CVEvulnerability

CVE-2021-3970

6.7 MEDIUM Published 2022-04-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected configurations

• lenovo ideapad 3-14ada05 firmware (< e8cn33ww) • lenovo ideapad 3-14ada6 firmware (< hbcn21ww) • lenovo ideapad 3-14alc6 firmware (< glcn43ww) • lenovo ideapad 3-14are05 firmware (< dzcn42ww) • lenovo ideapad 3-15ada6 firmware (< hbcn21ww) • lenovo ideapad 3-15alc6 firmware (< glcn43ww) • lenovo ideapad 3-15are05 firmware (< dzcn42ww) • lenovo ideapad 3-15igl05 firmware (< dvcn23ww) • lenovo ideapad 3-17ada05 firmware (< e8cn33ww) • lenovo ideapad 3-17ada6 firmware (< hbcn21ww) • lenovo ideapad 3-17alc6 firmware (< glcn43ww) • lenovo ideapad 3-17are05 firmware (< dzcn42ww) • lenovo ideapad 3-17iil05 firmware (< emcn52ww) • lenovo ideapad 3-17itl6 firmware (< ggcn33ww) • lenovo ideapad 3-15ada05 firmware (< e8cn33ww) • lenovo l3 15iml05 firmware (< ejcn27ww) • lenovo l3-15itl6 firmware (< gfcn23ww) • lenovo l340-15irh firmware (< bgcn35ww) • lenovo l340-15iwl firmware (< atcn46ww) • lenovo l340-15iwl touch firmware (< atcn46ww) • lenovo l340-17irh firmware (< bgcn35ww) • lenovo l340-17iwl firmware (< atcn46ww) • lenovo legion 5 pro-16ach6 firmware (< hhcn25ww) • lenovo legion 5 pro-16ach6h firmware (< gkcn51ww) • lenovo legion 5 pro-16ith6 firmware (< h1cn46ww) • lenovo legion 5 pro-16ith6h firmware (< h1cn46ww) • lenovo legion 5-15ach6 firmware (< hhcn25ww) • lenovo legion 5-15ach6a firmware (< g9cn28ww) • lenovo legion 5-15ach6h firmware (< gkcn51ww) • lenovo legion 5-15imh6 firmware (< g8cn19ww) • lenovo legion 5-15ith6 firmware (< h1cn46ww) • lenovo legion 5-15ith6h firmware (< h1cn46ww) • lenovo legion 5-17ach6 firmware (< hhcn25ww) • lenovo legion 5-17ach6h firmware (< gkcn51ww) • lenovo legion 5-17ith6 firmware (< h1cn46ww) • lenovo legion 5-17ith6h firmware (< h1cn46ww) • lenovo legion 7-16achg6 firmware (< gkcn51ww) • lenovo legion 7-16ithg6 firmware (< gkcn51ww) • lenovo legion s7-15ach6 firmware (< hacn35ww) • lenovo legion y540-15irh firmware (< bhcn44ww) • lenovo legion y540-15irh-pg0 firmware (< bhcn44ww) • lenovo legion y540-17irh firmware (< bhcn44ww) • lenovo legion y540-17irh-pg0 firmware (< bhcn44ww) • lenovo legion y545 firmware (< bhcn44ww) • lenovo legion y545-pg0 firmware (< bhcn44ww) • lenovo legion y7000-2019 firmware (< bhcn44ww) • lenovo legion y7000-2019-pg0 firmware (< bhcn44ww) • lenovo s14 g2 itl firmware (< ggcn33ww) • lenovo s145-14api firmware (< bucn31ww) • lenovo s145-14ast firmware (< aycn26ww) • lenovo s145-14igm firmware (< awcn28ww) • lenovo s145-14iil firmware (< dkcn54ww) • lenovo s145-15api firmware (< bucn31ww) • lenovo s145-15ast firmware (< aycn26ww) • lenovo s145-15igm firmware (< awcn28ww) • lenovo s145-15iil firmware (< dkcn54ww) • lenovo s540-13api firmware (< cxcn34ww) • lenovo s540-13iml firmware • lenovo slim 7 pro-14ihu5 firmware • lenovo slim 9-14itl05 firmware … and 45 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References