CVE-2021-3970
Summary
| CVE | CVE-2021-3970 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-04-22 21:15:00 UTC |
| Updated | 2022-05-06 20:47:00 UTC |
| Description | A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Lenovo | Ideapad 3-14ada05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14ada05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14ada6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14ada6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14alc6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14alc6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14are05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14are05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14igl05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14igl05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14iil05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14iil05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14iml05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14iml05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14itl05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14itl05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14itl6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14itl6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15ada05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15ada05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15ada6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15ada6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15alc6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15alc6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15are05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15are05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15igl05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15igl05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15iil05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15iil05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15iml05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15iml05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15itl05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15itl05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15itl6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15itl6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17ada05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17ada05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17ada6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17ada6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17alc6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17alc6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17are05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17are05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17iil05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17iil05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17iml05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17iml05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17itl6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17itl6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 5-15are05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 5-15are05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 5-15iil05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 5-15iil05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad Creator 5-15imh05 | - | All | All | All |
| Operating System | Lenovo | Ideapad Creator 5-15imh05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad Gaming 3-15arh05 | - | All | All | All |
| Operating System | Lenovo | Ideapad Gaming 3-15arh05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad Gaming 3-15imh05 | - | All | All | All |
| Operating System | Lenovo | Ideapad Gaming 3-15imh05 Firmware | All | All | All | All |
| Hardware | Lenovo | L3-15itl6 | - | All | All | All |
| Operating System | Lenovo | L3-15itl6 Firmware | All | All | All | All |
| Hardware | Lenovo | L340-15irh | - | All | All | All |
| Operating System | Lenovo | L340-15irh Firmware | All | All | All | All |
| Hardware | Lenovo | L340-15iwl | - | All | All | All |
| Operating System | Lenovo | L340-15iwl Firmware | All | All | All | All |
| Hardware | Lenovo | L340-15iwl Touch | - | All | All | All |
| Operating System | Lenovo | L340-15iwl Touch Firmware | All | All | All | All |
| Hardware | Lenovo | L340-17irh | - | All | All | All |
| Operating System | Lenovo | L340-17irh Firmware | All | All | All | All |
| Hardware | Lenovo | L340-17iwl | - | All | All | All |
| Operating System | Lenovo | L340-17iwl Firmware | All | All | All | All |
| Hardware | Lenovo | L3 15iml05 | - | All | All | All |
| Operating System | Lenovo | L3 15iml05 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-15ach6 | - | All | All | All |
| Hardware | Lenovo | Legion 5-15ach6a | - | All | All | All |
| Operating System | Lenovo | Legion 5-15ach6a Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-15ach6h | - | All | All | All |
| Operating System | Lenovo | Legion 5-15ach6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5-15ach6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-15imh6 | - | All | All | All |
| Operating System | Lenovo | Legion 5-15imh6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-15ith6 | - | All | All | All |
| Hardware | Lenovo | Legion 5-15ith6h | - | All | All | All |
| Operating System | Lenovo | Legion 5-15ith6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5-15ith6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-17ach6 | - | All | All | All |
| Hardware | Lenovo | Legion 5-17ach6h | - | All | All | All |
| Operating System | Lenovo | Legion 5-17ach6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5-17ach6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-17ith6 | - | All | All | All |
| Hardware | Lenovo | Legion 5-17ith6h | - | All | All | All |
| Operating System | Lenovo | Legion 5-17ith6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5-17ith6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5 Pro-16ach6 | - | All | All | All |
| Hardware | Lenovo | Legion 5 Pro-16ach6h | - | All | All | All |
| Operating System | Lenovo | Legion 5 Pro-16ach6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5 Pro-16ach6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5 Pro-16ith6 | - | All | All | All |
| Hardware | Lenovo | Legion 5 Pro-16ith6h | - | All | All | All |
| Operating System | Lenovo | Legion 5 Pro-16ith6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5 Pro-16ith6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 7-16achg6 | - | All | All | All |
| Operating System | Lenovo | Legion 7-16achg6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 7-16ithg6 | - | All | All | All |
| Operating System | Lenovo | Legion 7-16ithg6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion S7-15ach6 | - | All | All | All |
| Operating System | Lenovo | Legion S7-15ach6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion Y540-15irh | - | All | All | All |
| Hardware | Lenovo | Legion Y540-15irh-pg0 | - | All | All | All |
| Operating System | Lenovo | Legion Y540-15irh-pg0 Firmware | All | All | All | All |
| Operating System | Lenovo | Legion Y540-15irh Firmware | All | All | All | All |
| Hardware | Lenovo | Legion Y540-17irh | - | All | All | All |
| Hardware | Lenovo | Legion Y540-17irh-pg0 | - | All | All | All |
| Operating System | Lenovo | Legion Y540-17irh-pg0 Firmware | All | All | All | All |
| Operating System | Lenovo | Legion Y540-17irh Firmware | All | All | All | All |
| Hardware | Lenovo | Legion Y545 | - | All | All | All |
| Hardware | Lenovo | Legion Y545-pg0 | - | All | All | All |
| Operating System | Lenovo | Legion Y545-pg0 Firmware | All | All | All | All |
| Operating System | Lenovo | Legion Y545 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion Y7000-2019 | - | All | All | All |
| Hardware | Lenovo | Legion Y7000-2019-pg0 | - | All | All | All |
| Operating System | Lenovo | Legion Y7000-2019-pg0 Firmware | All | All | All | All |
| Operating System | Lenovo | Legion Y7000-2019 Firmware | All | All | All | All |
| Hardware | Lenovo | S145-14api | - | All | All | All |
| Operating System | Lenovo | S145-14api Firmware | All | All | All | All |
| Hardware | Lenovo | S145-14ast | - | All | All | All |
| Operating System | Lenovo | S145-14ast Firmware | All | All | All | All |
| Hardware | Lenovo | S145-14igm | - | All | All | All |
| Operating System | Lenovo | S145-14igm Firmware | All | All | All | All |
| Hardware | Lenovo | S145-14iil | - | All | All | All |
| Operating System | Lenovo | S145-14iil Firmware | All | All | All | All |
| Hardware | Lenovo | S145-15api | - | All | All | All |
| Operating System | Lenovo | S145-15api Firmware | All | All | All | All |
| Hardware | Lenovo | S145-15ast | - | All | All | All |
| Operating System | Lenovo | S145-15ast Firmware | All | All | All | All |
| Hardware | Lenovo | S145-15igm | - | All | All | All |
| Operating System | Lenovo | S145-15igm Firmware | All | All | All | All |
| Hardware | Lenovo | S145-15iil | - | All | All | All |
| Operating System | Lenovo | S145-15iil Firmware | All | All | All | All |
| Hardware | Lenovo | S14 G2 Itl | - | All | All | All |
| Operating System | Lenovo | S14 G2 Itl Firmware | All | All | All | All |
| Hardware | Lenovo | S540-13api | - | All | All | All |
| Operating System | Lenovo | S540-13api Firmware | All | All | All | All |
| Hardware | Lenovo | S540-13iml | - | All | All | All |
| Operating System | Lenovo | S540-13iml Firmware | - | All | All | All |
| Hardware | Lenovo | Slim 7 Pro-14ihu5 | - | All | All | All |
| Operating System | Lenovo | Slim 7 Pro-14ihu5 Firmware | - | All | All | All |
| Hardware | Lenovo | Slim 9-14itl05 | - | All | All | All |
| Operating System | Lenovo | Slim 9-14itl05 Firmware | - | All | All | All |
| Hardware | Lenovo | V14-ada | - | All | All | All |
| Operating System | Lenovo | V14-ada Firmware | All | All | All | All |
| Hardware | Lenovo | V14-are | - | All | All | All |
| Operating System | Lenovo | V14-are Firmware | All | All | All | All |
| Hardware | Lenovo | V14-igl | - | All | All | All |
| Operating System | Lenovo | V14-igl Firmware | All | All | All | All |
| Hardware | Lenovo | V14-iil | - | All | All | All |
| Operating System | Lenovo | V14-iil Firmware | All | All | All | All |
| Hardware | Lenovo | V140-15iwl | - | All | All | All |
| Operating System | Lenovo | V140-15iwl Firmware | All | All | All | All |
| Hardware | Lenovo | V14 G1-iml | - | All | All | All |
| Operating System | Lenovo | V14 G1-iml Firmware | All | All | All | All |
| Hardware | Lenovo | V14 G2-acl | - | All | All | All |
| Operating System | Lenovo | V14 G2-acl Firmware | All | All | All | All |
| Hardware | Lenovo | V14 G2-itl | - | All | All | All |
| Operating System | Lenovo | V14 G2-itl Firmware | All | All | All | All |
| Hardware | Lenovo | V15-ada | - | All | All | All |
| Operating System | Lenovo | V15-ada Firmware | All | All | All | All |
| Hardware | Lenovo | V15-igl | - | All | All | All |
| Operating System | Lenovo | V15-igl Firmware | All | All | All | All |
| Hardware | Lenovo | V15-iil | - | All | All | All |
| Operating System | Lenovo | V15-iil Firmware | All | All | All | All |
| Hardware | Lenovo | V15 G1-iml | - | All | All | All |
| Operating System | Lenovo | V15 G1-iml Firmware | All | All | All | All |
| Hardware | Lenovo | V15 G2-alc | - | All | All | All |
| Operating System | Lenovo | V15 G2-alc Firmware | All | All | All | All |
| Hardware | Lenovo | V15 G2-itl | - | All | All | All |
| Operating System | Lenovo | V15 G2-itl Firmware | All | All | All | All |
| Hardware | Lenovo | V17-iil | - | All | All | All |
| Operating System | Lenovo | V17-iil Firmware | All | All | All | All |
| Hardware | Lenovo | V17 G2-itl | - | All | All | All |
| Operating System | Lenovo | V17 G2-itl Firmware | All | All | All | All |
| Hardware | Lenovo | V340-17iwl | - | All | All | All |
| Operating System | Lenovo | V340-17iwl Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga 7-14acn6 | - | All | All | All |
| Operating System | Lenovo | Yoga 7-14acn6 Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga C740-14iml | - | All | All | All |
| Operating System | Lenovo | Yoga C740-14iml Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga C740-15iml | - | All | All | All |
| Operating System | Lenovo | Yoga C740-15iml Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga C940-14iil | - | All | All | All |
| Operating System | Lenovo | Yoga C940-14iil Firmware | - | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ach5 | - | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ach5 D | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ach5 D Firmware | All | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ach5 Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ach5 O | - | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ach5 Od | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ach5 Od Firmware | All | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ach5 O Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14arh5 | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14arh5 Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ihu5 | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ihu5 Firmware | - | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ihu5 O | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ihu5 O Firmware | - | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14itl5 | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14itl5 Firmware | - | All | All | All |
| Hardware | Lenovo | Yoga Slim 9-14itl05 | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 9-14itl05 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US | MISC | support.lenovo.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Lenovo thanks Martin Smolár from ESET for reporting this issue.
There are currently no legacy QID mappings associated with this CVE.