VULNERABILITY INTELLIGENCE

CVE-2021-3786

CVSS score4.4 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2021-11-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Description

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.

Weakness classification

  • psirt@lenovo.com: CWE-20
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references