Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-3786

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.

Published

2021-11-12T22:15:08.110

Last Modified

2024-11-21T06:22:25.627

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.4 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

3.9

Impact Score

2.9

Weaknesses

Type: Secondary
CWE-20
Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	lenovo	thinkpad_x380_yoga_firmware	< 2020-10-31	Yes
Hardware	lenovo	thinkpad_x380_yoga	-	No
Operating System	lenovo	thinkpad_x1_fold_gen_1_firmware	< 2021-10-29	Yes
Hardware	lenovo	thinkpad_x1_fold_gen_1	-	No
Operating System	lenovo	thinkpad_yoga_260_firmware	< 2021-10-25	Yes
Hardware	lenovo	thinkpad_yoga_260	-	No
Operating System	lenovo	thinkpad_yoga_11e_3rd_gen_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_yoga_11e_3rd_gen	-	No
Operating System	lenovo	thinkpad_yoga_15_firmware	< n19et66w	Yes
Hardware	lenovo	thinkpad_yoga_15	-	No
Operating System	lenovo	thinkpad_yoga_370_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_yoga_370	-	No
Operating System	lenovo	thinkpad_x12_detachable_gen_1_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_x12_detachable_gen_1	-	No
Operating System	lenovo	thinkpad_x390_firmware	< n2jet96w	Yes
Hardware	lenovo	thinkpad_x390	-	No
Operating System	lenovo	thinkpad_yoga_11e_4th_gen_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_yoga_11e_4th_gen	-	No
Operating System	lenovo	thinkpad_yoga_11e_5th_gen_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_yoga_11e_5th_gen	-	No
Operating System	lenovo	thinkpad_x250_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_x250	-	No
Operating System	lenovo	thinkpad_x260_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_x260	-	No
Operating System	lenovo	thinkpad_x390_yoga_firmware	< n2let87w	Yes
Hardware	lenovo	thinkpad_x390_yoga	-	No
Operating System	lenovo	thinkpad_x280_firmware	< n20et58w	Yes
Hardware	lenovo	thinkpad_x280	-	No
Operating System	lenovo	thinkpad_x1_titanium_firmware	< n2met51w	Yes
Hardware	lenovo	thinkpad_x1_titanium	-	No
Operating System	lenovo	thinkpad_x270_firmware	< 2021-10-29	Yes
Hardware	lenovo	thinkpad_x270	-	No
Operating System	lenovo	thinkpad_x1_carbon_5th_gen_kabylake_firmware	< n1met66w	Yes
Hardware	lenovo	thinkpad_x1_carbon_5th_gen_kabylake	-	No
Operating System	lenovo	thinkpad_x13_gen_1_firmware	< n2yet31w	Yes
Hardware	lenovo	thinkpad_x13_gen_1	-	No
Operating System	lenovo	thinkpad_x13_gen_2_firmware	< n35et41w	Yes
Hardware	lenovo	thinkpad_x13_gen_2	-	No
Operating System	lenovo	thinkpad_x13_yoga_gen_1_firmware	< n2uet56w	Yes
Hardware	lenovo	thinkpad_x13_yoga_gen_1	-	No
Operating System	lenovo	thinkpad_x13_yoga_gen_2_firmware	< n39et47w	Yes
Hardware	lenovo	thinkpad_x13_yoga_gen_2	-	No
Operating System	lenovo	thinkpad_x1_carbon_5th_gen_skylake_firmware	< n1met66w	Yes
Hardware	lenovo	thinkpad_x1_carbon_5th_gen_skylake	-	No
Operating System	lenovo	thinkpad_x1_yoga_1st_gen_firmware	< n1fet76w	Yes
Hardware	lenovo	thinkpad_x1_yoga_1st_gen	-	No
