VULNERABILITY INTELLIGENCE

CVE-2021-3970

CVSS score6.7 MEDIUM
EPSS probability1.26%
CISA KEVNot currently listed
Published2022-04-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.

Weakness classification

  • psirt@lenovo.com: CWE-20
  • nvd@nist.gov: CWE-20

Primary references