CVE-2021-4212

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 22-04-2022 11:15

Last modified: - 11-05-2022 10:06

Total changes: - 3

Description

A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Local

Attack vector

High

Availability

High

Confidentiality

High

Integrity

High

Privileges required

Unchanged

Scope

None

User interaction

6.7

Base score

0.8

5.9

Exploitability score

Impact score

Verification logic

AND

vendor=lenovo AND product=c340-14iml_firmware AND version=-

vendor=lenovo AND product=c340-14iml AND version=-

AND

vendor=lenovo AND product=c340-15iml_firmware AND version=-

vendor=lenovo AND product=c340-15iml AND version=-

AND

vendor=lenovo AND product=d330-10igm_firmware AND version=-

vendor=lenovo AND product=d330-10igm AND version=-

AND

vendor=lenovo AND product=duet_3-10igl5_firmware AND version=-

vendor=lenovo AND product=duet_3-10igl5 AND version=-

AND

vendor=lenovo AND product=e41-50_firmware AND version=-

vendor=lenovo AND product=e41-50 AND version=-

AND

vendor=lenovo AND product=flex-14iml_firmware AND version=-

vendor=lenovo AND product=flex-14iml AND version=-

AND

vendor=lenovo AND product=flex-15iml_firmware AND version=-

vendor=lenovo AND product=flex-15iml AND version=-

AND

vendor=lenovo AND product=ideapad_3-14are05_firmware AND version=-

vendor=lenovo AND product=ideapad_3-14are05 AND version=-

AND

vendor=lenovo AND product=ideapad_3-15are05_firmware AND version=-

vendor=lenovo AND product=ideapad_3-15are05 AND version=-

AND

vendor=lenovo AND product=ideapad_3-17are05_firmware AND version=-

vendor=lenovo AND product=ideapad_3-17are05 AND version=-

AND

vendor=lenovo AND product=ideapad_5-14alc05_firmware AND version=-

vendor=lenovo AND product=ideapad_5-14alc05 AND version=-

AND

vendor=lenovo AND product=ideapad_5-14are05_firmware AND version=-

vendor=lenovo AND product=ideapad_5-14are05 AND version=-

AND

vendor=lenovo AND product=ideapad_5-15itl05_firmware AND version=-

vendor=lenovo AND product=ideapad_5-15itl05 AND version=-

AND

vendor=lenovo AND product=ideapad_5_pro-14acn6_firmware AND version=-

vendor=lenovo AND product=ideapad_5_pro-14acn6 AND version=-

AND

vendor=lenovo AND product=ideapad_5_pro-14itl6_firmware AND version=-

vendor=lenovo AND product=ideapad_5_pro-14itl6 AND version=-

AND

vendor=lenovo AND product=ideapad_5_pro-16ihu6_firmware AND version=-

vendor=lenovo AND product=ideapad_5_pro-16ihu6 AND version=-

AND

vendor=lenovo AND product=ideapad_creator_5-15imh05_firmware AND version=-

vendor=lenovo AND product=ideapad_creator_5-15imh05 AND version=-

AND

vendor=lenovo AND product=ideapad_gaming_3-15ach6_firmware AND version=-

vendor=lenovo AND product=ideapad_gaming_3-15ach6 AND version=-

AND

vendor=lenovo AND product=ideapad_gaming_3-15arh05_firmware AND version=-

vendor=lenovo AND product=ideapad_gaming_3-15arh05 AND version=-

AND

vendor=lenovo AND product=ideapad_gaming_3-15imh05_firmware AND version=-

vendor=lenovo AND product=ideapad_gaming_3-15imh05 AND version=-

AND

vendor=lenovo AND product=l340-15irh_firmware AND version=-

vendor=lenovo AND product=l340-15irh AND version=-

AND

vendor=lenovo AND product=l340-15iwl_firmware AND version=-

vendor=lenovo AND product=l340-15iwl AND version=-

AND

vendor=lenovo AND product=l340-15iwl_touch_firmware AND version=-

vendor=lenovo AND product=l340-15iwl_touch AND version=-

AND

vendor=lenovo AND product=l340-17irh_firmware AND version=-

vendor=lenovo AND product=l340-17irh AND version=-

AND

vendor=lenovo AND product=l340-17iwl_firmware AND version=-

vendor=lenovo AND product=l340-17iwl AND version=-

AND

vendor=lenovo AND product=legion_y540-15irh_firmware AND version=-

vendor=lenovo AND product=legion_y540-15irh AND version=-

AND

vendor=lenovo AND product=legion_y540-15irh-pg0_firmware AND version=-

vendor=lenovo AND product=legion_y540-15irh-pg0 AND version=-

AND

vendor=lenovo AND product=legion_y540-17irh_firmware AND version=-

vendor=lenovo AND product=legion_y540-17irh AND version=-

AND

vendor=lenovo AND product=legion_y540-17irh-pg0_firmware AND version=-

vendor=lenovo AND product=legion_y540-17irh-pg0 AND version=-

AND

vendor=lenovo AND product=legion_y545_firmware AND version=-

vendor=lenovo AND product=legion_y545 AND version=-

