MEDIUM🇵🇱 Wersja polska

CVE-2021-4210

CVSS 6.7v3.1pub. 2022-04-22upd. 2024-11-21

A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Lenovo A540 24icb

    HW
    Lenovo
    all versions

  • Lenovo A540 24icb Firmware

    OS
    Lenovo
    all versions

  • Lenovo A540 27icb

    HW
    Lenovo
    all versions

  • Lenovo A540 27icb Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14imb05 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22ada6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22ada6 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22iil5

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22iil5 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22itl6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22itl6 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24ada6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24ada6 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24iil5

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24iil5 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24itl6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24itl6 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 27itl6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 27itl6 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre C5 14imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre C5 14imb05 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre G5 14imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre G5 14imb05 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Stadia Ggp 120

    HW
    Lenovo
    all versions

  • Lenovo Stadia Ggp 120 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkcentre M700

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M700 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkcentre M700 Tiny

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M700 Tiny Firmware

    OS
    Lenovo
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2019-19705HIGH7.8same product

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before ...

CVE-2019-0130HIGH7.4same product

Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0....

CVE-2019-0135HIGH7.8same product

Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version...

CVE-2016-5247HIGH7.8same product

The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M...

CVE-2023-43567MEDIUM6.7same product

A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may al...