medium6.7
CVE-2021-4212
A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local acce…
Impact
A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | C340-14iml Firmware | All versions |
| Lenovo | C340-15iml Firmware | All versions |
| Lenovo | D330-10igm Firmware | All versions |
| Lenovo | Duet 3-10igl5 Firmware | All versions |
| Lenovo | E41-50 Firmware | All versions |
| Lenovo | Flex-14iml Firmware | All versions |
| Lenovo | Flex-15iml Firmware | All versions |
| Lenovo | Ideapad 3-14are05 Firmware | All versions |
| Lenovo | Ideapad 3-15are05 Firmware | All versions |
| Lenovo | Ideapad 3-17are05 Firmware | All versions |
| Lenovo | Ideapad 5-14alc05 Firmware | All versions |
| Lenovo | Ideapad 5-14are05 Firmware | All versions |