Operating System	lenovo	thinkpad_x1_yoga_3rd_gen_firmware	< n25et57w	Yes
Hardware	lenovo	thinkpad_x1_yoga_3rd_gen	-	No
Operating System	lenovo	thinkpad_x1_yoga_4th_gen_firmware	< n2het64w	Yes
Hardware	lenovo	thinkpad_x1_yoga_4th_gen	-	No
Operating System	lenovo	thinkpad_x1_yoga_gen_5_firmware	< n2wet30w	Yes
Hardware	lenovo	thinkpad_x1_yoga_gen_5	-	No
Operating System	lenovo	thinkpad_x1_carbon_4th_gen_firmware	< n1fet76w	Yes
Hardware	lenovo	thinkpad_x1_carbon_4th_gen	-	No
Operating System	lenovo	thinkpad_10_firmware	< 2021-10-25	Yes
Hardware	lenovo	thinkpad_10	-	No
Operating System	lenovo	thinkpad_x1_nano_gen_1_firmware	< n2tet67w	Yes
Hardware	lenovo	thinkpad_x1_nano_gen_1	-	No
Operating System	lenovo	thinkpad_x1_extreme_firmware	< n2eet54w	Yes
Hardware	lenovo	thinkpad_x1_extreme	-	No
Operating System	lenovo	thinkpad_x1_extreme_2nd_firmware	< n2oet53w	Yes
Hardware	lenovo	thinkpad_x1_extreme_2nd	-	No
Operating System	lenovo	thinkpad_x1_extreme_gen_3_firmware	< n2vet33w	Yes
Hardware	lenovo	thinkpad_x1_extreme_gen_3	-	No
Operating System	lenovo	thinkpad_t460s_firmware	< n1cet84w	Yes
Hardware	lenovo	thinkpad_t460s	-	No
Operating System	lenovo	thinkpad_s2_gen_6_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_s2_gen_6	-	No
Operating System	lenovo	thinkpad_x1_carbon_gen_6_firmware	< n23et78w	Yes
Hardware	lenovo	thinkpad_x1_carbon_gen_6	-	No
Operating System	lenovo	thinkpad_x1_carbon_gen_7_firmware	< n2het64w	Yes
Hardware	lenovo	thinkpad_x1_carbon_gen_7	-	No
Operating System	lenovo	thinkpad_x1_carbon_gen_8_firmware	< n2het64w	Yes
Hardware	lenovo	thinkpad_x1_carbon_gen_8	-	No
Operating System	lenovo	thinkpad_t560_firmware	< n1ket52w	Yes
Hardware	lenovo	thinkpad_t560	-	No
Operating System	lenovo	thinkpad_t460p_firmware	< 2021-10-29	Yes
Hardware	lenovo	thinkpad_t460p	-	No
Operating System	lenovo	thinkpad_w550s_firmware	< n11et54w	Yes
Hardware	lenovo	thinkpad_w550s	-	No
Operating System	lenovo	thinkpad_t590_firmware	< n2iet96w	Yes
Hardware	lenovo	thinkpad_t590	-	No
Operating System	lenovo	thinkpad_t570_firmware	< n1vet57w	Yes
Hardware	lenovo	thinkpad_t570	-	No
Operating System	lenovo	thinkpad_s2_yoga_gen_6_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_s2_yoga_gen_6	-	No
Operating System	lenovo	thinkpad_t480_firmware	< n24et65w	Yes
Hardware	lenovo	thinkpad_t480	-	No
Operating System	lenovo	thinkpad_x1_tablet_firmware	< n1let92w	Yes
Hardware	lenovo	thinkpad_x1_tablet	-	No
Operating System	lenovo	thinkpad_t550_firmware	< n11et54w	Yes
Hardware	lenovo	thinkpad_t550	-	No
Operating System	lenovo	thinkpad_x1_carbon_3rd_gen_firmware	< n14et56w	Yes
Hardware	lenovo	thinkpad_x1_carbon_3rd_gen	-	No
Operating System	lenovo	thinkpad_x1_tablet_gen_2_firmware	< n1oet56w	Yes
Hardware	lenovo	thinkpad_x1_tablet_gen_2	-	No
Operating System	lenovo	thinkpad_x1_tablet_gen_3_firmware	< 2021-10-29	Yes
Hardware	lenovo	thinkpad_x1_tablet_gen_3	-	No
Operating System	lenovo	thinkpad_t580_firmware	< n27et43w	Yes
Hardware	lenovo	thinkpad_t580	-	No
Operating System	lenovo	thinkpad_t480s_firmware	< n22et70w	Yes
