{"containers": {"cna": {"affected": [{"product": "BIOS", "vendor": "Lenovo", "versions": [{"status": "affected", "version": "various"}]}], "credits": [{"lang": "en", "value": "Lenovo thanks Jiawei Yin(@yngweijw) and Menghao Li of IIE varas"}], "descriptions": [{"lang": "en", "value": "A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-04-22T20:30:44", "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://support.lenovo.com/us/en/product_security/LEN-77639"}], "solutions": [{"lang": "en", "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-77639."}], "source": {"advisory": "LEN-77639", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@lenovo.com", "ID": "CVE-2021-4212", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "BIOS", "version": {"version_data": [{"version_affected": "=", "version_value": "various"}]}}]}, "vendor_name": "Lenovo"}]}}, "credit": [{"lang": "eng", "value": "Lenovo thanks Jiawei Yin(@yngweijw) and Menghao Li of IIE varas"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-20 Improper Input Validation"}]}]}, "references": {"reference_data": [{"name": "https://support.lenovo.com/us/en/product_security/LEN-77639", "refsource": "MISC", "url": "https://support.lenovo.com/us/en/product_security/LEN-77639"}]}, "solution": [{"lang": "en", "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-77639."}], "source": {"advisory": "LEN-77639", "discovery": "UNKNOWN"}}}}, "cveMetadata": {"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "assignerShortName": "lenovo", "cveId": "CVE-2021-4212", "datePublished": "2022-04-22T20:30:44", "dateReserved": "2022-01-24T00:00:00", "dateUpdated": "2022-04-22T20:30:44", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:c340-14iml_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3A2A14D6-1D26-4D4A-86A0-46FCFB518526", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:c340-14iml:-:*:*:*:*:*:*:*", "matchCriteriaId": "86569D76-4615-4865-8048-31FDD811A7A4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:c340-15iml_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "61ACF05D-A000-4ABD-94C8-C006B9EDC5C9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:c340-15iml:-:*:*:*:*:*:*:*", "matchCriteriaId": "175478C0-451F-4E13-B5A1-2D2D67399151", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:d330-10igm_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4BD1DC59-6886-47EF-AE4F-A43C92A06FC0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:d330-10igm:-:*:*:*:*:*:*:*", "matchCriteriaId": "1D3218C6-E262-4611-82FC-FC657EC3B6B3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:duet_3-10igl5_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C36245B2-3F2E-4D0E-9D8B-D925A42C5F6A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:duet_3-10igl5:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A514B4D-BA44-458F-AE69-2C5C65B92F9C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:e41-50_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "335A408F-3CD0-4C58-A7BC-C7529ACD1AB1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:e41-50:-:*:*:*:*:*:*:*", "matchCriteriaId": "FD139448-D942-429B-AE57-8E1EE366DAAB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:flex-14iml_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4AE24D15-0924-4F5A-9DCB-FDAC6C63F382", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:flex-14iml:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5686ED1-9C64-4820-AC41-E67FFED65E3A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:flex-15iml_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E247AF26-6B3E-49BD-B558-63903091C033", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:flex-15iml:-:*:*:*:*:*:*:*", "matchCriteriaId": "B8890AFC-7325-4FE4-B915-BC76CE328D8A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_3-14are05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C17E5A3D-03B1-450A-8AC7-AA0F622262EB", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_3-14are05:-:*:*:*:*:*:*:*", "matchCriteriaId": "8D2410C3-1678-48B3-9004-7CD6EF7F8F35", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_3-15are05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EB2A97C2-4D5C-4C65-B1A0-9FB1A68E2E26", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_3-15are05:-:*:*:*:*:*:*:*", "matchCriteriaId": "27480F74-6D81-4DF8-8D3C-DD88C11069D0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_3-17are05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1693CDC4-60B1-4AFD-B03E-07F86D37E642", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_3-17are05:-:*:*:*:*:*:*:*", "matchCriteriaId": "58641B0C-8D1B-4782-BF2C-42D6430D8B4A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_5-14alc05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "176A58B7-0629-4CF2-9672-0CADDA29DDEE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_5-14alc05:-:*:*:*:*:*:*:*", "matchCriteriaId": "1F28F9DF-1C9E-463F-BF4F-F1E8CCA43906", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_5-14are05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "63DC112C-025A-48C0-BAC9-BE2400C54AA5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_5-14are05:-:*:*:*:*:*:*:*", "matchCriteriaId": "1561A7E5-0DDD-4D6F-AEAE-6CA9ACEA08A1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_5-15itl05