Medium severity · published Nov 12, 2021
CVE-2021-3719
A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may…
6.7
CVSS
0.3%
EPSS
No
On KEV
Description
A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TE
Thinkcentre E93 Firmware · Lenovo
before fbktdfa · source: NVD
TM
Thinkcentre M4500q Firmware · Lenovo
before fhkt86a · source: NVD
TM
Thinkcentre M600 Firmware · Lenovo
before m00kt65a · source: NVD
TM
Thinkcentre M6500t/s Firmware · Lenovo
before fbktdfa · source: NVD
TM
Thinkcentre M700 Tiny Firmware · Lenovo
before fwktb9a · source: NVD
TM
Thinkcentre M73 Firmware · Lenovo
before fhkt86a · source: NVD
TM
Thinkcentre M73p Firmware · Lenovo
before fbktdfa · source: NVD
TM
Thinkcentre M800 Firmware · Lenovo
before fwktb9a · source: NVD
TM
Thinkcentre M818z Firmware · Lenovo
before m1ekt23a · source: NVD
TM
Thinkcentre M83 Firmware · Lenovo
before fbktdfa · source: NVD
TM
Thinkcentre M8500t/s Firmware · Lenovo
before fbktdfa · source: NVD
TM
Thinkcentre M900 Firmware · Lenovo
before fwktb9a · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-3719
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-3719
Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-67440
More from Thinkcentre E93 Firmware
9.8
CVE-2019-6188
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for…
7.8
CVE-2020-8333
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution
6.8
CVE-2017-3753
A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc
6.4
CVE-2019-6172
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow…
6.4
CVE-2019-6170
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow…