medium6.7
CVE-2021-3719
A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and Thi…
Impact
A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkcentre E93 Firmware | before fbktdfa |
| Lenovo | Thinkcentre M600 Firmware | before m00kt65a |
| Lenovo | Thinkcentre M700 Tiny Firmware | before fwktb9a |
| Lenovo | Thinkcentre M73 Firmware | before fhkt86a |
| Lenovo | Thinkcentre M73p Firmware | before fbktdfa |
| Lenovo | Thinkcentre M800 Firmware | before fwktb9a |
| Lenovo | Thinkcentre M818z Firmware | before m1ekt23a |
| Lenovo | Thinkcentre M83 Firmware | before fbktdfa |
| Lenovo | Thinkcentre M900 Firmware | before fwktb9a |
| Lenovo | Thinkcentre M900x Firmware | before fwktb9a |
| Lenovo | Thinkcentre M93 Firmware | before fbktdfa |
| Lenovo | Thinkcentre M93p Firmware | before fbktdfa |