medium6.7
CVE-2021-4210
A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker…
Impact
A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Stadia Ggp-120 Firmware | All versions |
| Lenovo | Thinkedge Se30 Firmware | All versions |
| Lenovo | V540-24iwl Firmware | All versions |
| Lenovo | Thinkstation P520 Firmware | All versions |
| Lenovo | Thinkstation P310 Firmware | All versions |
| Lenovo | V50t-13imb Firmware | All versions |
| Lenovo | Thinkstation P520c Firmware | All versions |
| Lenovo | A540-27icb Firmware | All versions |
| Lenovo | A540-24icb Firmware | All versions |
| Lenovo | Ideacentre G5-14imb05 Firmware | All versions |
| Lenovo | V410z Firmware | All versions |
| Lenovo | Thinkcentre M910z Firmware | All versions |