CVEvulnerability

CVE-2021-4212

6.7 MEDIUM Published 2022-04-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected configurations

• lenovo c340-14iml firmware • lenovo c340-15iml firmware • lenovo d330-10igm firmware • lenovo duet 3-10igl5 firmware • lenovo e41-50 firmware • lenovo flex-14iml firmware • lenovo flex-15iml firmware • lenovo ideapad 3-14are05 firmware • lenovo ideapad 3-15are05 firmware • lenovo ideapad 3-17are05 firmware • lenovo ideapad 5-14alc05 firmware • lenovo ideapad 5-14are05 firmware • lenovo ideapad 5-15itl05 firmware • lenovo ideapad 5 pro-14acn6 firmware • lenovo ideapad 5 pro-14itl6 firmware • lenovo ideapad 5 pro-16ihu6 firmware • lenovo ideapad creator 5-15imh05 firmware • lenovo ideapad gaming 3-15ach6 firmware • lenovo ideapad gaming 3-15arh05 firmware • lenovo ideapad gaming 3-15imh05 firmware • lenovo l340-15irh firmware • lenovo l340-15iwl firmware • lenovo l340-15iwl touch firmware • lenovo l340-17irh firmware • lenovo l340-17iwl firmware • lenovo legion y540-15irh firmware • lenovo legion y540-15irh-pg0 firmware • lenovo legion y540-17irh firmware • lenovo legion y540-17irh-pg0 firmware • lenovo legion y545 firmware • lenovo legion y545-pg0 firmware • lenovo legion y7000-2019 firmware • lenovo legion y7000-2019-pg0 firmware • lenovo s340-13iml firmware • lenovo s340-14api firmware • lenovo s340-14iml firmware • lenovo s340-15api firmware • lenovo s340-15api touch firmware • lenovo s340-15iml firmware • lenovo s540-14iml firmware • lenovo s540-14iml touch firmware • lenovo s540-15iml firmware • lenovo slim 7-14are05 firmware • lenovo slim 7-14itl05 firmware • lenovo slim 7-15iil05 firmware • lenovo slim 7-15imh05 firmware • lenovo slim 7-15itl05 firmware • lenovo thinkbook 13x itg firmware • lenovo thinkbook 14 g3 itl firmware • lenovo thinkbook plus g2 itg firmware • lenovo v14-are firmware • lenovo v140-15iwl firmware • lenovo v340-17iwl firmware • lenovo yoga 6-13alc6 firmware • lenovo yoga creator 7-15imh05 firmware • lenovo yoga slim 7-14are05 firmware • lenovo yoga slim 7-14iil05 firmware • lenovo yoga slim 7-14itl05 firmware • lenovo yoga slim 7-15iil05 firmware • lenovo yoga slim 7-15imh05 firmware … and 2 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References