 F All Flash FirmwareLenovo Thinkserver Rd550 FirmwareLenovo Thinkserver Td350Lenovo Ideacentre Aio 3-24Are05Lenovo Ideacentre M75Q-1Lenovo Ideacentre M90T Gen 3 FirmwareLenovo Ideacentre 510-15IckLenovo Ideacentre M80S Gen 3Lenovo Ideacentre M900Lenovo Thinkcentre M700Q FirmwareLenovo Thinkserver Td350 FirmwareLenovo Thinkagile Vx1320 Lenovo Thinkcentre M6600SLenovo Ideacentre A340-22Igm All-In-One FirmwareLenovo Thinkserver Rd350GLenovo Thinkagile Mx- HybridLenovo Ideacentre 510S-07Ick FirmwareLenovo Ideacentre 5 14Iab7Lenovo Thinkagile Hx2321 FirmwareLenovo V30A-24ImlLenovo Ideacentre M70CLenovo Ideacentre Gaming 5-14Iob6 FirmwareLenovo Ideacentre Gaming 5 17Iab7Lenovo Thinkagile Mx3331-H HybridLenovo Ideacentre M715Q 2Nd GenLenovo Thinkagile Hx1320 FirmwareLenovo Thinkserver Ts150Lenovo Ideacentre M715S FirmwareLenovo V520Lenovo Ideacentre M700 Tiny FirmwareLenovo Ideacentre M820Z All-In-OneLenovo Ideacentre 3-07Imb05Lenovo Thinkserver Rd350 FirmwareLenovo Thinkagile Hx5520-C FirmwareLenovo Ideacentre Neo 50T Gen 3 FirmwareLenovo Thinkcentre M8600TLenovo Ideacentre M90S FirmwareLenovo Thinkagile Hx1521-RLenovo Thinkserver Sd350Lenovo Thinkagile Hx7820 FirmwareLenovo Thinkcentre M610 FirmwareLenovo V530-22Icb All-In-One FirmwareLenovo Yoga A940-27Icb All-In-OneLenovo Thinkagile Vx3530-G FirmwareLenovo Ideacentre M715Q 2Nd Gen FirmwareLenovo Thinkagile Hx3521-G FirmwareLenovo Thinkagile Mx3531 H Hybrid FirmwareLenovo Ideacentre M70Q Gen 3 FirmwareLenovo Thinksmart Core Device For LogitechLenovo Ideacentre M715QLenovo Ideacentre M75S-1 FirmwareLenovo Thinkserver Sr860P FirmwareLenovo Thinksystem St50Lenovo Ideacentre A340-22Ick All-In-OneLenovo Thinkagile Mx3331-F All-FlashLenovo Ideacentre A340-24Icb All-In-One FirmwareLenovo V330-20Icb All-In-OneLenovo Thinkagile Hx1021 Edg FirmwareLenovo Thinkstation P330 Workstation FirmwareLenovo Thinkstation P330 Workstation 2Nd Gen FirmwareLenovo Ideacentre T540-15IckLenovo V330-20Icb All-In-One Firmware

Weaknesses

CWE-120

CVSS scores

v3.16.7CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

https://support.lenovo.com/us/en/product_security/LEN-94953

Potentially impacted assets

See if this affects your attack surface

Latest trending attack

Criticaltoday

Google Brotli decoder - Remote Code Execution via compressed requests (Exploitation Check)

This control is the second step of the Patrowl response to CVE-2026-111497 (Node2Shell). It complements the first control of 22 October 2026, which focused on the Node.js runtime, and does not replace it. Why a second control CVE-2026-111497 is an out-of-bounds write in the Google Brotli decoder, the library that decompresses Brotli ("br") data. It was first published as a Node.js vulnerability, because Node.js bundles this decoder. Later publications showed that the flaw is in the library itself. Every product that embeds an affected version of the decoder is concerned, whatever its language or vendor. A public proof of concept demonstrates code execution. Any server that decompresses request bodies sent with "Content-Encoding: br" exposes the decoder to unauthenticated attackers. Known cases include Express 5 and NestJS 11 on Node.js, Koa and Fastify setups, Bun, Envoy and Istio with request decompression enabled, and any application or reverse proxy that decodes Brotli request bodies with an affected library. The flaw also works in the other direction. A malicious server can compromise an unpatched client that decodes a Brotli response, for example Node.js fetch(), Python clients (requests, httpx, aiohttp, Scrapy) with the Brotli or brotlicffi package, or libcurl builds with Brotli support. What this control checks Patrowl sends small, valid Brotli-compressed requests to each asset and observes whether the server decodes them. The check does not depend on the technology: it detects the behaviour, whatever the stack behind it. These requests are what any legitimate client could send. They never reach the vulnerable code path and cannot affect the availability of the service. How to read the result Potentially impacted means the asset decodes Brotli request bodies: the attack surface is exposed. It does not confirm that the asset is vulnerable. The version of the Brotli decoder in use is not visible from the outside. This check covers applications that parse request bodies on their root path. A Not impacted result does not rule out exposure on other routes, nor on the client side. Checking the versions on the servers remains the only exhaustive verification. Two situations are possible. When the decoding is done by your own application or reverse proxy, identify the component and update it. If an update is not possible right away, reject requests with "Content-Encoding: br" at the reverse proxy or WAF. When the asset is hosted on a managed platform or behind a CDN (for example Platform.sh, Upsun or Fastly), the decoding may be done by the provider's edge router, in front of your application. You cannot patch it yourself, but this router handles all the traffic of your site. Ask your provider to confirm that its edge components are patched against CVE-2026-111497. Assets hosted on a managed platform or behind a CDN carry the tag "paas: platform.sh" or "cdn: fastly" in the asset view: for these assets, the Brotli decoding is done by the provider's edge router, in front of your application, and only the provider can patch it. Affected and fixed versions Google Brotli 1.0.3 to 1.2.0 are affected, fixed in 1.0.10, 1.1.1 and 1.2.1. Fixed releases of the main products embedding it: Node.js 22.23.4, 24.22.1 and 26.12.1 (end-of-life lines 20.x and older and 25.x receive no fix), Bun 1.4.4, Envoy 1.37.8, 1.38.6, 1.39.3 and 1.40.0, Istio 1.29.9, 1.30.6 and 1.31.2, Python Brotli 1.2.1 and brotlicffi 1.2.1.0. Products that link against the system library depend on the Brotli package of the Linux distribution. Recommendations Update every component that embeds the Brotli decoder (only real fix). Start with the assets flagged by this control. Restart the processes after the update. Rebuild containers, single-executable applications and appliances that bundle an affected runtime or library. Reduce the exposure until the update is deployed. Reject requests with "Content-Encoding: br" at the reverse proxy, load balancer or WAF, case-insensitively and including lists such as "gzip, br". On Envoy and Istio, disable request decompression for Brotli. Contact your edge provider about the status of the pathing (Fastly / Plateform.sh) Review outbound calls. List the features that fetch content from servers you do not control, and patch the services that host them first.