medium6.7
CVE-2021-3843
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execu…
Impact
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkpad 11e 3rd Gen Firmware | through 1.22 through 1.29 |
| Lenovo | Thinkpad 11e 4th Gen I3 Firmware | through 1.22 |
| Lenovo | Thinkpad 11e 4th Gen I7 Firmware | through 1.22 |
| Lenovo | Thinkpad 11e 4th Gen I5 Firmware | through 1.22 |
| Lenovo | Thinkpad 11e 4th Gen Celeron Firmware | through 1.27 |
| Lenovo | Thinkpad 11e Yoga Gen 6 Firmware | through 1.12 |
| Lenovo | Thinkpad 13 Gen 2 Firmware | through 1.29 |
| Lenovo | Thinkpad L13 Firmware | through 1.31 |
| Lenovo | Thinkpad L13 Gen 2 Firmware | through 1.11 through 1.08 |
| Lenovo | Thinkpad L13 Yoga Firmware | through 1.31 |
| Lenovo | Thinkpad L13 Yoga Gen 2 Firmware | through 1.11 through 1.08 |
| Lenovo | Thinkpad L14 Gen 1 Firmware | before 1.15 |