Hardware	lenovo	thinkpad_t480s	-	No
Operating System	lenovo	thinkpad_t15_firmware	< n2xet32w	Yes
Hardware	lenovo	thinkpad_t15	-	No
Operating System	lenovo	thinkpad_t460_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_t460	-	No
Operating System	lenovo	thinkpad_t470_firmware	< n1qet92w	Yes
Hardware	lenovo	thinkpad_t470	-	No
Operating System	lenovo	thinkpad_t490_firmware	< n2iet96w	Yes
Hardware	lenovo	thinkpad_t490	-	No
Operating System	lenovo	thinkpad_t490s_firmware	< n2iet96w	Yes
Hardware	lenovo	thinkpad_t490s	-	No
Operating System	lenovo	thinkpad_t14s_gen_2_firmware	< n35et41w	Yes
Hardware	lenovo	thinkpad_t14s_gen_2	-	No
Operating System	lenovo	thinkpad_t14s_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_t14s	-	No
Operating System	lenovo	thinkpad_t470p_firmware	< r0fet55w	Yes
Hardware	lenovo	thinkpad_t470p	-	No
Operating System	lenovo	thinkpad_t470s_firmware	< 2021-10-29	Yes
Hardware	lenovo	thinkpad_t470s	-	No
Operating System	lenovo	thinkpad_p71_firmware	< 2021-10-29	Yes
Hardware	lenovo	thinkpad_p71	-	No
Operating System	lenovo	thinkpad_t440p_firmware	< 2021-10-29	Yes
Hardware	lenovo	thinkpad_t440p	-	No
Operating System	lenovo	thinkpad_t15_gen_2_firmware	< n34et42w	Yes
Hardware	lenovo	thinkpad_t15_gen_2	-	No
Operating System	lenovo	thinkpad_t15p_gen_1_firmware	< 2021-10-29	Yes
Hardware	lenovo	thinkpad_t15p_gen_1	-	No
Operating System	lenovo	thinkpad_p70_firmware	< n1detb2w	Yes
Hardware	lenovo	thinkpad_p70	-	No
Operating System	lenovo	thinkpad_t15g_gen_1_firmware	< 2021-10-29	Yes
Hardware	lenovo	thinkpad_t15g_gen_1	-	No
Operating System	lenovo	thinkpad_t14_gen_1_firmware	< n2xet32w	Yes
Hardware	lenovo	thinkpad_t14_gen_1	-	No
Operating System	lenovo	thinkpad_t14_gen_2_firmware	< n34et42w	Yes
Hardware	lenovo	thinkpad_t14_gen_2	-	No
Operating System	lenovo	thinkpad_p73_firmware	< n2net47w	Yes
Hardware	lenovo	thinkpad_p73	-	No
Operating System	lenovo	thinkpad_s540_firmware	< 2021-10-25	Yes
Hardware	lenovo	thinkpad_s540	-	No
Operating System	lenovo	thinkpad_p72_firmware	< n2cet60w	Yes
Hardware	lenovo	thinkpad_p72	-	No
Operating System	lenovo	thinkpad_l380_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_l380	-	No
Operating System	lenovo	thinkpad_s5_2nd_gen_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_s5_2nd_gen	-	No
Operating System	lenovo	thinkpad_p15v_gen_1_firmware	< 2021-10-29	Yes
Hardware	lenovo	thinkpad_p15v_gen_1	-	No
Operating System	lenovo	thinkpad_p53_firmware	< n2net47w	Yes
Hardware	lenovo	thinkpad_p53	-	No
Operating System	lenovo	thinkpad_p53s_firmware	< n2iet96w	Yes
Hardware	lenovo	thinkpad_p53s	-	No
Operating System	lenovo	thinkpad_p43s_firmware	< n2iet96w	Yes
Hardware	lenovo	thinkpad_p43s	-	No
Operating System	lenovo	thinkpad_p51_firmware	< n1uet82w	Yes
Hardware	lenovo	thinkpad_p51	-	No
Operating System	lenovo	thinkpad_p51s_firmware	< n1vet57w	Yes
Hardware	lenovo	thinkpad_p51s	-	No
Operating System	lenovo	thinkpad_p50_firmware	< n1eet92w	Yes
Hardware	lenovo	thinkpad_p50	-	No
Operating System	lenovo	thinkpad_p52_firmware	< n2cet60w	Yes
