CVEvulnerability
CVE-2021-3599
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected configurations
• lenovo thinkpad x380 yoga firmware (< 2020-10-31)
• lenovo thinkpad x1 fold gen 1 firmware (< 2021-10-29)
• lenovo thinkpad yoga 260 firmware (< 2021-10-25)
• lenovo thinkpad yoga 11e 3rd gen firmware (< 2021-10-31)
• lenovo thinkpad yoga 15 firmware (< n19et66w)
• lenovo thinkpad yoga 370 firmware (< 2021-10-31)
• lenovo thinkpad x12 detachable gen 1 firmware (< 2021-10-31)
• lenovo thinkpad x390 firmware (< n2jet96w)
• lenovo thinkpad yoga 11e 4th gen firmware (< 2021-10-31)
• lenovo thinkpad yoga 11e 5th gen firmware (< 2021-10-31)
• lenovo thinkpad x250 firmware (< 2021-10-31)
• lenovo thinkpad x260 firmware (< 2021-10-31)
• lenovo thinkpad x390 yoga firmware (< n2let87w)
• lenovo thinkpad x280 firmware (< n20et58w)
• lenovo thinkpad x1 titanium firmware (< n2met51w)
• lenovo thinkpad x270 firmware (< 2021-10-29)
• lenovo thinkpad x1 carbon 5th gen kabylake firmware (< n1met66w)
• lenovo thinkpad x13 gen 1 firmware (< n2yet31w)
• lenovo thinkpad x13 gen 2 firmware (< n35et41w)
• lenovo thinkpad x13 yoga gen 1 firmware (< n2uet56w)
• lenovo thinkpad x13 yoga gen 2 firmware (< n39et47w)
• lenovo thinkpad x1 carbon 5th gen skylake firmware (< n1met66w)
• lenovo thinkpad x1 yoga 1st gen firmware (< n1fet76w)
• lenovo thinkpad x1 yoga 3rd gen firmware (< n25et57w)
• lenovo thinkpad x1 yoga 4th gen firmware (< n2het64w)
• lenovo thinkpad x1 yoga gen 5 firmware (< n2wet30w)
• lenovo thinkpad x1 carbon 4th gen firmware (< n1fet76w)
• lenovo thinkpad 10 firmware (< 2021-10-25)
• lenovo thinkpad x1 nano gen 1 firmware (< n2tet67w)
• lenovo thinkpad x1 extreme firmware (< n2eet54w)
• lenovo thinkpad x1 extreme 2nd firmware (< n2oet53w)
• lenovo thinkpad x1 extreme gen 3 firmware (< n2vet33w)
• lenovo thinkpad t460s firmware (< n1cet84w)
• lenovo thinkpad s2 gen 6 firmware (< 2021-10-31)
• lenovo thinkpad x1 carbon gen 6 firmware (< n23et78w)
• lenovo thinkpad x1 carbon gen 7 firmware (< n2het64w)
• lenovo thinkpad x1 carbon gen 8 firmware (< n2het64w)
• lenovo thinkpad t560 firmware (< n1ket52w)
• lenovo thinkpad t460p firmware (< 2021-10-29)
• lenovo thinkpad w550s firmware (< n11et54w)
• lenovo thinkpad t590 firmware (< n2iet96w)
• lenovo thinkpad t570 firmware (< n1vet57w)
• lenovo thinkpad s2 yoga gen 6 firmware (< 2021-10-31)
• lenovo thinkpad t480 firmware (< n24et65w)
• lenovo thinkpad x1 tablet firmware (< n1let92w)
• lenovo thinkpad t550 firmware (< n11et54w)
• lenovo thinkpad x1 carbon 3rd gen firmware (< n14et56w)
• lenovo thinkpad x1 tablet gen 2 firmware (< n1oet56w)
• lenovo thinkpad x1 tablet gen 3 firmware (< 2021-10-29)
• lenovo thinkpad t580 firmware (< n27et43w)
• lenovo thinkpad t480s firmware (< n22et70w)
• lenovo thinkpad t15 firmware (< n2xet32w)
• lenovo thinkpad t460 firmware (< 2021-10-31)
• lenovo thinkpad t470 firmware (< n1qet92w)
• lenovo thinkpad t490 firmware (< n2iet96w)
• lenovo thinkpad t490s firmware (< n2iet96w)
• lenovo thinkpad t14s gen 2 firmware (< n35et41w)
• lenovo thinkpad t14s firmware (< 2021-10-15)
• lenovo thinkpad t470p firmware (< r0fet55w)
• lenovo thinkpad t470s firmware (< 2021-10-29)
… and 76 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-67440 Patch, Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-67440 Patch, Vendor Advisory