7.2

CVE-2021-3599

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LenovoThinkpad X380 Yoga Firmware Version < 2020-10-31
   LenovoThinkpad X380 Yoga Version-
LenovoThinkpad X1 Fold Gen 1 Firmware Version < 2021-10-29
   LenovoThinkpad X1 Fold Gen 1 Version-
LenovoThinkpad Yoga 260 Firmware Version < 2021-10-25
   LenovoThinkpad Yoga 260 Version-
LenovoThinkpad Yoga 11e 3rd Gen Firmware Version < 2021-10-31
   LenovoThinkpad Yoga 11e 3rd Gen Version-
LenovoThinkpad Yoga 15 Firmware Version < n19et66w
   LenovoThinkpad Yoga 15 Version-
LenovoThinkpad Yoga 370 Firmware Version < 2021-10-31
   LenovoThinkpad Yoga 370 Version-
LenovoThinkpad X390 Firmware Version < n2jet96w
   LenovoThinkpad X390 Version-
LenovoThinkpad Yoga 11e 4th Gen Firmware Version < 2021-10-31
   LenovoThinkpad Yoga 11e 4th Gen Version-
LenovoThinkpad Yoga 11e 5th Gen Firmware SwEditiongeminilake-r Version < 2021-10-31
   LenovoThinkpad Yoga 11e 5th Gen Version-
LenovoThinkpad X250 Firmware Version < 2021-10-31
   LenovoThinkpad X250 Version-
LenovoThinkpad X260 Firmware Version < 2021-10-31
   LenovoThinkpad X260 Version-
LenovoThinkpad X390 Yoga Firmware Version < n2let87w
   LenovoThinkpad X390 Yoga Version-
LenovoThinkpad X280 Firmware Version < n20et58w
   LenovoThinkpad X280 Version-
LenovoThinkpad X1 Titanium Firmware Version < n2met51w
   LenovoThinkpad X1 Titanium Version-
LenovoThinkpad X270 Firmware Version < 2021-10-29
   LenovoThinkpad X270 Version-
LenovoThinkpad X13 Gen 1 Firmware Version < n2yet31w
   LenovoThinkpad X13 Gen 1 Version-
LenovoThinkpad X13 Gen 2 Firmware Version < n35et41w
   LenovoThinkpad X13 Gen 2 Version-
LenovoThinkpad X13 Yoga Gen 1 Firmware Version < n2uet56w
   LenovoThinkpad X13 Yoga Gen 1 Version-
LenovoThinkpad X13 Yoga Gen 2 Firmware Version < n39et47w
   LenovoThinkpad X13 Yoga Gen 2 Version-
LenovoThinkpad X1 Yoga 1st Gen Firmware Version < n1fet76w
   LenovoThinkpad X1 Yoga 1st Gen Version-
LenovoThinkpad X1 Yoga 3rd Gen Firmware Version < n25et57w
   LenovoThinkpad X1 Yoga 3rd Gen Version-
LenovoThinkpad X1 Yoga 4th Gen Firmware Version < n2het64w
   LenovoThinkpad X1 Yoga 4th Gen Version-
LenovoThinkpad X1 Yoga Gen 5 Firmware Version < n2wet30w
   LenovoThinkpad X1 Yoga Gen 5 Version-
LenovoThinkpad 10 Firmware Version < 2021-10-25
   LenovoThinkpad 10 Version-
LenovoThinkpad X1 Nano Gen 1 Firmware Version < n2tet67w
   LenovoThinkpad X1 Nano Gen 1 Version-
LenovoThinkpad X1 Extreme Firmware Version < n2eet54w
   LenovoThinkpad X1 Extreme Version-
LenovoThinkpad X1 Extreme 2nd Firmware Version < n2oet53w
   LenovoThinkpad X1 Extreme 2nd Version-
LenovoThinkpad T460s Firmware Version < n1cet84w
   LenovoThinkpad T460s Version-
LenovoThinkpad S2 Gen 6 Firmware Version < 2021-10-31
   LenovoThinkpad S2 Gen 6 Version-
LenovoThinkpad X1 Carbon Gen 6 Firmware Version < n23et78w
   LenovoThinkpad X1 Carbon Gen 6 Version-
LenovoThinkpad X1 Carbon Gen 7 Firmware Version < n2het64w