AND

vendor=lenovo AND product=legion_y545-pg0_firmware AND version=-

vendor=lenovo AND product=legion_y545-pg0 AND version=-

AND

vendor=lenovo AND product=legion_y7000-2019_firmware AND version=-

vendor=lenovo AND product=legion_y7000-2019 AND version=-

AND

vendor=lenovo AND product=legion_y7000-2019-pg0_firmware AND version=-

vendor=lenovo AND product=legion_y7000-2019-pg0 AND version=-

AND

vendor=lenovo AND product=s340-13iml_firmware AND version=-

vendor=lenovo AND product=s340-13iml AND version=-

AND

vendor=lenovo AND product=s340-14api_firmware AND version=-

vendor=lenovo AND product=s340-14api AND version=-

AND

vendor=lenovo AND product=s340-14iml_firmware AND version=-

vendor=lenovo AND product=s340-14iml AND version=-

AND

vendor=lenovo AND product=s340-15api_firmware AND version=-

vendor=lenovo AND product=s340-15api AND version=-

AND

vendor=lenovo AND product=s340-15api_touch_firmware AND version=-

vendor=lenovo AND product=s340-15api_touch AND version=-

AND

vendor=lenovo AND product=s340-15iml_firmware AND version=-

vendor=lenovo AND product=s340-15iml AND version=-

AND

vendor=lenovo AND product=s540-14iml_firmware AND version=-

vendor=lenovo AND product=s540-14iml AND version=-

AND

vendor=lenovo AND product=s540-14iml_touch_firmware AND version=-

vendor=lenovo AND product=s540-14iml_touch AND version=-

AND

vendor=lenovo AND product=s540-15iml_firmware AND version=-

vendor=lenovo AND product=s540-15iml AND version=-

AND

vendor=lenovo AND product=slim_7-14are05_firmware AND version=-

vendor=lenovo AND product=slim_7-14are05 AND version=-

AND

vendor=lenovo AND product=slim_7-14itl05_firmware AND version=-

vendor=lenovo AND product=slim_7-14itl05 AND version=-

AND

vendor=lenovo AND product=slim_7-15iil05_firmware AND version=-

vendor=lenovo AND product=slim_7-15iil05 AND version=-

AND

vendor=lenovo AND product=slim_7-15imh05_firmware AND version=-

vendor=lenovo AND product=slim_7-15imh05 AND version=-

AND

vendor=lenovo AND product=slim_7-15itl05_firmware AND version=-

vendor=lenovo AND product=slim_7-15itl05 AND version=-

AND

vendor=lenovo AND product=thinkbook_13x_itg_firmware AND version=-

vendor=lenovo AND product=thinkbook_13x_itg AND version=-

AND

vendor=lenovo AND product=thinkbook_14_g3_itl_firmware AND version=-

vendor=lenovo AND product=thinkbook_14_g3_itl AND version=-

AND

vendor=lenovo AND product=thinkbook_plus_g2_itg_firmware AND version=-

vendor=lenovo AND product=thinkbook_plus_g2_itg AND version=-

AND

vendor=lenovo AND product=v14-are_firmware AND version=-

vendor=lenovo AND product=v14-are AND version=-

AND

vendor=lenovo AND product=v140-15iwl_firmware AND version=-

vendor=lenovo AND product=v140-15iwl AND version=-

AND

vendor=lenovo AND product=v340-17iwl_firmware AND version=-

vendor=lenovo AND product=v340-17iwl AND version=-

AND

vendor=lenovo AND product=yoga_6-13alc6_firmware AND version=-

vendor=lenovo AND product=yoga_6-13alc6 AND version=-

AND

vendor=lenovo AND product=yoga_creator_7-15imh05_firmware AND version=-

vendor=lenovo AND product=yoga_creator_7-15imh05 AND version=-

AND

vendor=lenovo AND product=yoga_slim_7-14are05_firmware AND version=-

vendor=lenovo AND product=yoga_slim_7-14are05 AND version=-

AND

vendor=lenovo AND product=yoga_slim_7-14iil05_firmware AND version=-

vendor=lenovo AND product=yoga_slim_7-14iil05 AND version=-

AND

vendor=lenovo AND product=yoga_slim_7-14itl05_firmware AND version=-

vendor=lenovo AND product=yoga_slim_7-14itl05 AND version=-

AND

vendor=lenovo AND product=yoga_slim_7-15iil05_firmware AND version=-

vendor=lenovo AND product=yoga_slim_7-15iil05 AND version=-

AND

vendor=lenovo AND product=yoga_slim_7-15imh05_firmware AND version=-

vendor=lenovo AND product=yoga_slim_7-15imh05 AND version=-

AND

vendor=lenovo AND product=yoga_slim_7-15itl05_firmware AND version=-

vendor=lenovo AND product=yoga_slim_7-15itl05 AND version=-

AND

vendor=lenovo AND product=yoga_slim_7_carbon_13itl5_firmware AND version=-

vendor=lenovo AND product=yoga_slim_7_carbon_13itl5 AND version=-

Reference

https://support.lenovo.com/us/en/product_security/LEN-77639

Keywords

CVE-2021-4212

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-4212

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures