CVE-2021-4211
Summary
| CVE | CVE-2021-4211 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-04-22 21:15:00 UTC |
| Updated | 2022-05-11 18:47:00 UTC |
| Description | A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Lenovo | A340-22icb | - | All | All | All |
| Operating System | Lenovo | A340-22icb Firmware | - | All | All | All |
| Hardware | Lenovo | A340-22ick | - | All | All | All |
| Operating System | Lenovo | A340-22ick Firmware | - | All | All | All |
| Hardware | Lenovo | A340-24icb | - | All | All | All |
| Operating System | Lenovo | A340-24icb Firmware | - | All | All | All |
| Hardware | Lenovo | A340-24ick | - | All | All | All |
| Operating System | Lenovo | A340-24ick Firmware | - | All | All | All |
| Hardware | Lenovo | A540-24icb | - | All | All | All |
| Operating System | Lenovo | A540-24icb Firmware | - | All | All | All |
| Hardware | Lenovo | A540-27icb | - | All | All | All |
| Operating System | Lenovo | A540-27icb Firmware | - | All | All | All |
| Hardware | Lenovo | Ideacentre 5-14iob6 | - | All | All | All |
| Operating System | Lenovo | Ideacentre 5-14iob6 Firmware | - | All | All | All |
| Hardware | Lenovo | Ideacentre 510s-07icb | - | All | All | All |
| Operating System | Lenovo | Ideacentre 510s-07icb Firmware | - | All | All | All |
| Hardware | Lenovo | Ideacentre 510s-07ick | - | All | All | All |
| Operating System | Lenovo | Ideacentre 510s-07ick Firmware | - | All | All | All |
| Hardware | Lenovo | Ideacentre Aio 3-22ada6 | - | All | All | All |
| Operating System | Lenovo | Ideacentre Aio 3-22ada6 Firmware | - | All | All | All |
| Hardware | Lenovo | Ideacentre Aio 3-22iil5 | - | All | All | All |
| Operating System | Lenovo | Ideacentre Aio 3-22iil5 Firmware | - | All | All | All |
| Hardware | Lenovo | Ideacentre Aio 3-22itl6 | - | All | All | All |
| Operating System | Lenovo | Ideacentre Aio 3-22itl6 Firmware | - | All | All | All |
| Hardware | Lenovo | Ideacentre Aio 3-24ada6 | - | All | All | All |
| Operating System | Lenovo | Ideacentre Aio 3-24ada6 Firmware | - | All | All | All |
| Hardware | Lenovo | Ideacentre Aio 3-24iil5 | - | All | All | All |
| Operating System | Lenovo | Ideacentre Aio 3-24iil5 Firmware | - | All | All | All |
| Hardware | Lenovo | Ideacentre Aio 3-24itl6 | - | All | All | All |
| Operating System | Lenovo | Ideacentre Aio 3-24itl6 Firmware | - | All | All | All |
| Hardware | Lenovo | Ideacentre Aio 3-27itl6 | - | All | All | All |
| Operating System | Lenovo | Ideacentre Aio 3-27itl6 Firmware | - | All | All | All |
| Hardware | Lenovo | Ideacentre Creator 5-14iob6 | - | All | All | All |
| Operating System | Lenovo | Ideacentre Creator 5-14iob6 Firmware | - | All | All | All |
| Hardware | Lenovo | Ideacentre Gaming 5-14iob6 | - | All | All | All |
| Operating System | Lenovo | Ideacentre Gaming 5-14iob6 Firmware | - | All | All | All |
| Hardware | Lenovo | Se30 | - | All | All | All |
| Operating System | Lenovo | Se30 Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M600 | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M600 Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M700 Tiny | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M700 Tiny Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M70a | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M70a Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M710e | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M710e Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M710q | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M710q Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M710q 10yc | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M710q 10yc Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M710s | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M710s Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M710t | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M710t Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M720e | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M720e Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M75n | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M75n Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M800 | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M800 Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M810z | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M810z Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M820z | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M820z Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M900 | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M900x | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M900x Firmware | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M900 Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M90a Gen 2 | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M90a Gen 2 Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M910q | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M910q Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M910s | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M910s Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M910t | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M910t Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkcentre M910x | - | All | All | All |
| Operating System | Lenovo | Thinkcentre M910x Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkstation P310 | - | All | All | All |
| Operating System | Lenovo | Thinkstation P310 Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkstation P320 | - | All | All | All |
| Operating System | Lenovo | Thinkstation P320 Firmware | - | All | All | All |
| Hardware | Lenovo | Thinkstation P320 Tiny | - | All | All | All |
| Operating System | Lenovo | Thinkstation P320 Tiny Firmware | - | All | All | All |
| Hardware | Lenovo | V30a-22iml | - | All | All | All |
| Operating System | Lenovo | V30a-22iml Firmware | - | All | All | All |
| Hardware | Lenovo | V30a-24iml | - | All | All | All |
| Operating System | Lenovo | V30a-24iml Firmware | - | All | All | All |
| Hardware | Lenovo | V410z | - | All | All | All |
| Operating System | Lenovo | V410z Firmware | - | All | All | All |
| Hardware | Lenovo | V50t-13iob G2 | - | All | All | All |
| Operating System | Lenovo | V50t-13iob G2 Firmware | - | All | All | All |
| Hardware | Lenovo | V520 | - | All | All | All |
| Hardware | Lenovo | V520s | - | All | All | All |
| Operating System | Lenovo | V520s Firmware | - | All | All | All |
| Operating System | Lenovo | V520 Firmware | - | All | All | All |
| Hardware | Lenovo | V530-15icb | - | All | All | All |
| Operating System | Lenovo | V530-15icb Firmware | - | All | All | All |
| Hardware | Lenovo | V530-15icr | - | All | All | All |
| Operating System | Lenovo | V530-15icr Firmware | - | All | All | All |
| Hardware | Lenovo | V530s-07icb | - | All | All | All |
| Operating System | Lenovo | V530s-07icb Firmware | - | All | All | All |
| Hardware | Lenovo | V530s-07icr | - | All | All | All |
| Operating System | Lenovo | V530s-07icr Firmware | - | All | All | All |
| Hardware | Lenovo | V540-24iwl | - | All | All | All |
| Operating System | Lenovo | V540-24iwl Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Multi-vendor BIOS Security Vulnerabilities (February 2022) - Lenovo Support US | MISC | support.lenovo.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Lenovo thanks Jiawei Yin(@yngweijw) and Menghao Li of IIE varas
There are currently no legacy QID mappings associated with this CVE.