CVE-2021-3970

State: Published
Severity: 6.7 Medium
Published: Apr 22, 2022
Updated: Aug 3, 2024
Reserved: Nov 17, 2021

Description

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.

Scores

CVSS	Score	Vector	Source
3.1	6.7 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	lenovo

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
Notebook BIOSLenovo	variousAffected

References

https://support.lenovo.com/us/en/product_security/LEN-73440

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.