← Database
CVE-2021-3599
MEDIUM
CVSS: 6.7
Published: 2021-11-12
Modified: 2026-06-17
Description
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected Platforms
Lenovo Ideapad Yoga S940-14Iwl FirmwareLenovo Thinkpad L490Lenovo Ideapad S940-14IwlLenovo Thinkpad Yoga 370 FirmwareLenovo Thinkpad X1 Yoga 1St Gen FirmwareLenovo Thinkpad X1 Yoga 4Th Gen FirmwareLenovo Thinkpad P1 Gen 2 FirmwareLenovo Thinkpad P71 FirmwareLenovo Thinkpad X13 Gen 1 FirmwareLenovo Thinkpad P51
Weakness Type
CWE-20, NVD-CWE-noinfo