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1524C54A-7A4A-40FA-93B5-937D25DA3781", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_5-15itl05:-:*:*:*:*:*:*:*", "matchCriteriaId": "A013FB04-A9C0-450A-9AE5-5BC343332E97", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_5_pro-14acn6_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF078A07-1C95-4B8B-B6E5-C34BAC155487", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_5_pro-14acn6:-:*:*:*:*:*:*:*", "matchCriteriaId": "B7D72D9A-2D3A-4CAA-8B10-95793994936D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_5_pro-14itl6_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5B3C00F7-E5AE-4E37-B6F0-8A36A222258C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_5_pro-14itl6:-:*:*:*:*:*:*:*", "matchCriteriaId": "5F708E90-9BB0-4ABD-94A6-F9C6F4CB2F01", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_5_pro-16ihu6_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E7ECD865-E643-434B-A334-165D184F310B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_5_pro-16ihu6:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC34C489-CC06-41DF-91C8-2919B9770E78", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_creator_5-15imh05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD2DCDDF-A7FC-4309-B8A0-8E346477E679", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_creator_5-15imh05:-:*:*:*:*:*:*:*", "matchCriteriaId": "B321E545-1C60-43C4-B594-4BE8E80D0850", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_gaming_3-15ach6_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA4B4FAC-1BA5-4694-A4DE-6A827B148BEC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_gaming_3-15ach6:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB1453A9-AA67-4512-94FC-A23A5D0220F4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_gaming_3-15arh05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FA6107B-0ABF-4191-95B7-6A274234DE87", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_gaming_3-15arh05:-:*:*:*:*:*:*:*", "matchCriteriaId": "D871B4FF-5FCD-4085-83B4-DCC5144891DB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:ideapad_gaming_3-15imh05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1124E810-109C-4A51-A6BC-C531ED458D9C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:ideapad_gaming_3-15imh05:-:*:*:*:*:*:*:*", "matchCriteriaId": "E956C347-1786-4BBB-8E07-1F173E3641B5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:l340-15irh_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "66EF091D-DFE5-4376-BEF2-EDB789A7EFDF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:l340-15irh:-:*:*:*:*:*:*:*", "matchCriteriaId": "EA2D4439-4A8B-4408-BF8D-1AE9C06DBB64", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:l340-15iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA6095CD-1598-453A-97A4-E75D512EB734", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:l340-15iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "4CCF37C8-1876-48B1-9DCC-2A55F05D78DB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:l340-15iwl_touch_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "46899B35-25DF-4993-B604-CE8FFF90BADC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:l340-15iwl_touch:-:*:*:*:*:*:*:*", "matchCriteriaId": "64BFDE87-F058-4498-9452-F91BEB77481B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:l340-17irh_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E85A0E73-E0EA-4DBB-8129-CB6BEAEA1F96", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:l340-17irh:-:*:*:*:*:*:*:*", "matchCriteriaId": "84098C75-DC85-43BD-8F39-3CFC4096A1C0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:l340-17iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F39261AB-83EC-41E8-8C8A-7095CBAC22B5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:l340-17iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "DF850EBE-0DAA-4C7F-9483-1DEDC733CBB7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:legion_y540-15irh_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "08491697-197C-44FA-8736-7ECE61496F25", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:legion_y540-15irh:-:*:*:*:*:*:*:*", "matchCriteriaId": "7A777FA6-182B-4C21-B599-54FC92CFB71C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:legion_y540-15irh-pg0_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A1B0C764-0175-4197-B2E6-E6F305F77A7A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:legion_y540-15irh-pg0:-:*:*:*:*:*:*:*", "matchCriteriaId": "F3358F8B-BE79-4C57-BFA1-4324EF5DFA83", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:legion_y540-17irh_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E17AAF3B-C9CB-4674-B4F4-401089E3657A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:legion_y540-17irh:-:*:*:*:*:*:*:*", "matchCriteriaId": "C86B6C31-5565-47A2-A6F7-AAFC3E1C6497", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:legion_y540-17irh-pg0_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "941FC2CF-152A-4F22-B285-BC1F55A75999", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:legion_y540-17irh-pg0:-:*:*:*:*:*:*:*", "matchCriteriaId": "20949554-72A0-400B-9C69-B6F11DE164A9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:legion_y545_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E06131BF-C699-4966-A60E-3B6B51