6.7
Medium
CVE-2021-3599 A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow…
Description
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ThinkPad BIOS | Versions not published |
Other CVEs of ThinkPad BIOS
The 10 CVEs of ThinkPad BIOS →
CVE-2023-5078
A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated…
6.7
Medium
CVE-2022-4575
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models…
6.7
Medium
CVE-2022-48189
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local…
6.7
Medium
CVE-2022-4574
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local…
6.7
Medium