VULNERABILITY INTELLIGENCE

CVE-2021-4211

CVSS score6.7 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2022-04-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Weakness classification

  • psirt@lenovo.com: CWE-20
  • nvd@nist.gov: CWE-20

Primary references