MEDIUM🇵🇱 Wersja polska

CVE-2021-3719

CVSS 6.7v3.1pub. 2021-11-12upd. 2024-11-21

A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may allow an attacker with local access and elevated privileges to execute arbitrary code.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Lenovo Thinkcentre E93

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre E93 Firmware

    OS
    Lenovo
    < fbktdfa

  • Lenovo Thinkcentre M4500q

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M4500q Firmware

    OS
    Lenovo
    < fhkt86a

  • Lenovo Thinkcentre M600

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M600 Firmware

    OS
    Lenovo
    < m00kt65a

  • Lenovo Thinkcentre M6500t\/s

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M6500t\/s Firmware

    OS
    Lenovo
    < fbktdfa

  • Lenovo Thinkcentre M700 Tiny

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M700 Tiny Firmware

    OS
    Lenovo
    < fwktb9a

  • Lenovo Thinkcentre M73

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M73 Firmware

    OS
    Lenovo
    < fhkt86a

  • Lenovo Thinkcentre M73p

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M73p Firmware

    OS
    Lenovo
    < fbktdfa

  • Lenovo Thinkcentre M800

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M800 Firmware

    OS
    Lenovo
    < fwktb9a

  • Lenovo Thinkcentre M818z

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M818z Firmware

    OS
    Lenovo
    < m1ekt23a

  • Lenovo Thinkcentre M83

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M83 Firmware

    OS
    Lenovo
    < fbktdfa

  • Lenovo Thinkcentre M8500t\/s

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M8500t\/s Firmware

    OS
    Lenovo
    < fbktdfa

  • Lenovo Thinkcentre M900

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M900 Firmware

    OS
    Lenovo
    < fwktb9a

  • Lenovo Thinkcentre M900x

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M900x Firmware

    OS
    Lenovo
    < fwktb9a

  • Lenovo Thinkcentre M93

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M93 Firmware

    OS
    Lenovo
    < fbktdfa

  • Lenovo Thinkcentre M93p

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M93p Firmware

    OS
    Lenovo
    < fbktdfa
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2019-6188CRITICAL9.8PL ✓same product

Lenovo ThinkPad — niesprawny mechanizm wykrywania naruszenia BIOS

CVE-2019-19705HIGH7.8same product

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before ...

CVE-2016-5247HIGH7.8same product

The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M...

CVE-2022-48181MEDIUM6.7same product

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow a...

CVE-2022-40134MEDIUM4.4same product

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an ...