CVE-2021-3786

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.

Score

CVSS 3.1 5.5 Medium

Status

Modified - psirt@lenovo.com

Published

2021-11-12

Last modified

2024-08-03

Weaknesses

CWE-20

Affected products

• Ideapad S940-14iwl Firmware (Lenovo)
• Ideapad Yoga S940-14iwl Firmware (Lenovo)
• Notebook And Thinkpad Bios (Lenovo)
• Thinkpad 10 Firmware (Lenovo)
• Thinkpad 11e 3rd Gen Firmware (Lenovo)
• Thinkpad 11e 4th Gen Firmware (Lenovo)
• Thinkpad 11e Yoga Gen 6 Firmware (Lenovo)
• Thinkpad 13 Gen 2 Firmware (Lenovo)
• Thinkpad 25 Firmware (Lenovo)
• Thinkpad E14 Firmware (Lenovo)
• Thinkpad E14 Gen 2 Firmware (Lenovo)
• Thinkpad E14 Gen 3 Firmware (Lenovo)
• Thinkpad E15 Firmware (Lenovo)
• Thinkpad E15 Gen 2 Firmware (Lenovo)
• Thinkpad E15 Gen 3 Firmware (Lenovo)
• Thinkpad E470 Firmware (Lenovo)
• Thinkpad E480 Firmware (Lenovo)
• Thinkpad E490 Firmware (Lenovo)
• Thinkpad E570 Firmware (Lenovo)
• Thinkpad E580 Firmware (Lenovo)
• Thinkpad E590 Firmware (Lenovo)
• Thinkpad Helix Firmware (Lenovo)
• Thinkpad L13 Firmware (Lenovo)
• Thinkpad L13 Gen 2 Firmware (Lenovo)
• Thinkpad L13 Yoga Firmware (Lenovo)
• Thinkpad L13 Yoga Gen 2 Firmware (Lenovo)
• Thinkpad L14 Firmware (Lenovo)
• Thinkpad L15 Firmware (Lenovo)
• Thinkpad L15 Gen 2 Firmware (Lenovo)
• Thinkpad L380 Firmware (Lenovo)
• Thinkpad L380 Yoga Firmware (Lenovo)
• Thinkpad L390 Firmware (Lenovo)
• Thinkpad L390 Yoga Firmware (Lenovo)
• Thinkpad L460 Firmware (Lenovo)
• Thinkpad L470 Firmware (Lenovo)
• Thinkpad L480 Firmware (Lenovo)
• Thinkpad L490 Firmware (Lenovo)
• Thinkpad L560 Firmware (Lenovo)
• Thinkpad L570 Firmware (Lenovo)
• Thinkpad L580 Firmware (Lenovo)
• Thinkpad L590 Firmware (Lenovo)
• Thinkpad P14s Gen 1 Firmware (Lenovo)
• Thinkpad P14s Gen 2 Firmware (Lenovo)
• Thinkpad P15 Gen 1 Firmware (Lenovo)
• Thinkpad P15s Gen 1 Firmware (Lenovo)
• Thinkpad P15s Gen 2 Firmware (Lenovo)
• Thinkpad P15v Gen 1 Firmware (Lenovo)
• Thinkpad P17 Gen 1 Firmware (Lenovo)
• Thinkpad P1 Firmware (Lenovo)
• Thinkpad P1 Gen 2 Firmware (Lenovo)
• Thinkpad P1 Gen 3 Firmware (Lenovo)
• Thinkpad P43s Firmware (Lenovo)
• Thinkpad P50 Firmware (Lenovo)
• Thinkpad P50s Firmware (Lenovo)
• Thinkpad P51 Firmware (Lenovo)
• Thinkpad P51s Firmware (Lenovo)
• Thinkpad P52 Firmware (Lenovo)
• Thinkpad P52s Firmware (Lenovo)
• Thinkpad P53 Firmware (Lenovo)
• Thinkpad P53s Firmware (Lenovo)
• Thinkpad P70 Firmware (Lenovo)
• Thinkpad P71 Firmware (Lenovo)
• Thinkpad P72 Firmware (Lenovo)
• Thinkpad P73 Firmware (Lenovo)
• Thinkpad S2 Gen 6 Firmware (Lenovo)
• Thinkpad S2 Yoga Gen 6 Firmware (Lenovo)
• Thinkpad S540 Firmware (Lenovo)
• Thinkpad S5 2nd Gen Firmware (Lenovo)
• Thinkpad T14 Gen 1 Firmware (Lenovo)
• Thinkpad T14 Gen 2 Firmware (Lenovo)
• Thinkpad T14s Firmware (Lenovo)
• Thinkpad T14s Gen 2 Firmware (Lenovo)
• Thinkpad T15 Firmware (Lenovo)
• Thinkpad T15 Gen 2 Firmware (Lenovo)
• Thinkpad T15g Gen 1 Firmware (Lenovo)
• Thinkpad T15p Gen 1 Firmware (Lenovo)
• Thinkpad T440p Firmware (Lenovo)
• Thinkpad T460 Firmware (Lenovo)
• Thinkpad T460p Firmware (Lenovo)
• Thinkpad T460s Firmware (Lenovo)
• Thinkpad T470 Firmware (Lenovo)
• Thinkpad T470p Firmware (Lenovo)
• Thinkpad T470s Firmware (Lenovo)
• Thinkpad T480 Firmware (Lenovo)
• Thinkpad T480s Firmware (Lenovo)
• Thinkpad T490 Firmware (Lenovo)
• Thinkpad T490s Firmware (Lenovo)
• Thinkpad T550 Firmware (Lenovo)
• Thinkpad T560 Firmware (Lenovo)
• Thinkpad T570 Firmware (Lenovo)
• Thinkpad T580 Firmware (Lenovo)
• Thinkpad T590 Firmware (Lenovo)
• Thinkpad W550s Firmware (Lenovo)
• Thinkpad X12 Detachable Gen 1 Firmware (Lenovo)
• Thinkpad X13 Gen 1 Firmware (Lenovo)
• Thinkpad X13 Gen 2 Firmware (Lenovo)
• Thinkpad X13 Yoga Gen 1 Firmware (Lenovo)
• Thinkpad X13 Yoga Gen 2 Firmware (Lenovo)
• Thinkpad X1 Carbon 3rd Gen Firmware (Lenovo)
• Thinkpad X1 Carbon 4th Gen Firmware (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-67440