CVE-2021-3452

published 2021-07-16

CVE-2021-3452: A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
lenovo	thinkpad_bios	—	—

CWE-20