A85F5D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:legion_y545:-:*:*:*:*:*:*:*", "matchCriteriaId": "0EAEDAFC-9C00-47F5-BE2F-67458489D136", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:legion_y545-pg0_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0DC2BD60-5807-417F-B114-B6352A67F05B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:legion_y545-pg0:-:*:*:*:*:*:*:*", "matchCriteriaId": "98DD03A0-162E-4393-B3C1-F6CF243FB20C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:legion_y7000-2019_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D694F3B-10D3-42E8-B55C-572AA5180FD1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:legion_y7000-2019:-:*:*:*:*:*:*:*", "matchCriteriaId": "9613293D-C5E1-485C-8024-B73A095FBF96", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:legion_y7000-2019-pg0_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "776E907F-04DE-45F1-8E9B-B3370A992032", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:legion_y7000-2019-pg0:-:*:*:*:*:*:*:*", "matchCriteriaId": "004D4C41-A7F4-4AC3-B250-CBADD178114A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s340-13iml_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF6EA77A-7C77-4DA9-A50B-E5C156ECF13A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s340-13iml:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC243A6F-9ADB-4E51-926C-3D4BAAEBA89A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s340-14api_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "330B2F2E-B2E1-4743-9EF4-1F5FAD1FDF67", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s340-14api:-:*:*:*:*:*:*:*", "matchCriteriaId": "1ACD0C61-89CF-4588-BC80-CC24D9265C15", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s340-14iml_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7B78BDC8-2A84-4E3A-8B0E-B8C8044E5E4E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s340-14iml:-:*:*:*:*:*:*:*", "matchCriteriaId": "CC0341E8-8B3C-4E97-91DB-770DB209051C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s340-15api_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5E2146E-B496-46CB-A62C-6F4C4A8B0DEE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s340-15api:-:*:*:*:*:*:*:*", "matchCriteriaId": "DFC87B62-12CB-4752-B1CB-3E4B47A522BA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s340-15api_touch_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E68CDAC2-8CBE-47D1-A682-86A2A529A611", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s340-15api_touch:-:*:*:*:*:*:*:*", "matchCriteriaId": "C94E1749-1F0E-40A2-81EF-643E99CB1228", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s340-15iml_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "36DC5792-476C-4543-A39C-A58D411334F4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s340-15iml:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE4FB530-2AF5-486A-B034-53393D212D6A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s540-14iml_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "19439C38-0EB0-462B-A4E2-0A5824A2411B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s540-14iml:-:*:*:*:*:*:*:*", "matchCriteriaId": "6782E331-9442-4B57-A32F-AA48511AD1A4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s540-14iml_touch_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "ACC81AD5-3344-460B-999D-03664921CF6C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s540-14iml_touch:-:*:*:*:*:*:*:*", "matchCriteriaId": "5692AF4D-1802-49C6-AF24-0A875A83DBB8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:s540-15iml_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "030E3040-E5B9-451A-A08E-63312562B74B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:s540-15iml:-:*:*:*:*:*:*:*", "matchCriteriaId": "78A9FC30-244F-441E-950E-2FDBFC520133", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:slim_7-14are05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "14C4C172-E856-43D2-918D-E5FC98E98F40", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:slim_7-14are05:-:*:*:*:*:*:*:*", "matchCriteriaId": "29F4DB03-5565-4643-8C54-CC0990F09108", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:slim_7-14itl05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A02F7B5-638A-46A3-A55B-8A2147D4D5FF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:slim_7-14itl05:-:*:*:*:*:*:*:*", "matchCriteriaId": "519C6C3A-4A67-4EAE-A588-67B423CC87EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:slim_7-15iil05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "926D017D-A1FF-4A62-B33F-931F64750336", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:slim_7-15iil05:-:*:*:*:*:*:*:*", "matchCriteriaId": "981F4EC1-AD4D-4B85-960F-882ABBE2A90A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:slim_7-15imh05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C5C98D0D-36E6-4F23-9EAC-F1743C87F561", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:slim_7-15imh05:-:*:*:*:*:*:*:*", "matchCriteriaId": "9240B1F9-5F4E-4736-ADE0-95D8922F5B70", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:slim_7-15itl05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "9128D2D2-2922-47B1-903C-BC37FE8692D5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:slim_7-15itl05:-:*:*:*:*:*:*:*", "matchCriteriaId": "D7F7A40C-E944-49C7-A7BC-2440FC95DC63", