What’s Vulnerable › Vulnerabilities

CVE-2021-4210

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-22 · updated 2026-06-17
• Weakness: CWE-20

Description

A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected products

• Lenovo A540-24Icb Firmware: all versions
• Lenovo A540-27Icb Firmware: all versions
• Lenovo Ideacentre 5-14Imb05 Firmware: all versions
• Lenovo Ideacentre Aio 3-22Ada6 Firmware: all versions
• Lenovo Ideacentre Aio 3-22Iil5 Firmware: all versions
• Lenovo Ideacentre Aio 3-22Itl6 Firmware: all versions
• Lenovo Ideacentre Aio 3-24Ada6 Firmware: all versions
• Lenovo Ideacentre Aio 3-24Iil5 Firmware: all versions
• Lenovo Ideacentre Aio 3-24Itl6 Firmware: all versions
• Lenovo Ideacentre Aio 3-27Itl6 Firmware: all versions
• Lenovo Ideacentre C5-14Imb05 Firmware: all versions
• Lenovo Ideacentre G5-14Imb05 Firmware: all versions
• Lenovo Stadia Ggp-120 Firmware: all versions
• Lenovo Thinkcentre M700 Firmware: all versions
• Lenovo Thinkcentre M700 Tiny Firmware: all versions
• Lenovo Thinkcentre M70A Firmware: all versions
• Lenovo Thinkcentre M75N Firmware: all versions
• Lenovo Thinkcentre M800 Firmware: all versions
• Lenovo Thinkcentre M810Z Firmware: all versions
• Lenovo Thinkcentre M820Z Firmware: all versions
• Lenovo Thinkcentre M900 Firmware: all versions
• Lenovo Thinkcentre M900X Firmware: all versions
• Lenovo Thinkcentre M90A Gen2 Firmware: all versions
• Lenovo Thinkcentre M910Z Firmware: all versions
• Lenovo Thinkcentre X1 Firmware: all versions
• Lenovo Thinkedge Se30 Firmware: all versions
• Lenovo Thinkstation P310 Firmware: all versions
• Lenovo Thinkstation P520 Firmware: all versions
• Lenovo Thinkstation P520C Firmware: all versions
• Lenovo V410Z Firmware: all versions

References

• https://support.lenovo.com/us/en/product_security/LEN-77639
• https://support.lenovo.com/us/en/product_security/LEN-77639

Get alerted when CVE-2021-4210 or the next vulnerability affects your stack