CVE-2021-4211

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 22-04-2022 11:15

Last modified: - 11-05-2022 08:47

Total changes: - 3

Description

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Local

Attack vector

High

Availability

High

Confidentiality

High

Integrity

High

Privileges required

Unchanged

Scope

None

User interaction

6.7

Base score

0.8

5.9

Exploitability score

Impact score

Verification logic

AND

vendor=lenovo AND product=a340-22icb_firmware AND version=-

vendor=lenovo AND product=a340-22icb AND version=-

AND

vendor=lenovo AND product=a340-22ick_firmware AND version=-

vendor=lenovo AND product=a340-22ick AND version=-

AND

vendor=lenovo AND product=a340-24icb_firmware AND version=-

vendor=lenovo AND product=a340-24icb AND version=-

AND

vendor=lenovo AND product=a340-24ick_firmware AND version=-

vendor=lenovo AND product=a340-24ick AND version=-

AND

vendor=lenovo AND product=a540-24icb_firmware AND version=-

vendor=lenovo AND product=a540-24icb AND version=-

AND

vendor=lenovo AND product=a540-27icb_firmware AND version=-

vendor=lenovo AND product=a540-27icb AND version=-

AND

vendor=lenovo AND product=ideacentre_5-14iob6_firmware AND version=-

vendor=lenovo AND product=ideacentre_5-14iob6 AND version=-

AND

vendor=lenovo AND product=ideacentre_510s-07icb_firmware AND version=-

vendor=lenovo AND product=ideacentre_510s-07icb AND version=-

AND

vendor=lenovo AND product=ideacentre_510s-07ick_firmware AND version=-

vendor=lenovo AND product=ideacentre_510s-07ick AND version=-

AND

vendor=lenovo AND product=ideacentre_aio_3-22ada6_firmware AND version=-

vendor=lenovo AND product=ideacentre_aio_3-22ada6 AND version=-

AND

vendor=lenovo AND product=ideacentre_aio_3-22iil5_firmware AND version=-

vendor=lenovo AND product=ideacentre_aio_3-22iil5 AND version=-

AND

vendor=lenovo AND product=ideacentre_aio_3-22itl6_firmware AND version=-

vendor=lenovo AND product=ideacentre_aio_3-22itl6 AND version=-

AND

vendor=lenovo AND product=ideacentre_aio_3-24ada6_firmware AND version=-

vendor=lenovo AND product=ideacentre_aio_3-24ada6 AND version=-

AND

vendor=lenovo AND product=ideacentre_aio_3-24iil5_firmware AND version=-

vendor=lenovo AND product=ideacentre_aio_3-24iil5 AND version=-

AND

vendor=lenovo AND product=ideacentre_aio_3-24itl6_firmware AND version=-

vendor=lenovo AND product=ideacentre_aio_3-24itl6 AND version=-

AND

vendor=lenovo AND product=ideacentre_aio_3-27itl6_firmware AND version=-

vendor=lenovo AND product=ideacentre_aio_3-27itl6 AND version=-

AND

vendor=lenovo AND product=ideacentre_creator_5-14iob6_firmware AND version=-

vendor=lenovo AND product=ideacentre_creator_5-14iob6 AND version=-

AND

vendor=lenovo AND product=ideacentre_gaming_5-14iob6_firmware AND version=-

vendor=lenovo AND product=ideacentre_gaming_5-14iob6 AND version=-

AND

vendor=lenovo AND product=se30_firmware AND version=-

vendor=lenovo AND product=se30 AND version=-

AND

vendor=lenovo AND product=thinkcentre_m600_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m600 AND version=-

AND

vendor=lenovo AND product=thinkcentre_m700_tiny_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m700_tiny AND version=-

AND

vendor=lenovo AND product=thinkcentre_m70a_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m70a AND version=-

AND

vendor=lenovo AND product=thinkcentre_m710e_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m710e AND version=-

AND

vendor=lenovo AND product=thinkcentre_m710q_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m710q AND version=-

AND

vendor=lenovo AND product=thinkcentre_m710q_\(10yc\)_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m710q_\(10yc\) AND version=-

AND

vendor=lenovo AND product=thinkcentre_m710s_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m710s AND version=-

AND

vendor=lenovo AND product=thinkcentre_m710t_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m710t AND version=-

AND

vendor=lenovo AND product=thinkcentre_m720e_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m720e AND version=-

AND

vendor=lenovo AND product=thinkcentre_m75n_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m75n AND version=-

AND

vendor=lenovo AND product=thinkcentre_m800_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m800 AND version=-

AND

vendor=lenovo AND product=thinkcentre_m810z_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m810z AND version=-

AND

vendor=lenovo AND product=thinkcentre_m820z_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m820z AND version=-

AND

vendor=lenovo AND product=thinkcentre_m900_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m900 AND version=-

AND

vendor=lenovo AND product=thinkcentre_m900x_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m900x AND version=-

AND

vendor=lenovo AND product=thinkcentre_m90a_\(gen_2\)_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m90a_\(gen_2\) AND version=-

AND

vendor=lenovo AND product=thinkcentre_m910q_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m910q AND version=-

AND

vendor=lenovo AND product=thinkcentre_m910s_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m910s AND version=-

AND

vendor=lenovo AND product=thinkcentre_m910t_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m910t AND version=-

AND

vendor=lenovo AND product=thinkcentre_m910x_firmware AND version=-

vendor=lenovo AND product=thinkcentre_m910x AND version=-

AND

vendor=lenovo AND product=thinkstation_p310_firmware AND version=-

vendor=lenovo AND product=thinkstation_p310 AND version=-

AND

vendor=lenovo AND product=thinkstation_p320_firmware AND version=-

vendor=lenovo AND product=thinkstation_p320 AND version=-

AND

vendor=lenovo AND product=thinkstation_p320_tiny_firmware AND version=-

vendor=lenovo AND product=thinkstation_p320_tiny AND version=-

AND

vendor=lenovo AND product=v30a-22iml_firmware AND version=-

vendor=lenovo AND product=v30a-22iml AND version=-

AND

vendor=lenovo AND product=v30a-24iml_firmware AND version=-

vendor=lenovo AND product=v30a-24iml AND version=-

AND

vendor=lenovo AND product=v410z_firmware AND version=-

vendor=lenovo AND product=v410z AND version=-

AND

vendor=lenovo AND product=v50t-13iob_g2_firmware AND version=-

vendor=lenovo AND product=v50t-13iob_g2 AND version=-

AND

vendor=lenovo AND product=v520_firmware AND version=-

vendor=lenovo AND product=v520 AND version=-

AND

vendor=lenovo AND product=v520s_firmware AND version=-

vendor=lenovo AND product=v520s AND version=-

AND

vendor=lenovo AND product=v530-15icb_firmware AND version=-

vendor=lenovo AND product=v530-15icb AND version=-

AND

vendor=lenovo AND product=v530-15icr_firmware AND version=-

vendor=lenovo AND product=v530-15icr AND version=-

AND

vendor=lenovo AND product=v530s-07icb_firmware AND version=-

vendor=lenovo AND product=v530s-07icb AND version=-

AND

vendor=lenovo AND product=v530s-07icr_firmware AND version=-

vendor=lenovo AND product=v530s-07icr AND version=-

AND

vendor=lenovo AND product=v540-24iwl_firmware AND version=-

vendor=lenovo AND product=v540-24iwl AND version=-

Reference

https://support.lenovo.com/us/en/product_security/LEN-77639

Keywords

CVE-2021-4211

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-4211

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures