CVE-2021-3786: Input Validation
Published Nov 12, 2021
·Updated
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.
Affected Software
269 affected components
Lenovo Thinkpad X380 Yoga Firmware<2020-10-31
Lenovo Thinkpad X380 Yoga
Lenovo Thinkpad X1 Fold Gen 1 Firmware<2021-10-29
Lenovo Thinkpad X1 Fold Gen 1
Lenovo Thinkpad Yoga 260 Firmware<2021-10-25
Lenovo Thinkpad Yoga 260
Lenovo Thinkpad Yoga 11e 3rd Gen Firmware<2021-10-31
Lenovo Thinkpad Yoga 11e 3rd Gen
Lenovo Thinkpad Yoga 15 Firmware<n19et66w
Lenovo Thinkpad Yoga 15
Lenovo Thinkpad Yoga 370 Firmware<2021-10-31
Lenovo Thinkpad Yoga 370
Lenovo Thinkpad X12 Detachable Gen 1 Firmware<2021-10-31
Lenovo Thinkpad X12 Detachable Gen 1
Lenovo Thinkpad X390 Firmware<n2jet96w
Lenovo Thinkpad X390
Lenovo Thinkpad Yoga 11e 4th Gen Firmware<2021-10-31
Lenovo Thinkpad Yoga 11e 4th Gen
Lenovo Thinkpad Yoga 11e 5th Gen Firmware<2021-10-31
Lenovo Thinkpad Yoga 11e 5th Gen
Lenovo Thinkpad X250 Firmware<2021-10-31
Lenovo Thinkpad X250
Lenovo Thinkpad X260 Firmware<2021-10-31
Lenovo Thinkpad X260
Lenovo Thinkpad X390 Yoga Firmware<n2let87w
Lenovo Thinkpad X390 Yoga
Lenovo Thinkpad X280 Firmware<n20et58w
Lenovo Thinkpad X280
Lenovo Thinkpad X1 Titanium Firmware<n2met51w
Lenovo Thinkpad X1 Titanium
Lenovo Thinkpad X270 Firmware<2021-10-29
Lenovo Thinkpad X270
Lenovo Thinkpad X1 Carbon 5th Gen Kabylake Firmware<n1met66w
Lenovo Thinkpad X1 Carbon 5th Gen Kabylake
Lenovo Thinkpad X13 Gen 1 Firmware<n2yet31w
Lenovo Thinkpad X13 Gen 1
Lenovo Thinkpad X13 Gen 2 Firmware<n35et41w
Lenovo Thinkpad X13 Gen 2
Lenovo Thinkpad X13 Yoga Gen 1 Firmware<n2uet56w
Lenovo Thinkpad X13 Yoga Gen 1
Lenovo Thinkpad X13 Yoga Gen 2 Firmware<n39et47w
Lenovo Thinkpad X13 Yoga Gen 2
Lenovo Thinkpad X1 Carbon 5th Gen Skylake Firmware<n1met66w
Lenovo Thinkpad X1 Carbon 5th Gen Skylake
Lenovo Thinkpad X1 Yoga 1st Gen Firmware<n1fet76w
Lenovo Thinkpad X1 Yoga 1st Gen
Lenovo Thinkpad X1 Yoga 3rd Gen Firmware<n25et57w
Lenovo Thinkpad X1 Yoga 3rd Gen
Lenovo Thinkpad X1 Yoga 4th Gen Firmware<n2het64w
Lenovo Thinkpad X1 Yoga 4th Gen
Lenovo Thinkpad X1 Yoga Gen 5 Firmware<n2wet30w
Lenovo Thinkpad X1 Yoga Gen 5
Lenovo Thinkpad X1 Carbon 4th Gen Firmware<n1fet76w
Lenovo Thinkpad X1 Carbon 4th Gen
Lenovo Thinkpad 10 Firmware<2021-10-25
Lenovo Thinkpad 10
Lenovo Thinkpad X1 Nano Gen 1 Firmware<n2tet67w
Lenovo Thinkpad X1 Nano Gen 1
Lenovo Thinkpad X1 Extreme Firmware<n2eet54w
Lenovo Thinkpad X1 Extreme
Lenovo Thinkpad X1 Extreme 2nd Firmware<n2oet53w
Lenovo Thinkpad X1 Extreme 2nd
Lenovo Thinkpad X1 Extreme Gen 3 Firmware<n2vet33w
Lenovo Thinkpad X1 Extreme Gen 3
Lenovo Thinkpad T460s Firmware<n1cet84w
