CVE-2021-3452: Input Validation
A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch LEN-65529
Event History
Frequently Asked Questions
What is CVE-2021-3452?
CVE-2021-3452 is a potential vulnerability in the system shutdown SMI callback function in some ThinkPad models.
How can an attacker exploit CVE-2021-3452?
An attacker with local access and elevated privileges can exploit CVE-2021-3452 to execute arbitrary code.
Which Lenovo models are affected by CVE-2021-3452?
CVE-2021-3452 affects some ThinkPad models, such as Lenovo Thinkpad L13, Lenovo Thinkpad L380, Lenovo ThinkPad T460, and more.
What is the severity of CVE-2021-3452?
The severity of CVE-2021-3452 is medium, with a severity value of 6.7 out of 10.
How can I fix CVE-2021-3452?
To fix CVE-2021-3452, it is recommended to install the BIOS update provided by Lenovo.