Vulnerabilites related to lenovo - thinkcentre_m710q_\(10yc\)_firmware
cve-2021-4211
Vulnerability from cvelistv5
Published
2022-04-22 20:30
Modified
2024-08-03 17:16
Severity ?
EPSS score ?
Summary
A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.
References
▼ | URL | Tags |
---|---|---|
https://support.lenovo.com/us/en/product_security/LEN-77639 | x_refsource_MISC |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-03T17:16:04.358Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_MISC", "x_transferred", ], url: "https://support.lenovo.com/us/en/product_security/LEN-77639", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "BIOS", vendor: "Lenovo", versions: [ { status: "affected", version: "various", }, ], }, ], credits: [ { lang: "en", value: "Lenovo thanks Jiawei Yin(@yngweijw) and Menghao Li of IIE varas", }, ], descriptions: [ { lang: "en", value: "A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-20", description: "CWE-20 Improper Input Validation", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2022-04-22T20:30:43", orgId: "da227ddf-6e25-4b41-b023-0f976dcaca4b", shortName: "lenovo", }, references: [ { tags: [ "x_refsource_MISC", ], url: "https://support.lenovo.com/us/en/product_security/LEN-77639", }, ], solutions: [ { lang: "en", value: "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-77639.", }, ], source: { advisory: "LEN-77639", discovery: "UNKNOWN", }, x_generator: { engine: "Vulnogram 0.0.9", }, x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "psirt@lenovo.com", ID: "CVE-2021-4211", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "BIOS", version: { version_data: [ { version_affected: "=", version_value: "various", }, ], }, }, ], }, vendor_name: "Lenovo", }, ], }, }, credit: [ { lang: "eng", value: "Lenovo thanks Jiawei Yin(@yngweijw) and Menghao Li of IIE varas", }, ], data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.", }, ], }, generator: { engine: "Vulnogram 0.0.9", }, impact: { cvss: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "CWE-20 Improper Input Validation", }, ], }, ], }, references: { reference_data: [ { name: "https://support.lenovo.com/us/en/product_security/LEN-77639", refsource: "MISC", url: "https://support.lenovo.com/us/en/product_security/LEN-77639", }, ], }, solution: [ { lang: "en", value: "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-77639.", }, ], source: { advisory: "LEN-77639", discovery: "UNKNOWN", }, }, }, }, cveMetadata: { assignerOrgId: "da227ddf-6e25-4b41-b023-0f976dcaca4b", assignerShortName: "lenovo", cveId: "CVE-2021-4211", datePublished: "2022-04-22T20:30:43", dateReserved: "2022-01-24T00:00:00", dateUpdated: "2024-08-03T17:16:04.358Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
Vulnerability from fkie_nvd
Published
2022-04-22 21:15
Modified
2024-11-21 06:37
Severity ?
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:a340-22icb_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "BF657866-BAEC-4C6F-8031-02BFCAEE2773", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:a340-22icb:-:*:*:*:*:*:*:*", matchCriteriaId: "50F6B6FA-3F52-4A7C-8D19-0F47EBDDDA97", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:a340-22ick_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "23F981F9-27A1-4968-A2D4-F1583F93538B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:a340-22ick:-:*:*:*:*:*:*:*", matchCriteriaId: "A9C383D0-91F1-477A-A9F7-DE722C5BE9B6", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:a340-24icb_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "E942F823-1AEA-4078-94DC-3BABFEEDFD25", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:a340-24icb:-:*:*:*:*:*:*:*", matchCriteriaId: "A6D839FA-08DF-4016-A625-767FF60285B6", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:a340-24ick_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "1BD54F37-BFF3-453D-9E03-F2CD6DDA75BD", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:a340-24ick:-:*:*:*:*:*:*:*", matchCriteriaId: "29EA6073-5A6D-445B-8579-AACAC87BA0F2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:a540-24icb_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "5804203F-FAFA-4643-9C07-71A0A9C9D76F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:a540-24icb:-:*:*:*:*:*:*:*", matchCriteriaId: "6C2D9845-DDE6-48E6-AA30-2455BC946D88", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:a540-27icb_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "72CC3C05-1653-43CD-AD33-109217B0E576", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:a540-27icb:-:*:*:*:*:*:*:*", matchCriteriaId: "6EF5765C-6672-494B-9F62-F9A38FAB18ED", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:ideacentre_5-14iob6_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "F59B3837-15BC-479A-B0D4-60E6100FDB30", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:ideacentre_5-14iob6:-:*:*:*:*:*:*:*", matchCriteriaId: "CF6ED930-A8C3-45A2-A2E0-536E9F732B1F", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:ideacentre_510s-07icb_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "93CD0AEB-9D18-49A0-B1EE-A09BE6D2E954", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:ideacentre_510s-07icb:-:*:*:*:*:*:*:*", matchCriteriaId: "501B5AB2-483A-42D6-97B6-C47413232811", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:ideacentre_510s-07ick_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "5C7F34BC-6202-476C-9E55-8A0B9F8D4804", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:ideacentre_510s-07ick:-:*:*:*:*:*:*:*", matchCriteriaId: "A2BC5F0E-9AD4-4E73-B6A9-0A927C22DB14", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:ideacentre_aio_3-22ada6_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "D4CA35B8-F912-4C10-8B2B-87972887E034", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:ideacentre_aio_3-22ada6:-:*:*:*:*:*:*:*", matchCriteriaId: "4AD6D9BA-2470-4CF7-B083-D3C77878E6DA", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:ideacentre_aio_3-22iil5_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "D8352989-3F13-456F-8F40-95D9EE04526E", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:ideacentre_aio_3-22iil5:-:*:*:*:*:*:*:*", matchCriteriaId: "E4165F54-D43D-42FE-9754-4724AFE6654B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:ideacentre_aio_3-22itl6_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "AAC57ABC-59BF-40F6-BB79-877DED5E53D2", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:ideacentre_aio_3-22itl6:-:*:*:*:*:*:*:*", matchCriteriaId: "35E8DEFA-7E34-4B38-9555-505CD5EAACA1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:ideacentre_aio_3-24ada6_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "ECBB5D23-443A-490B-82CD-109AA8C8D123", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:ideacentre_aio_3-24ada6:-:*:*:*:*:*:*:*", matchCriteriaId: "AE5DF59B-D599-4134-8568-5E7E73CA86F7", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:ideacentre_aio_3-24iil5_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "6404E88B-C2AE-4E48-8D9A-6D41D542226F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:ideacentre_aio_3-24iil5:-:*:*:*:*:*:*:*", matchCriteriaId: "0AD8D274-973C-45FA-BFC0-C6EE6A5C10D5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:ideacentre_aio_3-24itl6_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "E849F206-8FE9-44C1-92B1-26B2683B2C94", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:ideacentre_aio_3-24itl6:-:*:*:*:*:*:*:*", matchCriteriaId: "A264E0C3-8D56-443B-9EAE-E08F46748A80", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:ideacentre_aio_3-27itl6_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "5BF30EA5-EF9A-42A2-94D2-2A118F0646CC", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:ideacentre_aio_3-27itl6:-:*:*:*:*:*:*:*", matchCriteriaId: "59B1DBF8-0788-40BA-BE29-5B2EA35874B1", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:ideacentre_creator_5-14iob6_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "366D242F-90E9-43F2-856C-4BCE90BB5C3A", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:ideacentre_creator_5-14iob6:-:*:*:*:*:*:*:*", matchCriteriaId: "0AA1F367-AEDF-4379-A94F-2484B65FE5D5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:ideacentre_gaming_5-14iob6_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "5ED0C2D5-3114-45D2-9816-80CF525D054B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:ideacentre_gaming_5-14iob6:-:*:*:*:*:*:*:*", matchCriteriaId: "4EF3A200-2D5B-45BB-AE23-F25927BA3FA4", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:se30_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "3B7D39AE-C923-49EB-8E3D-F31469158DD1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:se30:-:*:*:*:*:*:*:*", matchCriteriaId: "68309BF0-7D6C-4C1A-99C0-172DA9EECE5D", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m600_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "A92A5753-FBE9-4A98-B2EF-1C5FEDE5210F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m600:-:*:*:*:*:*:*:*", matchCriteriaId: "DCA4E481-3FE3-4AC5-BDEA-EF0C667E331E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m700_tiny_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "7D17B208-9B86-4145-B1B3-BF1765CC47F3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m700_tiny:-:*:*:*:*:*:*:*", matchCriteriaId: "AE20DD1E-5C2C-4253-B71E-529D699FB8D0", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m70a_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "3A0EEA1E-11CB-4D37-BB4B-EDC9CFF5BD66", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m70a:-:*:*:*:*:*:*:*", matchCriteriaId: "E23D10CA-F552-4D26-B350-6F0526BCC53C", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m710e_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "F3D9908A-31D6-4791-B3C0-538A0B89D14B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m710e:-:*:*:*:*:*:*:*", matchCriteriaId: "D0D1DD88-5D73-4C5C-BC5F-5A1119BCB607", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m710q_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "2919BC0E-C62E-44D9-B603-A8DB53E39912", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m710q:-:*:*:*:*:*:*:*", matchCriteriaId: "7F6EE9EB-3062-4035-B2E8-10FBADC9BA3B", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m710q_\\(10yc\\)_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "B0503E68-8F66-4592-89CE-F0ACF8473F44", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m710q_\\(10yc\\):-:*:*:*:*:*:*:*", matchCriteriaId: "DD8C5A10-A599-487F-AC17-16664140C47E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m710s_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "92513361-76CC-4944-A852-61ADE6EC035B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m710s:-:*:*:*:*:*:*:*", matchCriteriaId: "226E471D-D956-4F0A-8B5F-4D12ACB840DC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m710t_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "D8BA99DF-3393-457E-8A26-4D0D4667EE5D", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m710t:-:*:*:*:*:*:*:*", matchCriteriaId: "97D36621-D244-4A52-A229-3BDF001E8527", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m720e_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "12CF7212-911C-4A48-B4DF-35C429AA3D4B", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m720e:-:*:*:*:*:*:*:*", matchCriteriaId: "02F399A4-01A9-4D9E-9371-F260C31CB942", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m75n_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "AB9A5A8D-91E1-4ED5-9AA3-981BF4F13FA1", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m75n:-:*:*:*:*:*:*:*", matchCriteriaId: "8644D2E7-B6C7-4E0F-B8C4-37ADAEAEDC03", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m800_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "F7D3CF8C-9047-43CF-9E8A-623E43D78993", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m800:-:*:*:*:*:*:*:*", matchCriteriaId: "B97FE070-E06D-433B-AAC9-A2460E404B94", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m810z_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "280445F6-17CD-4412-B4DF-86DA774DAA39", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m810z:-:*:*:*:*:*:*:*", matchCriteriaId: "A5D5591C-340C-45FC-A696-E146EE895FC2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m820z_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "A07431C2-F492-496D-B216-31EEBC187508", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m820z:-:*:*:*:*:*:*:*", matchCriteriaId: "BB5ED973-0D21-4F0A-9D37-95EB5B06D79E", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m900_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "10CCB9B8-49FD-492D-A271-DF7F94056C58", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m900:-:*:*:*:*:*:*:*", matchCriteriaId: "ADC80C43-18AF-433D-AA51-F473B8501329", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m900x_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "F7616863-98A6-445F-8BCA-4389DF3869EC", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m900x:-:*:*:*:*:*:*:*", matchCriteriaId: "261F2F75-E0E4-4318-BB7B-065EC466D671", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m90a_\\(gen_2\\)_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "EB9924BB-F92C-4FA3-B186-F03F5A02075F", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m90a_\\(gen_2\\):-:*:*:*:*:*:*:*", matchCriteriaId: "95CC97F6-422F-4235-8385-F30E860891A2", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m910q_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "C0CDD5E1-2A3B-4039-A37E-28E3EFED12A6", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m910q:-:*:*:*:*:*:*:*", matchCriteriaId: "4292102B-EE5D-4665-AB5C-936BAB1CBB26", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m910s_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "FA16341A-47CE-4F41-B493-21AE920510D3", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m910s:-:*:*:*:*:*:*:*", matchCriteriaId: "2E87A6FE-32D2-420F-AC13-9A8C2E510BAF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m910t_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "340CE705-7DE8-4A02-AE06-DBE21D391C64", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m910t:-:*:*:*:*:*:*:*", matchCriteriaId: "011EF88C-0D01-48F2-BBCC-8FA99CF9F834", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkcentre_m910x_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "B11CC287-6181-4881-80E4-AAE89C7D4581", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkcentre_m910x:-:*:*:*:*:*:*:*", matchCriteriaId: "3F1650B0-A469-4C44-87C9-2FFDFC0AA4DB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkstation_p310_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "B24DD35D-0F49-4678-86F8-CE27FB21F184", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkstation_p310:-:*:*:*:*:*:*:*", matchCriteriaId: "363F9A72-1401-4F5D-84F1-D018867D972D", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkstation_p320_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "D1A12154-FC5F-468E-891D-518950BABA04", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkstation_p320:-:*:*:*:*:*:*:*", matchCriteriaId: "435B308E-C9CC-45BD-B929-D734B773AEDF", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:thinkstation_p320_tiny_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "9BAB2B4C-BEE9-49E1-92CE-8C3C395D7D31", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:thinkstation_p320_tiny:-:*:*:*:*:*:*:*", matchCriteriaId: "3C9CABF7-6CB6-402D-81D5-DCD5E9CAB197", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:v30a-22iml_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "24228AEF-B8A4-4FD6-8403-D00057703777", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:v30a-22iml:-:*:*:*:*:*:*:*", matchCriteriaId: "A8CA790E-5003-48CF-BE48-4F631CE4FAAB", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:v30a-24iml_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "9ED7395C-ADD5-46EA-82F7-577D39CB2E66", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:v30a-24iml:-:*:*:*:*:*:*:*", matchCriteriaId: "6CC862A9-07AF-4110-8E11-DB41B25863A5", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:v410z_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "58D7CFB1-388C-435B-9CEC-7A0101140A42", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:v410z:-:*:*:*:*:*:*:*", matchCriteriaId: "45D2AE1A-3A21-498C-8C0F-6E2F8D9BBE24", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:v50t-13iob_g2_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "7044E429-5B8D-4E52-8AF6-E37DAA337805", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:v50t-13iob_g2:-:*:*:*:*:*:*:*", matchCriteriaId: "E839B843-1748-4A0A-A0E3-F799794F85BE", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:v520_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "DC51B952-1F1D-479A-8A07-0F9B998488FC", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:v520:-:*:*:*:*:*:*:*", matchCriteriaId: "74E83E2A-B91F-424E-8490-594D82D94839", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:v520s_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "C335B9AF-594F-4172-8F0D-9BD32C15D274", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:v520s:-:*:*:*:*:*:*:*", matchCriteriaId: "29B3736D-01AC-4FD2-8B01-F5029D6A0EC3", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:v530-15icb_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "A57E78BF-9B66-42EF-B7A1-0434996A9811", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:v530-15icb:-:*:*:*:*:*:*:*", matchCriteriaId: "1A85AF45-B5F1-4645-B88D-B59EB0B884F6", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:v530-15icr_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "3BAD4386-8793-4BA4-972E-D66E7B637BDF", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:v530-15icr:-:*:*:*:*:*:*:*", matchCriteriaId: "95024876-9C69-4191-8880-1A7E40CF63A6", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:v530s-07icb_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "DB7E2AA2-F1EC-4D92-9E62-A9A46C3F8699", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:v530s-07icb:-:*:*:*:*:*:*:*", matchCriteriaId: "DC1F8C3B-CA56-49C3-9089-24857ACF65FC", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:v530s-07icr_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "4E86BAEB-A6B6-422C-AF7E-53A3EE069942", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:v530s-07icr:-:*:*:*:*:*:*:*", matchCriteriaId: "2846C59E-89B6-478E-8406-5BC09326E3B8", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:lenovo:v540-24iwl_firmware:-:*:*:*:*:*:*:*", matchCriteriaId: "361B2212-79E1-4AEC-8A85-E14572566E08", vulnerable: true, }, ], negate: false, operator: "OR", }, { cpeMatch: [ { criteria: "cpe:2.3:h:lenovo:v540-24iwl:-:*:*:*:*:*:*:*", matchCriteriaId: "5278CBEC-986F-4AE0-A409-86844706A832", vulnerable: false, }, ], negate: false, operator: "OR", }, ], operator: "AND", }, ], cveTags: [], descriptions: [ { lang: "en", value: "A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.", }, { lang: "es", value: "Una posible vulnerabilidad en la función de devolución de llamada SMI usada en el controlador de registro de eventos SMBIOS en algunos modelos de Lenovo Desktop, ThinkStation y ThinkEdge puede permitir a un atacante con acceso local y altos privilegios ejecutar código arbitrario", }, ], id: "CVE-2021-4211", lastModified: "2024-11-21T06:37:09.520", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "HIGH", cvssData: { accessComplexity: "LOW", accessVector: "LOCAL", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 7.2, confidentialityImpact: "COMPLETE", integrityImpact: "COMPLETE", vectorString: "AV:L/AC:L/Au:N/C:C/I:C/A:C", version: "2.0", }, exploitabilityScore: 3.9, impactScore: 10, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV31: [ { cvssData: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 0.8, impactScore: 5.9, source: "psirt@lenovo.com", type: "Secondary", }, { cvssData: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 6.7, baseSeverity: "MEDIUM", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "HIGH", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, exploitabilityScore: 0.8, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2022-04-22T21:15:10.007", references: [ { source: "psirt@lenovo.com", tags: [ "Vendor Advisory", ], url: "https://support.lenovo.com/us/en/product_security/LEN-77639", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "https://support.lenovo.com/us/en/product_security/LEN-77639", }, ], sourceIdentifier: "psirt@lenovo.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-20", }, ], source: "psirt@lenovo.com", type: "Secondary", }, { description: [ { lang: "en", value: "CWE-20", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }