Medium severity · published Nov 12, 2021
CVE-2021-3786
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM…
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
T1
Thinkpad 10 Firmware · Lenovo
before 2021-10-25 · source: NVD
TS
Thinkpad S2 Gen 6 Firmware · Lenovo
before 2021-10-31 · source: NVD
TS
Thinkpad S2 Yoga Gen 6 Firmware · Lenovo
before 2021-10-31 · source: NVD
TT
Thinkpad T14s Firmware · Lenovo
before 2021-10-15 · source: NVD
TT
Thinkpad T14s Gen 2 Firmware · Lenovo
before n35et41w · source: NVD
TT
Thinkpad T15 Firmware · Lenovo
before n2xet32w · source: NVD
TT
Thinkpad T460 Firmware · Lenovo
before 2021-10-31 · source: NVD
TT
Thinkpad T460p Firmware · Lenovo
before 2021-10-29 · source: NVD
TT
Thinkpad T460s Firmware · Lenovo
before n1cet84w · source: NVD
TT
Thinkpad T470 Firmware · Lenovo
before n1qet92w · source: NVD
TT
Thinkpad T470p Firmware · Lenovo
before r0fet55w · source: NVD
TT
Thinkpad T470s Firmware · Lenovo
before 2021-10-29 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-3786
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-3786
Patch
https://support.lenovo.com/us/en/product_security/LEN-67440
More from Thinkpad 10 Firmware
6.7
CVE-2021-3599
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to…