Hardware	lenovo	thinkpad_p52	-	No
Operating System	lenovo	thinkpad_p52s_firmware	< n27et43w	Yes
Hardware	lenovo	thinkpad_p52s	-	No
Operating System	lenovo	thinkpad_p50s_firmware	< n1ket52w	Yes
Hardware	lenovo	thinkpad_p50s	-	No
Operating System	lenovo	thinkpad_l570_firmware	< n1xet74w	Yes
Hardware	lenovo	thinkpad_l570	-	No
Operating System	lenovo	thinkpad_p17_gen_1_firmware	< 2021-10-29	Yes
Hardware	lenovo	thinkpad_p17_gen_1	-	No
Operating System	lenovo	thinkpad_l580_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_l580	-	No
Operating System	lenovo	thinkpad_p14s_gen_1_firmware	< n2xet32w	Yes
Hardware	lenovo	thinkpad_p14s_gen_1	-	No
Operating System	lenovo	thinkpad_p14s_gen_2_firmware	< n34et42w	Yes
Hardware	lenovo	thinkpad_p14s_gen_2	-	No
Operating System	lenovo	thinkpad_p15_gen_1_firmware	< 2021-10-29	Yes
Hardware	lenovo	thinkpad_p15_gen_1	-	No
Operating System	lenovo	thinkpad_p15s_gen_1_firmware	< n2xet32w	Yes
Hardware	lenovo	thinkpad_p15s_gen_1	-	No
Operating System	lenovo	thinkpad_p15s_gen_2_firmware	< n34et42w	Yes
Hardware	lenovo	thinkpad_p15s_gen_2	-	No
Operating System	lenovo	thinkpad_l590_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_l590	-	No
Operating System	lenovo	thinkpad_l380_yoga_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_l380_yoga	-	No
Operating System	lenovo	thinkpad_l490_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_l490	-	No
Operating System	lenovo	thinkpad_l560_firmware	< n1het92w	Yes
Hardware	lenovo	thinkpad_l560	-	No
Operating System	lenovo	thinkpad_p1_firmware	< n2eet54w	Yes
Hardware	lenovo	thinkpad_p1	-	No
Operating System	lenovo	thinkpad_p1_gen_2_firmware	< n2oet53w	Yes
Hardware	lenovo	thinkpad_p1_gen_2	-	No
Operating System	lenovo	thinkpad_p1_gen_3_firmware	< n2vet33w	Yes
Hardware	lenovo	thinkpad_p1_gen_3	-	No
Operating System	lenovo	thinkpad_l480_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_l480	-	No
Operating System	lenovo	thinkpad_l470_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_l470	-	No
Operating System	lenovo	thinkpad_l460_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_l460	-	No
Operating System	lenovo	thinkpad_e490_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_e490	-	No
Operating System	lenovo	thinkpad_helix_firmware	< n17etb6w	Yes
Hardware	lenovo	thinkpad_helix	-	No
Operating System	lenovo	thinkpad_l390_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_l390	-	No
Operating System	lenovo	thinkpad_l390_yoga_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_l390_yoga	-	No
Operating System	lenovo	thinkpad_e15_gen_3_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_e15_gen_3	-	No
Operating System	lenovo	thinkpad_l14_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_l14	-	No
Operating System	lenovo	thinkpad_l13_gen_2_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_l13_gen_2	-	No
Operating System	lenovo	thinkpad_l15_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_l15	-	No
Operating System	lenovo	thinkpad_l15_gen_2_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_l15_gen_2	-	No