   LenovoThinkpad X1 Carbon Gen 7 Version-
LenovoThinkpad X1 Carbon Gen 8 Firmware Version < n2het64w
   LenovoThinkpad X1 Carbon Gen 8 Version-
LenovoThinkpad T560 Firmware Version < n1ket52w
   LenovoThinkpad T560 Version-
LenovoThinkpad T460p Firmware Version < 2021-10-29
   LenovoThinkpad T460p Version-
LenovoThinkpad W550s Firmware Version < n11et54w
   LenovoThinkpad W550s Version-
LenovoThinkpad T590 Firmware Version < n2iet96w
   LenovoThinkpad T590 Version-
LenovoThinkpad T570 Firmware Version < n1vet57w
   LenovoThinkpad T570 Version-
LenovoThinkpad S2 Yoga Gen 6 Firmware Version < 2021-10-31
   LenovoThinkpad S2 Yoga Gen 6 Version-
LenovoThinkpad T480 Firmware Version < n24et65w
   LenovoThinkpad T480 Version-
LenovoThinkpad X1 Tablet Firmware Version < n1let92w
   LenovoThinkpad X1 Tablet Version-
LenovoThinkpad T550 Firmware Version < n11et54w
   LenovoThinkpad T550 Version-
LenovoThinkpad X1 Tablet Gen 2 Firmware Version < n1oet56w
   LenovoThinkpad X1 Tablet Gen 2 Version-
LenovoThinkpad X1 Tablet Gen 3 Firmware Version < 2021-10-29
   LenovoThinkpad X1 Tablet Gen 3 Version-
LenovoThinkpad T580 Firmware Version < n27et43w
   LenovoThinkpad T580 Version-
LenovoThinkpad T480s Firmware Version < n22et70w
   LenovoThinkpad T480s Version-
LenovoThinkpad T15 Firmware Version < n2xet32w
   LenovoThinkpad T15 Version-
LenovoThinkpad T460 Firmware Version < 2021-10-31
   LenovoThinkpad T460 Version-
LenovoThinkpad T470 Firmware Version < n1qet92w
   LenovoThinkpad T470 Version-
LenovoThinkpad T490 Firmware Version < n2iet96w
   LenovoThinkpad T490 Version-
LenovoThinkpad T490s Firmware Version < n2iet96w
   LenovoThinkpad T490s Version-
LenovoThinkpad T14s Gen 2 Firmware Version < n35et41w
   LenovoThinkpad T14s Gen 2 Version-
LenovoThinkpad T14s Firmware Version < 2021-10-15
   LenovoThinkpad T14s Version-
LenovoThinkpad T470p Firmware Version < r0fet55w
   LenovoThinkpad T470p Version-
LenovoThinkpad T470s Firmware Version < 2021-10-29
   LenovoThinkpad T470s Version-
LenovoThinkpad P71 Firmware Version < 2021-10-29
   LenovoThinkpad P71 Version-
LenovoThinkpad T440p Firmware Version < 2021-10-29
   LenovoThinkpad T440p Version-
LenovoThinkpad T15 Gen 2 Firmware Version < n34et42w
   LenovoThinkpad T15 Gen 2 Version-
LenovoThinkpad T15p Gen 1 Firmware Version < 2021-10-29
   LenovoThinkpad T15p Gen 1 Version-
LenovoThinkpad P70 Firmware Version < n1detb2w
   LenovoThinkpad P70 Version-
LenovoThinkpad T15g Gen 1 Firmware Version < 2021-10-29
   LenovoThinkpad T15g Gen 1 Version-
LenovoThinkpad T14 Gen 1 Firmware Version < n2xet32w
   LenovoThinkpad T14 Gen 1 Version-
LenovoThinkpad T14 Gen 2 Firmware Version < n34et42w
   LenovoThinkpad T14 Gen 2 Version-
LenovoThinkpad P73 Firmware Version < n2net47w
   LenovoThinkpad P73 Version-
LenovoThinkpad S540 Firmware Version < 2021-10-25
   LenovoThinkpad S540 Version-
LenovoThinkpad P72 Firmware Version < n2cet60w
