Skip to content
OpenAdvisories
Medium · 4.4 CVE-2021-3786 EUVD-2021-27048GHSA-mxm2-jrgh-833g

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be use…

Published Nov 12, 2021 · Updated Aug 3, 2024 · Assigned by lenovo

Description

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.

Affected products

VendorProductAffectedFixed
Lenovo Notebook and ThinkPad BIOS various —

References