1. Home
  2. CVE Database
  3. CVE-2021-4211
MEDIUM · 6.7

CVE-2021-4211

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevat...

Vulnerability Description

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
LenovoA340-22Icb Firmware-
LenovoA340-22Icb-
LenovoA340-22Ick Firmware-
LenovoA340-22Ick-
LenovoA340-24Icb Firmware-
LenovoA340-24Icb-
LenovoA340-24Ick Firmware-
LenovoA340-24Ick-
LenovoA540-24Icb Firmware-
LenovoA540-24Icb-
LenovoA540-27Icb Firmware-
LenovoA540-27Icb-
LenovoIdeacentre 5-14Iob6 Firmware-
LenovoIdeacentre 5-14Iob6-
LenovoIdeacentre 510S-07Icb Firmware-
LenovoIdeacentre 510S-07Icb-
LenovoIdeacentre 510S-07Ick Firmware-
LenovoIdeacentre 510S-07Ick-
LenovoIdeacentre Aio 3-22Ada6 Firmware-
LenovoIdeacentre Aio 3-22Ada6-

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2021-4211?

CVE-2021-4211 is a vulnerability with a CVSS score of 6.7 (MEDIUM). A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevat...

How severe is CVE-2021-4211?

CVE-2021-4211 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-4211?

Check the references section above for vendor advisories and patch information. Affected products include: Lenovo A340-22Icb Firmware, Lenovo A340-22Icb, Lenovo A340-22Ick Firmware, Lenovo A340-22Ick, Lenovo A340-24Icb Firmware.