   LenovoThinkpad P72 Version-
LenovoThinkpad L380 Firmware Version < 2021-10-31
   LenovoThinkpad L380 Version-
LenovoThinkpad S5 2nd Gen Firmware Version < 2021-10-31
   LenovoThinkpad S5 2nd Gen Version-
LenovoThinkpad P15v Gen 1 Firmware Version < 2021-10-29
   LenovoThinkpad P15v Gen 1 Version-
LenovoThinkpad P53 Firmware Version < n2net47w
   LenovoThinkpad P53 Version-
LenovoThinkpad P53s Firmware Version < n2iet96w
   LenovoThinkpad P53s Version-
LenovoThinkpad P43s Firmware Version < n2iet96w
   LenovoThinkpad P43s Version-
LenovoThinkpad P51 Firmware Version < n1uet82w
   LenovoThinkpad P51 Version-
LenovoThinkpad P51s Firmware Version < n1vet57w
   LenovoThinkpad P51s Version-
LenovoThinkpad P50 Firmware Version < n1eet92w
   LenovoThinkpad P50 Version-
LenovoThinkpad P52 Firmware Version < n2cet60w
   LenovoThinkpad P52 Version-
LenovoThinkpad P52s Firmware Version < n27et43w
   LenovoThinkpad P52s Version-
LenovoThinkpad P50s Firmware Version < n1ket52w
   LenovoThinkpad P50s Version-
LenovoThinkpad L570 Firmware Version < n1xet74w
   LenovoThinkpad L570 Version-
LenovoThinkpad P17 Gen 1 Firmware Version < 2021-10-29
   LenovoThinkpad P17 Gen 1 Version-
LenovoThinkpad L580 Firmware Version < 2021-10-15
   LenovoThinkpad L580 Version-
LenovoThinkpad P14s Gen 1 Firmware Version < n2xet32w
   LenovoThinkpad P14s Gen 1 Version-
LenovoThinkpad P14s Gen 2 Firmware Version < n34et42w
   LenovoThinkpad P14s Gen 2 Version-
LenovoThinkpad P15 Gen 1 Firmware Version < 2021-10-29
   LenovoThinkpad P15 Gen 1 Version-
LenovoThinkpad P15s Gen 1 Firmware Version < n2xet32w
   LenovoThinkpad P15s Gen 1 Version-
LenovoThinkpad P15s Gen 2 Firmware Version < n34et42w
   LenovoThinkpad P15s Gen 2 Version-
LenovoThinkpad L590 Firmware Version < 2021-10-15
   LenovoThinkpad L590 Version-
LenovoThinkpad L380 Yoga Firmware Version < 2021-10-31
   LenovoThinkpad L380 Yoga Version-
LenovoThinkpad L490 Firmware Version < 2021-10-15
   LenovoThinkpad L490 Version-
LenovoThinkpad L560 Firmware Version < n1het92w
   LenovoThinkpad L560 Version-
LenovoThinkpad P1 Firmware Version < n2eet54w
   LenovoThinkpad P1 Version-
LenovoThinkpad P1 Gen 2 Firmware Version < n2oet53w
   LenovoThinkpad P1 Gen 2 Version-
LenovoThinkpad P1 Gen 3 Firmware Version < n2vet33w
   LenovoThinkpad P1 Gen 3 Version-
LenovoThinkpad L480 Firmware Version < 2021-10-15
   LenovoThinkpad L480 Version-
LenovoThinkpad L470 Firmware Version < 2021-10-15
   LenovoThinkpad L470 Version-
LenovoThinkpad L460 Firmware Version < 2021-10-15
   LenovoThinkpad L460 Version-
LenovoThinkpad E490 Firmware Version < 2021-10-15
   LenovoThinkpad E490 Version-
LenovoThinkpad Helix Firmware Version < n17etb6w
   LenovoThinkpad Helix Version-
LenovoThinkpad L390 Firmware Version < 2021-10-31
   LenovoThinkpad L390 Version-
LenovoThinkpad L390 Yoga Firmware Version < 2021-10-31
   LenovoThinkpad L390 Yoga Version-
