CVE-2022-40261

An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary code in System Management Mode - an environment more privileged than operating system (OS) and completely isolated from it. Running arbitrary code in SMM additionally bypasses SMM-based SPI flash protections against modifications, which can help an attacker to install a firmware backdoor/implant into BIOS. Such a malicious firmware code in BIOS could persist across operating system re-installs. Additionally, this vulnerability potentially could be used by malicious actors to bypass security mechanisms provided by UEFI firmware (for example, Secure Boot and some types of memory isolation for hypervisors). This issue affects: Module name: OverClockSmiHandler SHA256: a204699576e1a48ce915d9d9423380c8e4c197003baf9d17e6504f0265f3039c Module GUID: 4698C2BD-A903-410E-AD1F-5EEF3A1AE422

• CWE-120
• CWE-120

• https://www.ami.com/security-center/Vendor Advisory
• https://www.binarly.io/advisories/BRLY-2022-003Exploit, Third Party Advisory
• https://www.ami.com/security-center/Vendor Advisory
• https://www.binarly.io/advisories/BRLY-2022-003Exploit, Third Party Advisory

Published

Sep 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-40248An HTML injection vulnerability exists in CERT/CC VINCE soft…5.4
• CVE-2022-4025Inappropriate implementation in Paint in Google Chrome prior…4.3
• CVE-2022-40250An attacker can exploit this vulnerability to elevate privil…8.8
• CVE-2022-40257An HTML injection vulnerability exists in CERT/CC VINCE soft…5.4
• CVE-2022-40258AMI Megarac Weak password hashes for Redfish & API5.3
• CVE-2022-40259MegaRAC Default Credentials Vulnerability9.8
• CVE-2022-40262A potential attacker can execute an arbitrary code at the ti…8.2
• CVE-2022-40263BD Totalys MultiProcessor, versions 1.70 and earlier, contai…7.8
• CVE-2022-40264Improper Limitation of a Pathname to a Restricted Directory …7.1
• CVE-2022-40265Improper Input Validation vulnerability in Mitsubishi Electr…7.5
• CVE-2022-40266Improper Input Validation vulnerability in Mitsubishi Electr…6.5
• CVE-2022-40267Predictable Seed in Pseudo-Random Number Generator (PRNG) vu…9.1