VULNERABILITY INTELLIGENCE

CVE-2021-3719

CVSS score6.7 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2021-11-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Weakness classification

  • psirt@lenovo.com: CWE-20
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references