← Database

CVE-2021-4210

MEDIUM CVSS: 6.7 Published: 2022-04-22 Modified: 2026-06-17

Description

A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected Platforms

Lenovo Ideacentre Aio 3-24Ada6Lenovo Ideacentre Aio 3-24Itl6 FirmwareLenovo Ideacentre Aio 3-22Itl6Lenovo Thinkcentre M75NLenovo Thinkcentre X1Lenovo Stadia Ggp-120Lenovo Thinkstation P520C FirmwareLenovo Ideacentre G5-14Imb05 FirmwareLenovo V410Z FirmwareLenovo Thinkcentre M90A Gen2 Firmware

Weakness Type

CWE-20, NVD-CWE-noinfo

References