CVE-2021-3970CWE-20

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local…

Medium · published April 22, 2022

CVSS v3.1
6.7
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01253 · 69.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-04-22T20:30Z
EPSS history
Timeline
  • 22 APR 20:30Z
    A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local…
    cvelistv5