CVE-2021-3786
Medium
Description
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.
SeverityMedium
CVSS4.4
Exploit probability—
ProductLenovo Thinkpad X380 Yoga Firmware
PublishedNov 12, 2021
First seenNov 12, 2021
Weakness typeCWE-20Improper input validation
How to fix
Update
- lenovo thinkpad_x380_yoga_firmware2020-10-31 or later
- lenovo thinkpad_x1_fold_gen_1_firmware2021-10-29 or later
- lenovo thinkpad_yoga_260_firmware2021-10-25 or later
- lenovo thinkpad_yoga_11e_3rd_gen_firmware2021-10-31 or later
- lenovo thinkpad_yoga_15_firmwaren19et66w or later
- lenovo thinkpad_yoga_370_firmware2021-10-31 or later
- lenovo thinkpad_x12_detachable_gen_1_firmware2021-10-31 or later
- lenovo thinkpad_x390_firmwaren2jet96w or later
- lenovo thinkpad_yoga_11e_4th_gen_firmware2021-10-31 or later
- lenovo thinkpad_yoga_11e_5th_gen_firmware2021-10-31 or later
- lenovo thinkpad_x250_firmware2021-10-31 or later
- lenovo thinkpad_x260_firmware2021-10-31 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo thinkpad_x380_yoga_firmware | v < 2020-10-31 | 2020-10-31 |
| lenovo thinkpad_x1_fold_gen_1_firmware | v < 2021-10-29 | 2021-10-29 |
| lenovo thinkpad_yoga_260_firmware | v < 2021-10-25 | 2021-10-25 |
| lenovo thinkpad_yoga_11e_3rd_gen_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_yoga_15_firmware | v < n19et66w | n19et66w |
| lenovo thinkpad_yoga_370_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_x12_detachable_gen_1_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_x390_firmware | v < n2jet96w | n2jet96w |
| lenovo thinkpad_yoga_11e_4th_gen_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_yoga_11e_5th_gen_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_x250_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_x260_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_x390_yoga_firmware | v < n2let87w | n2let87w |
| lenovo thinkpad_x280_firmware | v < n20et58w | n20et58w |
| lenovo thinkpad_x1_titanium_firmware | v < n2met51w | n2met51w |
| lenovo thinkpad_x270_firmware | v < 2021-10-29 | 2021-10-29 |
| lenovo thinkpad_x1_carbon_5th_gen_kabylake_firmware | v < n1met66w | n1met66w |
| lenovo thinkpad_x13_gen_1_firmware | v < n2yet31w | n2yet31w |
| lenovo thinkpad_x13_gen_2_firmware | v < n35et41w | n35et41w |
| lenovo thinkpad_x13_yoga_gen_1_firmware | v < n2uet56w | n2uet56w |
| lenovo thinkpad_x13_yoga_gen_2_firmware | v < n39et47w | n39et47w |
| lenovo thinkpad_x1_carbon_5th_gen_skylake_firmware | v < n1met66w | n1met66w |
| lenovo thinkpad_x1_yoga_1st_gen_firmware | v < n1fet76w | n1fet76w |
| lenovo thinkpad_x1_yoga_3rd_gen_firmware | v < n25et57w | n25et57w |
| lenovo thinkpad_x1_yoga_4th_gen_firmware | v < n2het64w, v < n2qet42w | n2het64w, n2qet42w |
| lenovo thinkpad_x1_yoga_gen_5_firmware | v < n2wet30w | n2wet30w |
| lenovo thinkpad_x1_carbon_4th_gen_firmware | v < n1fet76w | n1fet76w |
| lenovo thinkpad_10_firmware | v < 2021-10-25 | 2021-10-25 |
| lenovo thinkpad_x1_nano_gen_1_firmware | v < n2tet67w | n2tet67w |
| lenovo thinkpad_x1_extreme_firmware | v < n2eet54w | n2eet54w |
| lenovo thinkpad_x1_extreme_2nd_firmware | v < n2oet53w | n2oet53w |
| lenovo thinkpad_x1_extreme_gen_3_firmware | v < n2vet33w | n2vet33w |
| lenovo thinkpad_t460s_firmware | v < n1cet84w | n1cet84w |
| lenovo thinkpad_s2_gen_6_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_x1_carbon_gen_6_firmware | v < n23et78w | n23et78w |
| lenovo thinkpad_x1_carbon_gen_7_firmware | v < n2het64w, v < n2qet42w | n2het64w, n2qet42w |
| lenovo thinkpad_x1_carbon_gen_8_firmware | v < n2het64w, v < n2qet42w | n2het64w, n2qet42w |
| lenovo thinkpad_t560_firmware | v < n1ket52w | n1ket52w |
| lenovo thinkpad_t460p_firmware | v < 2021-10-29 | 2021-10-29 |
| lenovo thinkpad_w550s_firmware | v < n11et54w | n11et54w |
| lenovo thinkpad_t590_firmware | v < n2iet96w | n2iet96w |
| lenovo thinkpad_t570_firmware | v < n1vet57w | n1vet57w |
| lenovo thinkpad_s2_yoga_gen_6_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_t480_firmware | v < n24et65w | n24et65w |
| lenovo thinkpad_x1_tablet_firmware | v < n1let92w | n1let92w |
| lenovo thinkpad_t550_firmware | v < n11et54w | n11et54w |
| lenovo thinkpad_x1_carbon_3rd_gen_firmware | v < n14et56w | n14et56w |
| lenovo thinkpad_x1_tablet_gen_2_firmware | v < n1oet56w | n1oet56w |
| lenovo thinkpad_x1_tablet_gen_3_firmware | v < 2021-10-29 | 2021-10-29 |
| lenovo thinkpad_t580_firmware | v < n27et43w | n27et43w |
| lenovo thinkpad_t480s_firmware | v < n22et70w | n22et70w |
| lenovo thinkpad_t15_firmware | v < n2xet32w | n2xet32w |
| lenovo thinkpad_t460_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_t470_firmware | v < n1qet92w | n1qet92w |
| lenovo thinkpad_t490_firmware | v < n2iet96w | n2iet96w |
| lenovo thinkpad_t490s_firmware | v < n2iet96w | n2iet96w |
