← Database

CVE-2021-4211

MEDIUM CVSS: 6.7 Published: 2022-04-22 Modified: 2026-06-17

Description

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected Platforms

Lenovo Ideacentre Aio 3-24Ada6Lenovo Thinkcentre M710Q FirmwareLenovo Thinkcentre M75NLenovo V410Z FirmwareLenovo A540-24IcbLenovo V30A-24Iml FirmwareLenovo V540-24Iwl FirmwareLenovo V520S FirmwareLenovo Thinkcentre M910TLenovo Thinkcentre M910X

Weakness Type

CWE-20, CWE-20

References