Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-3970

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.

Published

2022-04-22T21:15:09.750

Last Modified

2024-11-21T06:23:15.720

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lenovo ideapad_3-14ada05_firmware < e8cn33ww Yes
Hardware lenovo ideapad_3-14ada05 - No
Operating System lenovo ideapad_3-14ada6_firmware < hbcn21ww Yes
Hardware lenovo ideapad_3-14ada6 - No
Operating System lenovo ideapad_3-14alc6_firmware < glcn43ww Yes
Hardware lenovo ideapad_3-14alc6 - No
Operating System lenovo ideapad_3-14are05_firmware < dzcn42ww Yes
Hardware lenovo ideapad_3-14are05 - No
Operating System lenovo ideapad_3-15ada6_firmware < hbcn21ww Yes
Hardware lenovo ideapad_3-15ada6 - No
Operating System lenovo ideapad_3-15alc6_firmware < glcn43ww Yes
Hardware lenovo ideapad_3-15alc6 - No
Operating System lenovo ideapad_3-15are05_firmware < dzcn42ww Yes
Hardware lenovo ideapad_3-15are05 - No
Operating System lenovo ideapad_3-15igl05_firmware < dvcn23ww Yes
Hardware lenovo ideapad_3-15igl05 - No
Operating System lenovo ideapad_3-17ada05_firmware < e8cn33ww Yes
Hardware lenovo ideapad_3-17ada05 - No
Operating System lenovo ideapad_3-17ada6_firmware < hbcn21ww Yes
Hardware lenovo ideapad_3-17ada6 - No
Operating System lenovo ideapad_3-17alc6_firmware < glcn43ww Yes
Hardware lenovo ideapad_3-17alc6 - No
Operating System lenovo ideapad_3-17are05_firmware < dzcn42ww Yes
Hardware lenovo ideapad_3-17are05 - No
Operating System lenovo ideapad_3-17iil05_firmware < emcn52ww Yes
Hardware lenovo ideapad_3-17iil05 - No
Operating System lenovo ideapad_3-17itl6_firmware < ggcn33ww Yes
Hardware lenovo ideapad_3-17itl6 - No
Operating System lenovo ideapad_3-15ada05_firmware < e8cn33ww Yes
Hardware lenovo ideapad_3-15ada05 - No
Operating System lenovo l3_15iml05_firmware < ejcn27ww Yes
Hardware lenovo l3_15iml05 - No
Operating System lenovo l3-15itl6_firmware < gfcn23ww Yes
Hardware lenovo l3-15itl6 - No
Operating System lenovo l340-15irh_firmware < bgcn35ww Yes
Hardware lenovo l340-15irh - No
Operating System lenovo l340-15iwl_firmware < atcn46ww Yes
Hardware lenovo l340-15iwl - No
Operating System lenovo l340-15iwl_touch_firmware < atcn46ww Yes
Hardware lenovo l340-15iwl_touch - No
Operating System lenovo l340-17irh_firmware < bgcn35ww Yes
Hardware lenovo l340-17irh - No
Operating System lenovo l340-17iwl_firmware < atcn46ww Yes
Hardware lenovo l340-17iwl - No
Operating System lenovo legion_5_pro-16ach6_firmware < hhcn25ww Yes
Hardware lenovo legion_5_pro-16ach6 - No
Operating System lenovo legion_5_pro-16ach6h_firmware < gkcn51ww Yes
Hardware lenovo legion_5_pro-16ach6h - No
Operating System lenovo legion_5_pro-16ith6_firmware < h1cn46ww Yes
Hardware lenovo legion_5_pro-16ith6 - No
Operating System lenovo legion_5_pro-16ith6h_firmware < h1cn46ww Yes
Hardware lenovo legion_5_pro-16ith6h - No
Operating System lenovo legion_5-15ach6_firmware < hhcn25ww Yes
Hardware lenovo legion_5-15ach6 - No
Operating System lenovo legion_5-15ach6a_firmware < g9cn28ww Yes
Hardware lenovo legion_5-15ach6a - No
Operating System lenovo legion_5-15ach6h_firmware < gkcn51ww Yes
Hardware lenovo legion_5-15ach6h - No
Operating System lenovo legion_5-15imh6_firmware < g8cn19ww Yes
Hardware lenovo legion_5-15imh6 - No
Operating System lenovo legion_5-15ith6_firmware < h1cn46ww Yes
Hardware lenovo legion_5-15ith6 - No
Operating System lenovo legion_5-15ith6h_firmware < h1cn46ww Yes
Hardware lenovo legion_5-15ith6h - No
Operating System lenovo legion_5-17ach6_firmware < hhcn25ww Yes
Hardware lenovo legion_5-17ach6 - No