| lenovo thinkpad_t14s_gen_2_firmware | v < n35et41w | n35et41w |
| lenovo thinkpad_t14s_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_t470p_firmware | v < r0fet55w | r0fet55w |
| lenovo thinkpad_t470s_firmware | v < 2021-10-29 | 2021-10-29 |
| lenovo thinkpad_p71_firmware | v < 2021-10-29 | 2021-10-29 |
| lenovo thinkpad_t440p_firmware | v < 2021-10-29 | 2021-10-29 |
| lenovo thinkpad_t15_gen_2_firmware | v < n34et42w | n34et42w |
| lenovo thinkpad_t15p_gen_1_firmware | v < 2021-10-29 | 2021-10-29 |
| lenovo thinkpad_p70_firmware | v < n1detb2w | n1detb2w |
| lenovo thinkpad_t15g_gen_1_firmware | v < 2021-10-29 | 2021-10-29 |
| lenovo thinkpad_t14_gen_1_firmware | v < n2xet32w | n2xet32w |
| lenovo thinkpad_t14_gen_2_firmware | v < n34et42w | n34et42w |
| lenovo thinkpad_p73_firmware | v < n2net47w | n2net47w |
| lenovo thinkpad_s540_firmware | v < 2021-10-25 | 2021-10-25 |
| lenovo thinkpad_p72_firmware | v < n2cet60w | n2cet60w |
| lenovo thinkpad_l380_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_s5_2nd_gen_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_p15v_gen_1_firmware | v < 2021-10-29 | 2021-10-29 |
| lenovo thinkpad_p53_firmware | v < n2net47w | n2net47w |
| lenovo thinkpad_p53s_firmware | v < n2iet96w | n2iet96w |
| lenovo thinkpad_p43s_firmware | v < n2iet96w | n2iet96w |
| lenovo thinkpad_p51_firmware | v < n1uet82w | n1uet82w |
| lenovo thinkpad_p51s_firmware | v < n1vet57w | n1vet57w |
| lenovo thinkpad_p50_firmware | v < n1eet92w | n1eet92w |
| lenovo thinkpad_p52_firmware | v < n2cet60w | n2cet60w |
| lenovo thinkpad_p52s_firmware | v < n27et43w | n27et43w |
| lenovo thinkpad_p50s_firmware | v < n1ket52w | n1ket52w |
| lenovo thinkpad_l570_firmware | v < n1xet74w | n1xet74w |
| lenovo thinkpad_p17_gen_1_firmware | v < 2021-10-29 | 2021-10-29 |
| lenovo thinkpad_l580_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_p14s_gen_1_firmware | v < n2xet32w | n2xet32w |
| lenovo thinkpad_p14s_gen_2_firmware | v < n34et42w | n34et42w |
| lenovo thinkpad_p15_gen_1_firmware | v < 2021-10-29 | 2021-10-29 |
| lenovo thinkpad_p15s_gen_1_firmware | v < n2xet32w | n2xet32w |
| lenovo thinkpad_p15s_gen_2_firmware | v < n34et42w | n34et42w |
| lenovo thinkpad_l590_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_l380_yoga_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_l490_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_l560_firmware | v < n1het92w | n1het92w |
| lenovo thinkpad_p1_firmware | v < n2eet54w | n2eet54w |
| lenovo thinkpad_p1_gen_2_firmware | v < n2oet53w | n2oet53w |
| lenovo thinkpad_p1_gen_3_firmware | v < n2vet33w | n2vet33w |
| lenovo thinkpad_l480_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_l470_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_l460_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_e490_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_helix_firmware | v < n17etb6w | n17etb6w |
| lenovo thinkpad_l390_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_l390_yoga_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_e15_gen_3_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_l14_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_l13_gen_2_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_l15_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_l15_gen_2_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_l13_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_e14_gen_3_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_e590_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_e580_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_l13_yoga_gen_2_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_e570_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_l13_yoga_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_11e_3rd_gen_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_e480_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_e14_firmware | v ≤ 2021-10-15 | — |
| lenovo thinkpad_e470_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_e15_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_e15_gen_2_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_25_firmware | v < n1qet92w | n1qet92w |
| lenovo thinkpad_e14_gen_2_firmware | v < 2021-10-15 | 2021-10-15 |
| lenovo thinkpad_13_gen_2_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_11e_4th_gen_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo thinkpad_11e_yoga_gen_6_firmware | v < 2021-10-31 | 2021-10-31 |
| lenovo ideapad_s940-14iwl_firmware | v ≤ 12.0.81.1753 | — |
| lenovo ideapad_yoga_s940-14iwl_firmware | v ≤ 12.0.81.1753 | — |
| lenovo v330-15isk_firmware | v ≤ 11.8.86.3877 | — |
| lenovo v330-15ikb_firmware | v ≤ 11.8.86.3877 | — |
| lenovo v130-15igm_firmware | v ≤ 6vcn42ww | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.