← Database
CVE-2021-3843
MEDIUM
CVSS: 6.7
Published: 2021-11-12
Modified: 2026-06-17
Description
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected Platforms
Lenovo Thinkpad L390 Yoga FirmwareLenovo Thinkpad L15Lenovo Thinkpad L390 YogaLenovo Thinkpad X260Lenovo Thinkpad S5 2Nd GenLenovo Thinkpad L13 Yoga Gen 2 FirmwareLenovo Thinkpad 11E 4Th Gen I7Lenovo Thinkpad L14Lenovo Thinkpad X390 Yoga FirmwareLenovo Thinkpad L13
Weakness Type
CWE-20, NVD-CWE-noinfo