MEDIUM🇵🇱 Wersja polska

CVE-2021-4211

CVSS 6.7v3.1pub. 2022-04-22upd. 2024-11-21

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Lenovo A340 22icb

    HW
    Lenovo
    all versions

  • Lenovo A340 22icb Firmware

    OS
    Lenovo
    all versions

  • Lenovo A340 22ick

    HW
    Lenovo
    all versions

  • Lenovo A340 22ick Firmware

    OS
    Lenovo
    all versions

  • Lenovo A340 24icb

    HW
    Lenovo
    all versions

  • Lenovo A340 24icb Firmware

    OS
    Lenovo
    all versions

  • Lenovo A340 24ick

    HW
    Lenovo
    all versions

  • Lenovo A340 24ick Firmware

    OS
    Lenovo
    all versions

  • Lenovo A540 24icb

    HW
    Lenovo
    all versions

  • Lenovo A540 24icb Firmware

    OS
    Lenovo
    all versions

  • Lenovo A540 27icb

    HW
    Lenovo
    all versions

  • Lenovo A540 27icb Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre 510s 07icb

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 510s 07icb Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre 510s 07ick

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 510s 07ick Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14iob6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14iob6 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22ada6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22ada6 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22iil5

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22iil5 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22itl6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 22itl6 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24ada6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24ada6 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24iil5

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24iil5 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24itl6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Aio 3 24itl6 Firmware

    OS
    Lenovo
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2019-19705HIGH7.8same product

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before ...

CVE-2017-3771HIGH7.5same product

System boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because systems were s...

CVE-2016-5247HIGH7.8same product

The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M...

CVE-2023-43567MEDIUM6.7same product

A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may al...

CVE-2023-43568MEDIUM4.4same product

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may a...