Operating System lenovo legion_5-17ach6h_firmware < gkcn51ww Yes
Hardware lenovo legion_5-17ach6h - No
Operating System lenovo legion_5-17ith6_firmware < h1cn46ww Yes
Hardware lenovo legion_5-17ith6 - No
Operating System lenovo legion_5-17ith6h_firmware < h1cn46ww Yes
Hardware lenovo legion_5-17ith6h - No
Operating System lenovo legion_7-16achg6_firmware < gkcn51ww Yes
Hardware lenovo legion_7-16achg6 - No
Operating System lenovo legion_7-16ithg6_firmware < gkcn51ww Yes
Hardware lenovo legion_7-16ithg6 - No
Operating System lenovo legion_s7-15ach6_firmware < hacn35ww Yes
Hardware lenovo legion_s7-15ach6 - No
Operating System lenovo legion_y540-15irh_firmware < bhcn44ww Yes
Hardware lenovo legion_y540-15irh - No
Operating System lenovo legion_y540-15irh-pg0_firmware < bhcn44ww Yes
Hardware lenovo legion_y540-15irh-pg0 - No
Operating System lenovo legion_y540-17irh_firmware < bhcn44ww Yes
Hardware lenovo legion_y540-17irh - No
Operating System lenovo legion_y540-17irh-pg0_firmware < bhcn44ww Yes
Hardware lenovo legion_y540-17irh-pg0 - No
Operating System lenovo legion_y545_firmware < bhcn44ww Yes
Hardware lenovo legion_y545 - No
Operating System lenovo legion_y545-pg0_firmware < bhcn44ww Yes
Hardware lenovo legion_y545-pg0 - No
Operating System lenovo legion_y7000-2019_firmware < bhcn44ww Yes
Hardware lenovo legion_y7000-2019 - No
Operating System lenovo legion_y7000-2019-pg0_firmware < bhcn44ww Yes
Hardware lenovo legion_y7000-2019-pg0 - No
Operating System lenovo s14_g2_itl_firmware < ggcn33ww Yes
Hardware lenovo s14_g2_itl - No
Operating System lenovo s145-14api_firmware < bucn31ww Yes
Hardware lenovo s145-14api - No
Operating System lenovo s145-14ast_firmware < aycn26ww Yes
Hardware lenovo s145-14ast - No
Operating System lenovo s145-14igm_firmware < awcn28ww Yes
Hardware lenovo s145-14igm - No
Operating System lenovo s145-14iil_firmware < dkcn54ww Yes
Hardware lenovo s145-14iil - No
Operating System lenovo s145-15api_firmware < bucn31ww Yes
Hardware lenovo s145-15api - No
Operating System lenovo s145-15ast_firmware < aycn26ww Yes
Hardware lenovo s145-15ast - No
Operating System lenovo s145-15igm_firmware < awcn28ww Yes
Hardware lenovo s145-15igm - No
Operating System lenovo s145-15iil_firmware < dkcn54ww Yes
Hardware lenovo s145-15iil - No
Operating System lenovo s540-13api_firmware < cxcn34ww Yes
Hardware lenovo s540-13api - No
Operating System lenovo s540-13iml_firmware - Yes
Hardware lenovo s540-13iml - No
Operating System lenovo slim_7_pro-14ihu5_firmware - Yes
Hardware lenovo slim_7_pro-14ihu5 - No
Operating System lenovo slim_9-14itl05_firmware - Yes
Hardware lenovo slim_9-14itl05 - No
Operating System lenovo v14_g1-iml_firmware < dxcn41ww Yes
Hardware lenovo v14_g1-iml - No
Operating System lenovo v14_g2-acl_firmware < glcn43ww Yes
Hardware lenovo v14_g2-acl - No
Operating System lenovo v14_g2-itl_firmware < ggcn33ww Yes
Hardware lenovo v14_g2-itl - No
Operating System lenovo v14-ada_firmware < e8cn33ww Yes
Hardware lenovo v14-ada - No
Operating System lenovo v14-are_firmware < dzcn42ww Yes
Hardware lenovo v14-are - No
Operating System lenovo v14-igl_firmware < dvcn23ww Yes
Hardware lenovo v14-igl - No
Operating System lenovo v14-iil_firmware < dkcn54ww Yes
Hardware lenovo v14-iil - No
Operating System lenovo v140-15iwl_firmware < atcn46ww Yes
Hardware lenovo v140-15iwl - No
Operating System lenovo v15_g1-iml_firmware < dxcn41ww Yes
Hardware lenovo v15_g1-iml - No
Operating System lenovo v15_g2-alc_firmware < glcn43ww Yes
Hardware lenovo v15_g2-alc - No
Operating System lenovo v15_g2-itl_firmware < ggcn33ww Yes
