medium6.7
CVE-2021-3970
A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local acc…
Impact
A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Ideapad 3-14ada05 Firmware | before e8cn33ww |
| Lenovo | Ideapad 3-14ada6 Firmware | before hbcn21ww |
| Lenovo | Ideapad 3-14alc6 Firmware | before glcn43ww |
| Lenovo | Ideapad 3-14are05 Firmware | before dzcn42ww |
| Lenovo | Ideapad 3-15ada6 Firmware | before hbcn21ww |
| Lenovo | Ideapad 3-15alc6 Firmware | before glcn43ww |
| Lenovo | Ideapad 3-15are05 Firmware | before dzcn42ww |
| Lenovo | Ideapad 3-15igl05 Firmware | before dvcn23ww |
| Lenovo | Ideapad 3-17ada05 Firmware | before e8cn33ww |
| Lenovo | Ideapad 3-17ada6 Firmware | before hbcn21ww |
| Lenovo | Ideapad 3-17alc6 Firmware | before glcn43ww |
| Lenovo | Ideapad 3-17are05 Firmware | before dzcn42ww |