Operating System	lenovo	thinkpad_l13_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_l13	-	No
Operating System	lenovo	thinkpad_e14_gen_3_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_e14_gen_3	-	No
Operating System	lenovo	thinkpad_e590_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_e590	-	No
Operating System	lenovo	thinkpad_e580_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_e580	-	No
Operating System	lenovo	thinkpad_l13_yoga_gen_2_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_l13_yoga_gen_2	-	No
Operating System	lenovo	thinkpad_e570_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_e570	-	No
Operating System	lenovo	thinkpad_l13_yoga_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_l13_yoga	-	No
Operating System	lenovo	thinkpad_11e_3rd_gen_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_11e_3rd_gen	-	No
Operating System	lenovo	thinkpad_e480_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_e480	-	No
Operating System	lenovo	thinkpad_e14_firmware	≤ 2021-10-15	Yes
Hardware	lenovo	thinkpad_e14	-	No
Operating System	lenovo	thinkpad_e470_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_e470	-	No
Operating System	lenovo	thinkpad_e15_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_e15	-	No
Operating System	lenovo	thinkpad_e15_gen_2_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_e15_gen_2	-	No
Operating System	lenovo	thinkpad_25_firmware	< n1qet92w	Yes
Hardware	lenovo	thinkpad_25	-	No
Operating System	lenovo	thinkpad_e14_gen_2_firmware	< 2021-10-15	Yes
Hardware	lenovo	thinkpad_e14_gen_2	-	No
Operating System	lenovo	thinkpad_13_gen_2_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_13_gen_2	-	No
Operating System	lenovo	thinkpad_11e_4th_gen_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_11e_4th_gen	-	No
Operating System	lenovo	thinkpad_11e_yoga_gen_6_firmware	< 2021-10-31	Yes
Hardware	lenovo	thinkpad_11e_yoga_gen_6	-	No
Operating System	lenovo	ideapad_s940-14iwl_firmware	≤ 12.0.81.1753	Yes
Hardware	lenovo	ideapad_s940-14iwl	-	No
Operating System	lenovo	ideapad_yoga_s940-14iwl_firmware	≤ 12.0.81.1753	Yes
Hardware	lenovo	ideapad_yoga_s940-14iwl	-	No
Operating System	lenovo	v330-15isk_firmware	≤ 11.8.86.3877	Yes
Hardware	lenovo	v330-15isk	-	No
Operating System	lenovo	v330-15ikb_firmware	≤ 11.8.86.3877	Yes
Hardware	lenovo	v330-15ikb	-	No
Operating System	lenovo	v130-15igm_firmware	≤ 6vcn42ww	Yes
Hardware	lenovo	v130-15igm	-	No
Operating System	lenovo	thinkpad_x1_yoga_4th_gen_firmware	< n2qet42w	Yes
Hardware	lenovo	thinkpad_x1_yoga_4th_gen	-	No
Operating System	lenovo	thinkpad_x1_carbon_gen_7_firmware	< n2qet42w	Yes
Hardware	lenovo	thinkpad_x1_carbon_gen_7	-	No
Operating System	lenovo	thinkpad_x1_carbon_gen_8_firmware	< n2qet42w	Yes
Hardware	lenovo	thinkpad_x1_carbon_gen_8	-	No

References

https://support.lenovo.com/us/en/product_security/LEN-67440 Patch, Vendor Advisory ([email protected])
https://support.lenovo.com/us/en/product_security/LEN-67440 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)