Hardware lenovo v15_g2-itl - No
Operating System lenovo v15-ada_firmware < e8cn33ww Yes
Hardware lenovo v15-ada - No
Operating System lenovo v15-igl_firmware < dvcn23ww Yes
Hardware lenovo v15-igl - No
Operating System lenovo v15-iil_firmware < dkcn54ww Yes
Hardware lenovo v15-iil - No
Operating System lenovo v17_g2-itl_firmware < ggcn33ww Yes
Hardware lenovo v17_g2-itl - No
Operating System lenovo v17-iil_firmware < emcn52ww Yes
Hardware lenovo v17-iil - No
Operating System lenovo v340-17iwl_firmware < atcn46ww Yes
Hardware lenovo v340-17iwl - No
Operating System lenovo yoga_7-14acn6_firmware < h9cn26ww Yes
Hardware lenovo yoga_7-14acn6 - No
Operating System lenovo yoga_c740-14iml_firmware < bncn44ww Yes
Hardware lenovo yoga_c740-14iml - No
Operating System lenovo yoga_c740-15iml_firmware < bncn44ww Yes
Hardware lenovo yoga_c740-15iml - No
Operating System lenovo yoga_c940-14iil_firmware - Yes
Hardware lenovo yoga_c940-14iil - No
Operating System lenovo yoga_slim_7_pro-14ach5_d_firmware < hecn24ww Yes
Hardware lenovo yoga_slim_7_pro-14ach5_d - No
Operating System lenovo yoga_slim_7_pro-14ach5_firmware < gzcn27ww Yes
Hardware lenovo yoga_slim_7_pro-14ach5 - No
Operating System lenovo yoga_slim_7_pro-14ach5_o_firmware < gzcn27ww Yes
Hardware lenovo yoga_slim_7_pro-14ach5_o - No
Operating System lenovo yoga_slim_7_pro-14ach5_od_firmware < hecn24ww Yes
Hardware lenovo yoga_slim_7_pro-14ach5_od - No
Operating System lenovo yoga_slim_7_pro-14arh5_firmware < g7cn21ww Yes
Hardware lenovo yoga_slim_7_pro-14arh5 - No
Operating System lenovo yoga_slim_7_pro-14ihu5_firmware - Yes
Hardware lenovo yoga_slim_7_pro-14ihu5 - No
Operating System lenovo yoga_slim_7_pro-14ihu5_o_firmware - Yes
Hardware lenovo yoga_slim_7_pro-14ihu5_o - No
Operating System lenovo yoga_slim_7_pro-14itl5_firmware - Yes
Hardware lenovo yoga_slim_7_pro-14itl5 - No
Operating System lenovo yoga_slim_9-14itl05_firmware - Yes
Hardware lenovo yoga_slim_9-14itl05 - No
Operating System lenovo ideapad_3-14iil05_firmware < dvcn23ww Yes
Hardware lenovo ideapad_3-14iil05 - No
Operating System lenovo ideapad_3-14igl05_firmware < emcn52ww Yes
Hardware lenovo ideapad_3-14igl05 - No
Operating System lenovo ideapad_3-14iml05_firmware < dxcn41ww Yes
Hardware lenovo ideapad_3-14iml05 - No
Operating System lenovo ideapad_3-14itl05_firmware < gccn26ww Yes
Hardware lenovo ideapad_3-14itl05 - No
Operating System lenovo ideapad_3-14itl6_firmware < ggcn33ww Yes
Hardware lenovo ideapad_3-14itl6 - No
Operating System lenovo ideapad_3-15iil05_firmware < emcn52ww Yes
Hardware lenovo ideapad_3-15iil05 - No
Operating System lenovo ideapad_3-15iml05_firmware < dxcn41ww Yes
Hardware lenovo ideapad_3-15iml05 - No
Operating System lenovo ideapad_3-15itl05_firmware < gccn26ww Yes
Hardware lenovo ideapad_3-15itl05 - No
Operating System lenovo ideapad_3-15itl6_firmware < ggcn33ww Yes
Hardware lenovo ideapad_3-15itl6 - No
Operating System lenovo ideapad_3-17iml05_firmware < dxcn41ww Yes
Hardware lenovo ideapad_3-17iml05 - No
Operating System lenovo ideapad_5-15are05_firmware < e7cn44ww Yes
Hardware lenovo ideapad_5-15are05 - No
Operating System lenovo ideapad_5-15iil05_firmware < dpcn54ww Yes
Hardware lenovo ideapad_5-15iil05 - No
Operating System lenovo ideapad_creator_5-15imh05_firmware < egcn36ww Yes
Hardware lenovo ideapad_creator_5-15imh05 - No
Operating System lenovo ideapad_gaming_3-15arh05_firmware < fccn17ww Yes
Hardware lenovo ideapad_gaming_3-15arh05 - No
Operating System lenovo ideapad_gaming_3-15imh05_firmware < egcn36ww Yes
Hardware lenovo ideapad_gaming_3-15imh05 - No
References