Lenovo Thinkpad T460s
Lenovo Thinkpad S2 Gen 6 Firmware<2021-10-31
Lenovo Thinkpad S2 Gen 6
Lenovo Thinkpad X1 Carbon Gen 6 Firmware<n23et78w
Lenovo Thinkpad X1 Carbon Gen 6
Lenovo Thinkpad X1 Carbon Gen 7 Firmware<n2het64w
Lenovo Thinkpad X1 Carbon Gen 7
Lenovo Thinkpad X1 Carbon Gen 8 Firmware<n2het64w
Lenovo Thinkpad X1 Carbon Gen 8
Lenovo Thinkpad T560 Firmware<n1ket52w
Lenovo Thinkpad T560
Lenovo Thinkpad T460p Firmware<2021-10-29
Lenovo ThinkPad T460p
Lenovo Thinkpad W550s Firmware<n11et54w
Lenovo Thinkpad W550s
Lenovo Thinkpad T590 Firmware<n2iet96w
Lenovo Thinkpad T590
Lenovo Thinkpad T570 Firmware<n1vet57w
Lenovo Thinkpad T570
Lenovo Thinkpad S2 Yoga Gen 6 Firmware<2021-10-31
Lenovo Thinkpad S2 Yoga Gen 6
Lenovo Thinkpad T480 Firmware<n24et65w
Lenovo Thinkpad T480
Lenovo Thinkpad X1 Tablet Firmware<n1let92w
Lenovo Thinkpad X1 Tablet
Lenovo Thinkpad T550 Firmware<n11et54w
Lenovo Thinkpad T550
Lenovo Thinkpad X1 Carbon 3rd Gen Firmware<n14et56w
Lenovo Thinkpad X1 Carbon 3rd Gen
Lenovo Thinkpad X1 Tablet Gen 2 Firmware<n1oet56w
Lenovo Thinkpad X1 Tablet Gen 2
Lenovo Thinkpad X1 Tablet Gen 3 Firmware<2021-10-29
Lenovo Thinkpad X1 Tablet Gen 3
Lenovo Thinkpad T580 Firmware<n27et43w
Lenovo Thinkpad T580
Lenovo Thinkpad T480s Firmware<n22et70w
Lenovo Thinkpad T480s
Lenovo Thinkpad T15 Firmware<n2xet32w
Lenovo Thinkpad T15
Lenovo Thinkpad T460 Firmware<2021-10-31
Lenovo ThinkPad T460
Lenovo Thinkpad T470 Firmware<n1qet92w
Lenovo Thinkpad T470
Lenovo Thinkpad T490 Firmware<n2iet96w
Lenovo Thinkpad T490
Lenovo Thinkpad T490s Firmware<n2iet96w
Lenovo Thinkpad T490s
Lenovo Thinkpad T14s Gen 2 Firmware<n35et41w
Lenovo Thinkpad T14s Gen 2
Lenovo Thinkpad T14s Firmware<2021-10-15
Lenovo Thinkpad T14s
Lenovo Thinkpad T470p Firmware<r0fet55w
Lenovo Thinkpad T470p
Lenovo Thinkpad T470s Firmware<2021-10-29
Lenovo Thinkpad T470s
Lenovo Thinkpad P71 Firmware<2021-10-29
Lenovo Thinkpad P71
Lenovo Thinkpad T440p Firmware<2021-10-29
Lenovo Thinkpad T440p
Lenovo Thinkpad T15 Gen 2 Firmware<n34et42w
Lenovo Thinkpad T15 Gen 2
Lenovo Thinkpad T15p Gen 1 Firmware<2021-10-29
Lenovo Thinkpad T15p Gen 1
Lenovo Thinkpad P70 Firmware<n1detb2w
Lenovo Thinkpad P70
Lenovo Thinkpad T15g Gen 1 Firmware<2021-10-29
Lenovo Thinkpad T15g Gen 1
Lenovo Thinkpad T14 Gen 1 Firmware<n2xet32w
Lenovo Thinkpad T14 Gen 1
Lenovo Thinkpad T14 Gen 2 Firmware<n34et42w
Lenovo Thinkpad T14 Gen 2
Lenovo Thinkpad P73 Firmware<n2net47w
Lenovo Thinkpad P73
Lenovo Thinkpad S540 Firmware<2021-10-25
Lenovo Thinkpad S540
Lenovo Thinkpad P72 Firmware<n2cet60w
Lenovo Thinkpad P72
Lenovo Thinkpad L380 Firmware<2021-10-31
