CVE-2021-4212
Medium
Description
A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code.
SeverityMedium
CVSS6.7
Exploit probability—
ProductLenovo C340-14iml Firmware
PublishedApr 22, 2022
First seenApr 22, 2022
Weakness typeCWE-20Improper input validation
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo c340-14iml_firmware | No range specified | — |
| lenovo c340-15iml_firmware | No range specified | — |
| lenovo d330-10igm_firmware | No range specified | — |
| lenovo duet_3-10igl5_firmware | No range specified | — |
| lenovo e41-50_firmware | No range specified | — |
| lenovo flex-14iml_firmware | No range specified | — |
| lenovo flex-15iml_firmware | No range specified | — |
| lenovo ideapad_3-14are05_firmware | No range specified | — |
| lenovo ideapad_3-15are05_firmware | No range specified | — |
| lenovo ideapad_3-17are05_firmware | No range specified | — |
| lenovo ideapad_5-14alc05_firmware | No range specified | — |
| lenovo ideapad_5-14are05_firmware | No range specified | — |
| lenovo ideapad_5-15itl05_firmware | No range specified | — |
| lenovo ideapad_5_pro-14acn6_firmware | No range specified | — |
| lenovo ideapad_5_pro-14itl6_firmware | No range specified | — |
| lenovo ideapad_5_pro-16ihu6_firmware | No range specified | — |
| lenovo ideapad_creator_5-15imh05_firmware | No range specified | — |
| lenovo ideapad_gaming_3-15ach6_firmware | No range specified | — |
| lenovo ideapad_gaming_3-15arh05_firmware | No range specified | — |
| lenovo ideapad_gaming_3-15imh05_firmware | No range specified | — |
| lenovo l340-15irh_firmware | No range specified | — |
| lenovo l340-15iwl_firmware | No range specified | — |
| lenovo l340-15iwl_touch_firmware | No range specified | — |
| lenovo l340-17irh_firmware | No range specified | — |
| lenovo l340-17iwl_firmware | No range specified | — |
| lenovo legion_y540-15irh_firmware | No range specified | — |
| lenovo legion_y540-15irh-pg0_firmware | No range specified | — |
| lenovo legion_y540-17irh_firmware | No range specified | — |
| lenovo legion_y540-17irh-pg0_firmware | No range specified | — |
| lenovo legion_y545_firmware | No range specified | — |
| lenovo legion_y545-pg0_firmware | No range specified | — |
| lenovo legion_y7000-2019_firmware | No range specified | — |
| lenovo legion_y7000-2019-pg0_firmware | No range specified | — |
| lenovo s340-13iml_firmware | No range specified | — |
| lenovo s340-14api_firmware | No range specified | — |
| lenovo s340-14iml_firmware | No range specified | — |
| lenovo s340-15api_firmware | No range specified | — |
| lenovo s340-15api_touch_firmware | No range specified | — |
| lenovo s340-15iml_firmware | No range specified | — |
| lenovo s540-14iml_firmware | No range specified | — |
| lenovo s540-14iml_touch_firmware | No range specified | — |
| lenovo s540-15iml_firmware | No range specified | — |
| lenovo slim_7-14are05_firmware | No range specified | — |
| lenovo slim_7-14itl05_firmware | No range specified | — |
| lenovo slim_7-15iil05_firmware | No range specified | — |
| lenovo slim_7-15imh05_firmware | No range specified | — |
| lenovo slim_7-15itl05_firmware | No range specified | — |
| lenovo thinkbook_13x_itg_firmware | No range specified | — |
| lenovo thinkbook_14_g3_itl_firmware | No range specified | — |
| lenovo thinkbook_plus_g2_itg_firmware | No range specified | — |
| lenovo v14-are_firmware | No range specified | — |
| lenovo v140-15iwl_firmware | No range specified | — |
| lenovo v340-17iwl_firmware | No range specified | — |
| lenovo yoga_6-13alc6_firmware | No range specified | — |
| lenovo yoga_creator_7-15imh05_firmware | No range specified | — |
| lenovo yoga_slim_7-14are05_firmware | No range specified | — |
| lenovo yoga_slim_7-14iil05_firmware | No range specified | — |
| lenovo yoga_slim_7-14itl05_firmware | No range specified | — |
| lenovo yoga_slim_7-15iil05_firmware | No range specified | — |
| lenovo yoga_slim_7-15imh05_firmware | No range specified | — |
| lenovo yoga_slim_7-15itl05_firmware | No range specified | — |
| lenovo yoga_slim_7_carbon_13itl5_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.