60
CVE-2021-3970
—CVSS 3.1
6.7 medium
EPSS
1%p69
Published
()
Modified
Description
A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.
- Vendors
- lenovo
- Products
- ideapad 3-14ada05 firmware, ideapad 3-14ada6 firmware, ideapad 3-14alc6 firmware, ideapad 3-14are05 firmware, ideapad 3-15ada6 firmware, ideapad 3-15alc6 firmware, ideapad 3-15are05 firmware, ideapad 3-15igl05 firmware, ideapad 3-17ada05 firmware, ideapad 3-17ada6 firmware, ideapad 3-17alc6 firmware, ideapad 3-17are05 firmware
- Weakness
- CWE-20
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H