What’s Vulnerable › Vulnerabilities

CVE-2021-4211

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-22 · updated 2026-06-17
• Weakness: CWE-20

Description

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected products

• Lenovo A340-22Icb Firmware: all versions
• Lenovo A340-22Ick Firmware: all versions
• Lenovo A340-24Icb Firmware: all versions
• Lenovo A340-24Ick Firmware: all versions
• Lenovo A540-24Icb Firmware: all versions
• Lenovo A540-27Icb Firmware: all versions
• Lenovo Ideacentre 5-14Iob6 Firmware: all versions
• Lenovo Ideacentre 510S-07Icb Firmware: all versions
• Lenovo Ideacentre 510S-07Ick Firmware: all versions
• Lenovo Ideacentre Aio 3-22Ada6 Firmware: all versions
• Lenovo Ideacentre Aio 3-22Iil5 Firmware: all versions
• Lenovo Ideacentre Aio 3-22Itl6 Firmware: all versions
• Lenovo Ideacentre Aio 3-24Ada6 Firmware: all versions
• Lenovo Ideacentre Aio 3-24Iil5 Firmware: all versions
• Lenovo Ideacentre Aio 3-24Itl6 Firmware: all versions
• Lenovo Ideacentre Aio 3-27Itl6 Firmware: all versions
• Lenovo Ideacentre Creator 5-14Iob6 Firmware: all versions
• Lenovo Ideacentre Gaming 5-14Iob6 Firmware: all versions
• Lenovo Se30 Firmware: all versions
• Lenovo Thinkcentre M600 Firmware: all versions
• Lenovo Thinkcentre M700 Tiny Firmware: all versions
• Lenovo Thinkcentre M70A Firmware: all versions
• Lenovo Thinkcentre M710E Firmware: all versions
• Lenovo Thinkcentre M710Q (10Yc) Firmware: all versions
• Lenovo Thinkcentre M710Q Firmware: all versions
• Lenovo Thinkcentre M710S Firmware: all versions
• Lenovo Thinkcentre M710T Firmware: all versions
• Lenovo Thinkcentre M720E Firmware: all versions
• Lenovo Thinkcentre M75N Firmware: all versions
• Lenovo Thinkcentre M800 Firmware: all versions

References

• https://support.lenovo.com/us/en/product_security/LEN-77639
• https://support.lenovo.com/us/en/product_security/LEN-77639

Get alerted when CVE-2021-4211 or the next vulnerability affects your stack