CVE-2021-4212CWE-20

A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local…

Medium · published April 22, 2022

CVSS v3.1
6.7
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-04-22T20:30Z
EPSS history
Timeline
  • 22 APR 20:30Z
    A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local…
    cvelistv5