← Back

CVE-2021-3452

nvd nist
Published: Jul 16, 2021Modified: Nov 21, 2024

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected (0)

Products:
Configuration A
27 platform
Running on/withPlatform Versions
Lenovo
Bios
All versions
Lenovo
Thinkpad 11e 3rd Gen
All versions
Lenovo
Thinkpad 11e 4th Gen
All versions
Lenovo
Thinkpad 11e 5th Gen
All versions
Lenovo
Thinkpad 11e Yoga Gen 6
All versions
Lenovo
Thinkpad 13 Gen 2
All versions
Lenovo
Thinkpad E14 Gen 2
All versions
Lenovo
Thinkpad E15 Gen 2
All versions
Lenovo
Thinkpad L13
All versions
Lenovo
Thinkpad L13 Gen 2
All versions
Lenovo
Thinkpad L13 Yoga
All versions
Lenovo
Thinkpad L13 Yogo Gen 2
All versions
Lenovo
Thinkpad L14
All versions
Lenovo
Thinkpad L14 Gen 2
All versions
Lenovo
Thinkpad L15
All versions
Lenovo
Thinkpad L15 Gen 2
All versions
Lenovo
Thinkpad L380
All versions
Lenovo
Thinkpad L380 Yoga
All versions
Lenovo
Thinkpad L390
All versions
Lenovo
Thinkpad L390 Yoga
All versions
Lenovo
Thinkpad T460
All versions
Lenovo
Thinkpad X12 Detachable Gen 1
All versions
Lenovo
Thinkpad X260
All versions
Lenovo
Thinkpad X380 Yoga
All versions
Lenovo
Thinkpad Yoga 11e 3rd Gen
All versions
Lenovo
Thinkpad Yoga 11e 4th Gen
All versions
Lenovo
Thinkpad Yoga 370
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: psirt@lenovo.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.