← Database

CVE-2021-3719

MEDIUM CVSS: 6.7 Published: 2021-11-12 Modified: 2026-06-17

Description

A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected Platforms

Lenovo Thinkcentre M6500T\/SLenovo Thinkcentre M83Lenovo Thinkcentre M73P FirmwareLenovo Thinkcentre M93Lenovo Thinkcentre X1Lenovo Thinkstation P700 FirmwareLenovo Thinkcentre M93PLenovo Thinkcentre M818Z FirmwareLenovo Thinkcentre M900 FirmwareLenovo Thinkstation P300 Firmware

Weakness Type

CWE-20, NVD-CWE-noinfo

References