Lenovo Thinkpad L380
Lenovo Thinkpad S5 2nd Gen Firmware<2021-10-31
Lenovo Thinkpad S5 2nd Gen
Lenovo Thinkpad P15v Gen 1 Firmware<2021-10-29
Lenovo Thinkpad P15v Gen 1
Lenovo Thinkpad P53 Firmware<n2net47w
Lenovo Thinkpad P53
Lenovo Thinkpad P53s Firmware<n2iet96w
Lenovo Thinkpad P53s
Lenovo Thinkpad P43s Firmware<n2iet96w
Lenovo Thinkpad P43s
Lenovo Thinkpad P51 Firmware<n1uet82w
Lenovo Thinkpad P51
Lenovo Thinkpad P51s Firmware<n1vet57w
Lenovo Thinkpad P51s
Lenovo Thinkpad P50 Firmware<n1eet92w
Lenovo Thinkpad P50
Lenovo Thinkpad P52 Firmware<n2cet60w
Lenovo Thinkpad P52
Lenovo Thinkpad P52s Firmware<n27et43w
Lenovo Thinkpad P52s
Lenovo Thinkpad P50s Firmware<n1ket52w
Lenovo Thinkpad P50s
Lenovo Thinkpad L570 Firmware<n1xet74w
Lenovo Thinkpad L570
Lenovo Thinkpad P17 Gen 1 Firmware<2021-10-29
Lenovo Thinkpad P17 Gen 1
Lenovo Thinkpad L580 Firmware<2021-10-15
Lenovo Thinkpad L580
Lenovo Thinkpad P14s Gen 1 Firmware<n2xet32w
Lenovo Thinkpad P14s Gen 1
Lenovo Thinkpad P14s Gen 2 Firmware<n34et42w
Lenovo Thinkpad P14s Gen 2
Lenovo Thinkpad P15 Gen 1 Firmware<2021-10-29
Lenovo Thinkpad P15 Gen 1
Lenovo Thinkpad P15s Gen 1 Firmware<n2xet32w
Lenovo Thinkpad P15s Gen 1
Lenovo Thinkpad P15s Gen 2 Firmware<n34et42w
Lenovo Thinkpad P15s Gen 2
Lenovo Thinkpad L590 Firmware<2021-10-15
Lenovo Thinkpad L590
Lenovo Thinkpad L380 Yoga Firmware<2021-10-31
Lenovo Thinkpad L380 Yoga
Lenovo Thinkpad L490 Firmware<2021-10-15
Lenovo Thinkpad L490
Lenovo Thinkpad L560 Firmware<n1het92w
Lenovo Thinkpad L560
Lenovo Thinkpad P1 Firmware<n2eet54w
Lenovo Thinkpad P1
Lenovo Thinkpad P1 Gen 2 Firmware<n2oet53w
Lenovo Thinkpad P1 Gen 2
Lenovo Thinkpad P1 Gen 3 Firmware<n2vet33w
Lenovo Thinkpad P1 Gen 3
Lenovo Thinkpad L480 Firmware<2021-10-15
Lenovo Thinkpad L480
Lenovo Thinkpad L470 Firmware<2021-10-15
Lenovo Thinkpad L470
Lenovo Thinkpad L460 Firmware<2021-10-15
Lenovo Thinkpad L460
Lenovo Thinkpad E490 Firmware<2021-10-15
Lenovo Thinkpad E490
Lenovo Thinkpad Helix Firmware<n17etb6w
Lenovo Thinkpad Helix
Lenovo Thinkpad L390 Firmware<2021-10-31
Lenovo Thinkpad L390
Lenovo Thinkpad L390 Yoga Firmware<2021-10-31
Lenovo Thinkpad L390 Yoga
Lenovo Thinkpad E15 Gen 3 Firmware<2021-10-15
Lenovo Thinkpad E15 Gen 3
Lenovo Thinkpad L14 Firmware<2021-10-15
Lenovo Thinkpad L14
Lenovo Thinkpad L13 Gen 2 Firmware<2021-10-31
Lenovo Thinkpad L13 Gen 2
Lenovo Thinkpad L15 Firmware<2021-10-15
Lenovo Thinkpad L15
Lenovo Thinkpad L15 Gen 2 Firmware<2021-10-15
Lenovo Thinkpad L15 Gen 2
Lenovo Thinkpad L13 Firmware<2021-10-31
Lenovo Thinkpad L13
Lenovo Thinkpad E14 Gen 3 Firmware<2021-10-15
Lenovo Thinkpad E14 Gen 3
Lenovo Thinkpad E590 Firmware<2021-10-15