LenovoThinkpad E15 Gen 3 Firmware Version < 2021-10-15
   LenovoThinkpad E15 Gen 3 Version-
LenovoThinkpad L14 Firmware Version < 2021-10-15
   LenovoThinkpad L14 Version-
LenovoThinkpad L13 Gen 2 Firmware Version < 2021-10-31
   LenovoThinkpad L13 Gen 2 Version-
LenovoThinkpad L15 Firmware Version < 2021-10-15
   LenovoThinkpad L15 Version-
LenovoThinkpad L15 Gen 2 Firmware Version < 2021-10-15
   LenovoThinkpad L15 Gen 2 Version-
LenovoThinkpad L13 Firmware Version < 2021-10-31
   LenovoThinkpad L13 Version-
LenovoThinkpad E14 Gen 3 Firmware Version < 2021-10-15
   LenovoThinkpad E14 Gen 3 Version-
LenovoThinkpad E590 Firmware Version < 2021-10-15
   LenovoThinkpad E590 Version-
LenovoThinkpad E580 Firmware Version < 2021-10-15
   LenovoThinkpad E580 Version-
LenovoThinkpad L13 Yoga Gen 2 Firmware Version < 2021-10-31
   LenovoThinkpad L13 Yoga Gen 2 Version-
LenovoThinkpad E570 Firmware Version < 2021-10-15
   LenovoThinkpad E570 Version-
LenovoThinkpad L13 Yoga Firmware Version < 2021-10-31
   LenovoThinkpad L13 Yoga Version-
LenovoThinkpad 11e 3rd Gen Firmware Version < 2021-10-31
   LenovoThinkpad 11e 3rd Gen Version-
LenovoThinkpad E480 Firmware Version < 2021-10-15
   LenovoThinkpad E480 Version-
LenovoThinkpad E14 Firmware Version <= 2021-10-15
   LenovoThinkpad E14 Version-
LenovoThinkpad E470 Firmware Version < 2021-10-15
   LenovoThinkpad E470 Version-
LenovoThinkpad E15 Firmware Version < 2021-10-15
   LenovoThinkpad E15 Version-
LenovoThinkpad E15 Gen 2 Firmware Version < 2021-10-15
   LenovoThinkpad E15 Gen 2 Version-
LenovoThinkpad 25 Firmware Version < n1qet92w
   LenovoThinkpad 25 Version-
LenovoThinkpad E14 Gen 2 Firmware Version < 2021-10-15
   LenovoThinkpad E14 Gen 2 Version-
LenovoThinkpad 13 Gen 2 Firmware Version < 2021-10-31
   LenovoThinkpad 13 Gen 2 Version-
LenovoThinkpad 11e 4th Gen Firmware Version < 2021-10-31
   LenovoThinkpad 11e 4th Gen Version-
LenovoThinkpad 11e Yoga Gen 6 Firmware Version < 2021-10-31
   LenovoThinkpad 11e Yoga Gen 6 Version-
LenovoIdeapad S940-14iwl Firmware Version <= 12.0.81.1753
   LenovoIdeapad S940-14iwl Version-
LenovoIdeapad Yoga S940-14iwl Firmware Version <= 12.0.81.1753
   LenovoIdeapad Yoga S940-14iwl Version-
LenovoV330-15isk Firmware Version <= 11.8.86.3877
   LenovoV330-15isk Version-
LenovoV330-15ikb Firmware Version <= 11.8.86.3877
   LenovoV330-15ikb Version-
LenovoV130-15igm Firmware Version <= 6vcn42ww
   LenovoV130-15igm Version-
LenovoThinkpad X1 Yoga 4th Gen Firmware Version < n2qet42w
   LenovoThinkpad X1 Yoga 4th Gen Version-
LenovoThinkpad X1 Carbon Gen 7 Firmware Version < n2qet42w
   LenovoThinkpad X1 Carbon Gen 7 Version-
LenovoThinkpad X1 Carbon Gen 8 Firmware Version < n2qet42w
   LenovoThinkpad X1 Carbon Gen 8 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.098
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
psirt@lenovo.com 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.