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkbook_13x_itg_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "25617B80-A748-445D-A523-3B07E6A1DB40", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkbook_13x_itg:-:*:*:*:*:*:*:*", "matchCriteriaId": "09B30D44-B6FB-4824-BC6A-24307D8F7439", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkbook_14_g3_itl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6E8A24E9-5183-40F5-B687-151054B94250", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkbook_14_g3_itl:-:*:*:*:*:*:*:*", "matchCriteriaId": "AEAF6B3E-3F3F-4397-AADF-24DA36BC96EB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkbook_plus_g2_itg_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DBBA946E-E3BC-4C8D-9B11-6A036F575000", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D725D6F-60A7-4BEE-A19F-AF6CEEE46FE1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v14-are_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DDDB9DB4-7D89-4838-BD8C-2746E1FDCFE7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v14-are:-:*:*:*:*:*:*:*", "matchCriteriaId": "408806ED-CD55-47A3-9AFA-28882B1E99F7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v140-15iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DD95D4B1-23C1-4286-A42A-BFE21695677F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v140-15iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "4410698E-9E54-4956-9C36-06ABF67DDB24", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:v340-17iwl_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2A812422-9829-482B-B1AF-2E3649C688B7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:v340-17iwl:-:*:*:*:*:*:*:*", "matchCriteriaId": "FB888E39-84EC-4DF3-BC01-3FAFD499AB00", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yoga_6-13alc6_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "472D8E92-3FCB-4B11-8936-931880B23166", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yoga_6-13alc6:-:*:*:*:*:*:*:*", "matchCriteriaId": "ED332AAE-A4AF-4844-8E73-B5B9DFD8817A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yoga_creator_7-15imh05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C5618B6A-DED7-490B-AD1B-5CC8EFEC13DD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yoga_creator_7-15imh05:-:*:*:*:*:*:*:*", "matchCriteriaId": "1DDF70B8-FA66-43B8-9D67-E11DAE426A19", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-14are05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7CE22218-5490-431A-937B-7FCC3364E63E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-14are05:-:*:*:*:*:*:*:*", "matchCriteriaId": "424B24D7-C69D-4C20-B6A6-7E0A00564CE3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-14iil05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "46C4C495-CA4D-4F3F-9A32-8AA433B9E5D4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-14iil05:-:*:*:*:*:*:*:*", "matchCriteriaId": "64D6AD27-0194-4CEC-AD80-3FC01593BB10", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-14itl05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "2678780C-48A6-4565-97A9-EFFC6B6F23A6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-14itl05:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A146385-49E3-431E-AD2D-7CA1A40572EE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-15iil05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "A819F989-220C-4E69-94D9-6D52923198A8", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-15iil05:-:*:*:*:*:*:*:*", "matchCriteriaId": "2DEE2E90-D589-4E56-978A-8D1041F1A5B8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-15imh05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0ADF3A37-D095-4285-AE91-751C4F09D480", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-15imh05:-:*:*:*:*:*:*:*", "matchCriteriaId": "1CA09D98-AEDA-4A32-B072-0A048BE7A5C6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yoga_slim_7-15itl05_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5B174C25-8D2E-4780-9863-F654ED4B9272", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yoga_slim_7-15itl05:-:*:*:*:*:*:*:*", "matchCriteriaId": "20085906-9DDF-416B-A88D-7E94557ABA46", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:yoga_slim_7_carbon_13itl5_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4DC24185-A2D1-491F-9004-B99312B692DF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:yoga_slim_7_carbon_13itl5:-:*:*:*:*:*:*:*", "matchCriteriaId": "978E1E13-8918-41D0-985C-53904CE0EC16", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code."}, {"lang": "es", "value": "Una posible vulnerabilidad en la funci\u00f3n de devoluci\u00f3n de llamadas SMI usada en el controlador del modo BIOS heredado en algunos modelos de port\u00e1tiles Lenovo puede permitir a un atacante con acceso local y altos privilegios ejecutar c\u00f3digo arbitrario"}], "id": "CVE-2021-4212", "lastModified": "2022-05-11T20:06:44.183", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "psirt@lenovo.com", "type": "Secondary"}]}, "published": "2022-04-22T21:15:10.067", "references": [{"source": "psirt@lenovo.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://support.lenovo.com/us/en/product_security/LEN-77639"}], "sourceIdentifier": "psirt@lenovo.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "psirt@lenovo.com", "type": "Secondary"}]}

{}