medium6.7
CVE-2021-4211
A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow…
Impact
A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | A340-22icb Firmware | All versions |
| Lenovo | A340-22ick Firmware | All versions |
| Lenovo | A340-24icb Firmware | All versions |
| Lenovo | A340-24ick Firmware | All versions |
| Lenovo | A540-24icb Firmware | All versions |
| Lenovo | A540-27icb Firmware | All versions |
| Lenovo | Ideacentre 5-14iob6 Firmware | All versions |
| Lenovo | Ideacentre 510s-07icb Firmware | All versions |
| Lenovo | Ideacentre 510s-07ick Firmware | All versions |
| Lenovo | Ideacentre Aio 3-22ada6 Firmware | All versions |
| Lenovo | Ideacentre Aio 3-22iil5 Firmware | All versions |
| Lenovo | Ideacentre Aio 3-22itl6 Firmware | All versions |