Skip to content
OpenAdvisories
Medium · 6.7 CVE-2021-3599 EUVD-2021-26905GHSA-7jgm-fxw4-3rp9

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local…

Published Nov 12, 2021 · Updated Aug 3, 2024 · Assigned by lenovo

Description

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Lenovo ThinkPad BIOS various —

References