CVE-2021-4211
Medium
Description
A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.
SeverityMedium
CVSS6.7
Exploit probability—
ProductLenovo Thinkstation P310 Firmware
PublishedApr 22, 2022
First seenApr 22, 2022
Weakness typeCWE-20Improper input validation
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo thinkstation_p310_firmware | No range specified | — |
| lenovo a340-22icb_firmware | No range specified | — |
| lenovo a340-22ick_firmware | No range specified | — |
| lenovo a340-24icb_firmware | No range specified | — |
| lenovo a340-24ick_firmware | No range specified | — |
| lenovo a540-24icb_firmware | No range specified | — |
| lenovo a540-27icb_firmware | No range specified | — |
| lenovo ideacentre_5-14iob6_firmware | No range specified | — |
| lenovo ideacentre_510s-07icb_firmware | No range specified | — |
| lenovo ideacentre_510s-07ick_firmware | No range specified | — |
| lenovo ideacentre_aio_3-22ada6_firmware | No range specified | — |
| lenovo ideacentre_aio_3-22iil5_firmware | No range specified | — |
| lenovo ideacentre_aio_3-22itl6_firmware | No range specified | — |
| lenovo ideacentre_aio_3-24ada6_firmware | No range specified | — |
| lenovo ideacentre_aio_3-24iil5_firmware | No range specified | — |
| lenovo ideacentre_aio_3-24itl6_firmware | No range specified | — |
| lenovo ideacentre_aio_3-27itl6_firmware | No range specified | — |
| lenovo ideacentre_creator_5-14iob6_firmware | No range specified | — |
| lenovo ideacentre_gaming_5-14iob6_firmware | No range specified | — |
| lenovo se30_firmware | No range specified | — |
| lenovo thinkcentre_m600_firmware | No range specified | — |
| lenovo thinkcentre_m700_tiny_firmware | No range specified | — |
| lenovo thinkcentre_m70a_firmware | No range specified | — |
| lenovo thinkcentre_m710e_firmware | No range specified | — |
| lenovo thinkcentre_m710q_firmware | No range specified | — |
| lenovo thinkcentre_m710q_\(10yc\)_firmware | No range specified | — |
| lenovo thinkcentre_m710s_firmware | No range specified | — |
| lenovo thinkcentre_m710t_firmware | No range specified | — |
| lenovo thinkcentre_m720e_firmware | No range specified | — |
| lenovo thinkcentre_m75n_firmware | No range specified | — |
| lenovo thinkcentre_m800_firmware | No range specified | — |
| lenovo thinkcentre_m810z_firmware | No range specified | — |
| lenovo thinkcentre_m820z_firmware | No range specified | — |
| lenovo thinkcentre_m900_firmware | No range specified | — |
| lenovo thinkcentre_m900x_firmware | No range specified | — |
| lenovo thinkcentre_m90a_\(gen_2\)_firmware | No range specified | — |
| lenovo thinkcentre_m910q_firmware | No range specified | — |
| lenovo thinkcentre_m910s_firmware | No range specified | — |
| lenovo thinkcentre_m910t_firmware | No range specified | — |
| lenovo thinkcentre_m910x_firmware | No range specified | — |
| lenovo thinkstation_p320_firmware | No range specified | — |
| lenovo thinkstation_p320_tiny_firmware | No range specified | — |
| lenovo v30a-22iml_firmware | No range specified | — |
| lenovo v30a-24iml_firmware | No range specified | — |
| lenovo v410z_firmware | No range specified | — |
| lenovo v50t-13iob_g2_firmware | No range specified | — |
| lenovo v520_firmware | No range specified | — |
| lenovo v520s_firmware | No range specified | — |
| lenovo v530-15icb_firmware | No range specified | — |
| lenovo v530-15icr_firmware | No range specified | — |
| lenovo v530s-07icb_firmware | No range specified | — |
| lenovo v530s-07icr_firmware | No range specified | — |
| lenovo v540-24iwl_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.