ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-4211

—
CVSS 3.1
6.7 medium
EPSS
<1%p16
Published
()
Modified
Description

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Vendors
lenovo
Products
a340-22icb firmware, a340-22ick firmware, a340-24icb firmware, a340-24ick firmware, a540-24icb firmware, a540-27icb firmware, ideacentre 5-14iob6 firmware, ideacentre 510s-07icb firmware, ideacentre 510s-07ick firmware, ideacentre aio 3-22ada6 firmware, ideacentre aio 3-22iil5 firmware, ideacentre aio 3-22itl6 firmware
Weakness
CWE-20
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.