Lenovo Thinkpad E590
Lenovo Thinkpad E580 Firmware<2021-10-15
Lenovo Thinkpad E580
Lenovo Thinkpad L13 Yoga Gen 2 Firmware<2021-10-31
Lenovo Thinkpad L13 Yoga Gen 2
Lenovo Thinkpad E570 Firmware<2021-10-15
Lenovo Thinkpad E570
Lenovo Thinkpad L13 Yoga Firmware<2021-10-31
Lenovo Thinkpad L13 Yoga
Lenovo Thinkpad 11e 3rd Gen Firmware<2021-10-31
Lenovo Thinkpad 11e 3rd Gen
Lenovo Thinkpad E480 Firmware<2021-10-15
Lenovo Thinkpad E480
Lenovo Thinkpad E14 Firmware<=2021-10-15
Lenovo Thinkpad E14
Lenovo Thinkpad E470 Firmware<2021-10-15
Lenovo Thinkpad E470
Lenovo Thinkpad E15 Firmware<2021-10-15
Lenovo Thinkpad E15
Lenovo Thinkpad E15 Gen 2 Firmware<2021-10-15
Lenovo Thinkpad E15 Gen 2
Lenovo Thinkpad 25 Firmware<n1qet92w
Lenovo Thinkpad 25
Lenovo Thinkpad E14 Gen 2 Firmware<2021-10-15
Lenovo Thinkpad E14 Gen 2
Lenovo Thinkpad 13 Gen 2 Firmware<2021-10-31
Lenovo Thinkpad 13 Gen 2
Lenovo Thinkpad 11e 4th Gen Firmware<2021-10-31
Lenovo Thinkpad 11e 4th Gen
Lenovo Thinkpad 11e Yoga Gen 6 Firmware<2021-10-31
Lenovo Thinkpad 11e Yoga Gen 6
Lenovo Ideapad S940-14iwl Firmware<=12.0.81.1753
Lenovo Ideapad S940-14iwl
Lenovo Ideapad Yoga S940-14iwl Firmware<=12.0.81.1753
Lenovo Ideapad Yoga S940-14iwl
Lenovo V330-15isk Firmware<=11.8.86.3877
Lenovo V330-15isk
Lenovo V330-15ikb Firmware<=11.8.86.3877
Lenovo V330-15ikb
Lenovo V130-15igm Firmware<=6vcn42ww
Lenovo V130-15igm
Lenovo Thinkpad X1 Yoga 4th Gen Firmware<n2qet42w
Lenovo Thinkpad X1 Carbon Gen 7 Firmware<n2qet42w
Lenovo Thinkpad X1 Carbon Gen 8 Firmware<n2qet42w
Remediation
Patch Available
Information
Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-67440.
Event History
Nov 12, 2021
CVE Published
via MITRE·10:05 PM
Data Sourced
via MITRE·10:05 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-3786?
CVE-2021-3786 is classified as a potential data leak vulnerability that could affect Lenovo Notebook and ThinkPad systems.
2
How do I fix CVE-2021-3786?
To remediate CVE-2021-3786, users should update their system firmware to the latest version provided by Lenovo.
3
Which devices are affected by CVE-2021-3786?
CVE-2021-3786 affects multiple Lenovo Notebook and ThinkPad models, including specific firmware versions prior to certain release dates.
4
What kind of data could be leaked due to CVE-2021-3786?
CVE-2021-3786 could potentially allow sensitive data to be leaked outside the protected SMRAM range.
5
Is there a specific timeframe for the updates to fix CVE-2021-3786?
Firmware updates to address CVE-2021-3786 are specific to certain models and version releases, with the latest versions available from Lenovo's support site.