CVE-2021-4212: Input Validation
Published Apr 22, 2022
·Updated
A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected Software
124 affected components
Lenovo C340-14iml Firmware
Lenovo C340-14iml
Lenovo C340-15iml Firmware
Lenovo C340-15iml
Lenovo D330-10igm Firmware
Lenovo D330-10igm
Lenovo Duet 3-10igl5 Firmware
Lenovo Duet 3-10igl5
Lenovo E41-50 Firmware
Lenovo E41-50
Lenovo Flex-14iml Firmware
Lenovo Flex-14iml
Lenovo Flex-15iml Firmware
Lenovo Flex-15iml
Lenovo Ideapad 3-14are05 Firmware
Lenovo Ideapad 3-14are05
Lenovo Ideapad 3-15are05 Firmware
Lenovo Ideapad 3-15are05
Lenovo Ideapad 3-17are05 Firmware
Lenovo Ideapad 3-17are05
Lenovo Ideapad 5-14alc05 Firmware
Lenovo Ideapad 5-14alc05
Lenovo Ideapad 5-14are05 Firmware
Lenovo Ideapad 5-14are05
Lenovo Ideapad 5-15itl05 Firmware
Lenovo Ideapad 5-15itl05
Lenovo Ideapad 5 Pro-14acn6 Firmware
Lenovo Ideapad 5 Pro-14acn6
Lenovo Ideapad 5 Pro-14itl6 Firmware
Lenovo Ideapad 5 Pro-14itl6
Lenovo Ideapad 5 Pro-16ihu6 Firmware
Lenovo Ideapad 5 Pro-16ihu6
Lenovo Ideapad Creator 5-15imh05 Firmware
Lenovo Ideapad Creator 5-15imh05
Lenovo Ideapad Gaming 3-15ach6 Firmware
Lenovo Ideapad Gaming 3-15ach6
Lenovo Ideapad Gaming 3-15arh05 Firmware
Lenovo Ideapad Gaming 3-15arh05
Lenovo Ideapad Gaming 3-15imh05 Firmware
Lenovo Ideapad Gaming 3-15imh05
Lenovo L340-15irh Firmware
Lenovo L340-15irh
Lenovo L340-15iwl Firmware
Lenovo L340-15iwl
Lenovo L340-15iwl Touch Firmware
Lenovo L340-15iwl Touch
Lenovo L340-17irh Firmware
Lenovo L340-17irh
Lenovo L340-17iwl Firmware
Lenovo L340-17iwl
Lenovo Legion Y540-15irh Firmware
Lenovo Legion Y540-15irh
Lenovo Legion Y540-15irh-pg0 Firmware
Lenovo Legion Y540-15irh-pg0
Lenovo Legion Y540-17irh Firmware
Lenovo Legion Y540-17irh
Lenovo Legion Y540-17irh-pg0 Firmware
Lenovo Legion Y540-17irh-pg0
Lenovo Legion Y545 Firmware
Lenovo Legion Y545
Lenovo Legion Y545-pg0 Firmware
Lenovo Legion Y545-pg0
Lenovo Legion Y7000-2019 Firmware
Lenovo Legion Y7000-2019
Lenovo Legion Y7000-2019-pg0 Firmware
Lenovo Legion Y7000-2019-pg0
Lenovo S340-13iml Firmware
Lenovo S340-13iml
Lenovo S340-14api Firmware
Lenovo S340-14api
Lenovo S340-14iml Firmware
Lenovo S340-14iml
Lenovo S340-15api Firmware
Lenovo S340-15api
Lenovo S340-15api Touch Firmware
Lenovo S340-15api Touch
Lenovo S340-15iml Firmware
Lenovo S340-15iml
Lenovo S540-14iml Firmware
Lenovo S540-14iml
Lenovo S540-14iml Touch Firmware
Lenovo S540-14iml Touch
Lenovo S540-15iml Firmware
Lenovo S540-15iml
Lenovo Slim 7-14are05 Firmware
Lenovo Slim 7-14are05
Lenovo Slim 7-14itl05 Firmware
Lenovo Slim 7-14itl05
Lenovo Slim 7-15iil05 Firmware
Lenovo Slim 7-15iil05
Lenovo Slim 7-15imh05 Firmware
Lenovo Slim 7-15imh05
Lenovo Slim 7-15itl05 Firmware
Lenovo Slim 7-15itl05
Lenovo Thinkbook 13x Itg Firmware
Lenovo Thinkbook 13x Itg
Lenovo Thinkbook 14 G3 Itl Firmware
Lenovo Thinkbook 14 G3 Itl
Lenovo Thinkbook Plus G2 Itg Firmware
Lenovo Thinkbook Plus G2 Itg
Lenovo V14-are Firmware
Lenovo V14-are
Lenovo V140-15iwl Firmware
Lenovo V140-15iwl
Lenovo V340-17iwl Firmware
Lenovo V340-17iwl
Lenovo Yoga 6-13alc6 Firmware
Lenovo Yoga 6-13alc6
Lenovo Yoga Creator 7-15imh05 Firmware
Lenovo Yoga Creator 7-15imh05
Lenovo Yoga Slim 7-14are05 Firmware
Lenovo Yoga Slim 7-14are05
Lenovo Yoga Slim 7-14iil05 Firmware
Lenovo Yoga Slim 7-14iil05
Lenovo Yoga Slim 7-14itl05 Firmware
Lenovo Yoga Slim 7-14itl05
Lenovo Yoga Slim 7-15iil05 Firmware
Lenovo Yoga Slim 7-15iil05
Lenovo Yoga Slim 7-15imh05 Firmware
Lenovo Yoga Slim 7-15imh05
Lenovo Yoga Slim 7-15itl05 Firmware
Lenovo Yoga Slim 7-15itl05
Lenovo Yoga Slim 7 Carbon 13itl5 Firmware
Lenovo Yoga Slim 7 Carbon 13itl5
Remediation
Patch Available
Information
Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-77639.
Event History
Apr 22, 2022
CVE Published
via MITRE·08:30 PM
Data Sourced
via MITRE·08:30 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-4212?
CVE-2021-4212 is classified as a potential security vulnerability allowing local attackers to execute arbitrary code.
2
How do I fix CVE-2021-4212?
To fix CVE-2021-4212, apply the latest firmware updates released by Lenovo for the affected devices.
3
Which devices are affected by CVE-2021-4212?
CVE-2021-4212 affects multiple Lenovo notebook models that utilize the SMI callback function in Legacy BIOS mode.
4
What type of access is required to exploit CVE-2021-4212?
An attacker must have local access and elevated privileges on the affected device to exploit CVE-2021-4212.
5
What could be the impact of CVE-2021-4212 if exploited?
Exploiting CVE-2021-4212 could allow an attacker to execute arbitrary code, potentially compromising the integrity of the system.