Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-4211

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Published

2022-04-22T21:15:10.007

Last Modified

2024-11-21T06:37:09.520

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lenovo a340-22icb_firmware - Yes
Hardware lenovo a340-22icb - No
Operating System lenovo a340-22ick_firmware - Yes
Hardware lenovo a340-22ick - No
Operating System lenovo a340-24icb_firmware - Yes
Hardware lenovo a340-24icb - No
Operating System lenovo a340-24ick_firmware - Yes
Hardware lenovo a340-24ick - No
Operating System lenovo a540-24icb_firmware - Yes
Hardware lenovo a540-24icb - No
Operating System lenovo a540-27icb_firmware - Yes
Hardware lenovo a540-27icb - No
Operating System lenovo ideacentre_5-14iob6_firmware - Yes
Hardware lenovo ideacentre_5-14iob6 - No
Operating System lenovo ideacentre_510s-07icb_firmware - Yes
Hardware lenovo ideacentre_510s-07icb - No
Operating System lenovo ideacentre_510s-07ick_firmware - Yes
Hardware lenovo ideacentre_510s-07ick - No
Operating System lenovo ideacentre_aio_3-22ada6_firmware - Yes
Hardware lenovo ideacentre_aio_3-22ada6 - No
Operating System lenovo ideacentre_aio_3-22iil5_firmware - Yes
Hardware lenovo ideacentre_aio_3-22iil5 - No
Operating System lenovo ideacentre_aio_3-22itl6_firmware - Yes
Hardware lenovo ideacentre_aio_3-22itl6 - No
Operating System lenovo ideacentre_aio_3-24ada6_firmware - Yes
Hardware lenovo ideacentre_aio_3-24ada6 - No
Operating System lenovo ideacentre_aio_3-24iil5_firmware - Yes
Hardware lenovo ideacentre_aio_3-24iil5 - No
Operating System lenovo ideacentre_aio_3-24itl6_firmware - Yes
Hardware lenovo ideacentre_aio_3-24itl6 - No
Operating System lenovo ideacentre_aio_3-27itl6_firmware - Yes
Hardware lenovo ideacentre_aio_3-27itl6 - No
Operating System lenovo ideacentre_creator_5-14iob6_firmware - Yes
Hardware lenovo ideacentre_creator_5-14iob6 - No
Operating System lenovo ideacentre_gaming_5-14iob6_firmware - Yes
Hardware lenovo ideacentre_gaming_5-14iob6 - No
Operating System lenovo se30_firmware - Yes
Hardware lenovo se30 - No
Operating System lenovo thinkcentre_m600_firmware - Yes
Hardware lenovo thinkcentre_m600 - No
Operating System lenovo thinkcentre_m700_tiny_firmware - Yes
Hardware lenovo thinkcentre_m700_tiny - No
Operating System lenovo thinkcentre_m70a_firmware - Yes
Hardware lenovo thinkcentre_m70a - No
Operating System lenovo thinkcentre_m710e_firmware - Yes
Hardware lenovo thinkcentre_m710e - No
Operating System lenovo thinkcentre_m710q_firmware - Yes
Hardware lenovo thinkcentre_m710q - No
Operating System lenovo thinkcentre_m710q_\(10yc\)_firmware - Yes
Hardware lenovo thinkcentre_m710q_\(10yc\) - No
Operating System lenovo thinkcentre_m710s_firmware - Yes
Hardware lenovo thinkcentre_m710s - No
Operating System lenovo thinkcentre_m710t_firmware - Yes
Hardware lenovo thinkcentre_m710t - No
Operating System lenovo thinkcentre_m720e_firmware - Yes
Hardware lenovo thinkcentre_m720e - No
Operating System lenovo thinkcentre_m75n_firmware - Yes
Hardware lenovo thinkcentre_m75n - No
Operating System lenovo thinkcentre_m800_firmware - Yes
Hardware lenovo thinkcentre_m800 - No
Operating System lenovo thinkcentre_m810z_firmware - Yes
Hardware lenovo thinkcentre_m810z - No
Operating System lenovo thinkcentre_m820z_firmware - Yes
Hardware lenovo thinkcentre_m820z - No
Operating System lenovo thinkcentre_m900_firmware - Yes
Hardware lenovo thinkcentre_m900 - No
Operating System lenovo thinkcentre_m900x_firmware - Yes
Hardware lenovo thinkcentre_m900x - No
Operating System lenovo thinkcentre_m90a_\(gen_2\)_firmware - Yes
Hardware lenovo thinkcentre_m90a_\(gen_2\) - No
Operating System lenovo thinkcentre_m910q_firmware - Yes
Hardware lenovo thinkcentre_m910q - No
Operating System lenovo thinkcentre_m910s_firmware - Yes
Hardware lenovo thinkcentre_m910s - No
Operating System lenovo thinkcentre_m910t_firmware - Yes
Hardware lenovo thinkcentre_m910t - No
Operating System lenovo thinkcentre_m910x_firmware - Yes
Hardware lenovo thinkcentre_m910x - No
Operating System lenovo thinkstation_p310_firmware - Yes
Hardware lenovo thinkstation_p310 - No
Operating System lenovo thinkstation_p320_firmware - Yes
Hardware lenovo thinkstation_p320 - No
Operating System lenovo thinkstation_p320_tiny_firmware - Yes
Hardware lenovo thinkstation_p320_tiny - No
Operating System lenovo v30a-22iml_firmware - Yes
Hardware lenovo v30a-22iml - No
Operating System lenovo v30a-24iml_firmware - Yes
Hardware lenovo v30a-24iml - No
Operating System lenovo v410z_firmware - Yes
Hardware lenovo v410z - No
Operating System lenovo v50t-13iob_g2_firmware - Yes
Hardware lenovo v50t-13iob_g2 - No
Operating System lenovo v520_firmware - Yes
Hardware lenovo v520 - No
Operating System lenovo v520s_firmware - Yes
Hardware lenovo v520s - No
Operating System lenovo v530-15icb_firmware - Yes
Hardware lenovo v530-15icb - No
Operating System lenovo v530-15icr_firmware - Yes
Hardware lenovo v530-15icr - No
Operating System lenovo v530s-07icb_firmware - Yes
Hardware lenovo v530s-07icb - No
Operating System lenovo v530s-07icr_firmware - Yes
Hardware lenovo v530s-07icr - No
Operating System lenovo v540-24iwl_firmware - Yes
Hardware lenovo v540-24iwl - No
References