CVE-2021-3843

🗓️ 12 Nov 2021 22:05:56Reported by lenovoType

A potential vulnerability in SMI function to access EEPROM in some ThinkPad models

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-3843	13 Nov 202100:39	–	circl
CNNVD	Lenovo ThinkPad 输入验证错误漏洞	12 Nov 202100:00	–	cnnvd
Cvelist	CVE-2021-3843	12 Nov 202122:05	–	cvelist
EUVD	EUVD-2021-27086	7 Oct 202500:30	–	euvd
Lenovo	ThinkPad BIOS Vulnerabilities - Lenovo Support US	12 Oct 202117:47	–	lenovo
NVD	CVE-2021-3843	12 Nov 202122:15	–	nvd
OSV	CVE-2021-3843	12 Nov 202122:15	–	osv
Prion	Code injection	12 Nov 202122:15	–	prion
RedhatCVE	CVE-2021-3843	22 May 202518:53	–	redhatcve

NVD

Vulners

Node

lenovo thinkpad_11e_3rd_gen_firmwareRange≤1.22braswell

AND

lenovo thinkpad_11e_3rd_genMatch-

Node

lenovo thinkpad_11e_3rd_gen_firmwareRange≤1.29skylate

AND

lenovo thinkpad_11e_3rd_genMatch-

Node

lenovo thinkpad_11e_4th_gen_i3_firmwareRange≤1.22

AND

lenovo thinkpad_11e_4th_gen_i3Match-

Node

lenovo thinkpad_11e_4th_gen_i7_firmwareRange≤1.22

AND

lenovo thinkpad_11e_4th_gen_i7Match-

Node

lenovo thinkpad_11e_4th_gen_i5_firmwareRange≤1.22

AND

lenovo thinkpad_11e_4th_gen_i5Match-

Node

lenovo thinkpad_11e_4th_gen_celeron_firmwareRange≤1.27

AND

lenovo thinkpad_11e_4th_gen_celeronMatch-

Node

lenovo thinkpad_11e_yoga_gen_6_firmwareRange≤1.12

AND

lenovo thinkpad_11e_yoga_gen_6Match-

Node

lenovo thinkpad_13_gen_2_firmwareRange≤1.29

AND

lenovo thinkpad_13_gen_2Match-

Node

lenovo thinkpad_l13_firmwareRange≤1.31

AND

lenovo thinkpad_l13Match-

Node

lenovo thinkpad_l13_gen_2_firmwareRange≤1.11non-vpro

AND

lenovo thinkpad_l13_gen_2Match-

Node

lenovo thinkpad_l13_gen_2_firmwareRange≤1.08vpro

AND

lenovo thinkpad_l13_gen_2Match-

Node

lenovo thinkpad_l13_yoga_firmwareRange≤1.31

AND

lenovo thinkpad_l13_yogaMatch-

Node

lenovo thinkpad_l13_yoga_gen_2_firmwareRange≤1.11non-vpro

AND

lenovo thinkpad_l13_yoga_gen_2Match-

Node

lenovo thinkpad_l13_yoga_gen_2_firmwareRange≤1.08vpro

AND

lenovo thinkpad_l13_yoga_gen_2Match-

Node

lenovo thinkpad_l14_gen_1_firmwareRange<1.15

AND

lenovo thinkpad_l14_gen_1Match-

Node

lenovo thinkpad_l14_firmwareRange<1.20.1.17

AND

lenovo thinkpad_l14Match-

Node

lenovo thinkpad_l15_gen_1_firmwareRange<1.15

AND

lenovo thinkpad_l15_gen_1Match-

Node

lenovo thinkpad_l15_firmwareRange<1.20.1.17

AND

lenovo thinkpad_l15Match-

Node

lenovo thinkpad_l380_firmwareRange≤1.26

AND

lenovo thinkpad_l380Match-

Node

lenovo thinkpad_l380_yoga_firmwareRange≤1.26

AND

lenovo thinkpad_l380_yogaMatch-

Node

lenovo thinkpad_l390_yoga_firmwareRange≤1.35

AND

lenovo thinkpad_l390_yogaMatch-

Node

lenovo thinkpad_l390_firmwareRange≤1.35

AND

lenovo thinkpad_l390Match-

Node

lenovo thinkpad_s5_2nd_gen_firmwareRange≤1.28

AND

lenovo thinkpad_s5_2nd_genMatch-

Node

lenovo thinkpad_t460_firmwareRange≤1.43.1.11

AND

lenovo thinkpad_t460Match-

Node

lenovo thinkpad_s2_gen_6_firmwareRange≤2021-09-30

AND

lenovo thinkpad_s2_gen_6Match-

Node

lenovo thinkpad_s2_yoga_gen_6_firmwareRange≤2021-09-30

AND

lenovo thinkpad_s2_yoga_gen_6Match-

Node

lenovo thinkpad_x12_detachable_gen_1_firmwareRange<1.16

AND

lenovo thinkpad_x12_detachable_gen_1Match-

Node

lenovo thinkpad_x260_firmwareRange≤1.47/1.15

AND

lenovo thinkpad_x260Match-

Node

lenovo thinkpad_x380_yoga_firmwareRange≤1.34

AND

lenovo thinkpad_x380_yogaMatch-

Node

lenovo thinkpad_x390_yoga_firmwareRange<n2let87w

AND

lenovo thinkpad_x390_yogaMatch-

Node

lenovo thinkpad_11e_5th_gen_firmwareRange≤1.13

AND

lenovo thinkpad_11e_5th_genMatch-

Node

lenovo thinkpad_11e_5th_gen_firmwareRange≤1.13

AND

lenovo thinkpad_yoga_370Match-

Node

lenovo thinkpad_x1_fold_gen_1_firmwareRange<n2pet50w

AND

lenovo thinkpad_x1_fold_gen_1Match-

[
  {
    "product": "ThinkPad BIOS",
    "vendor": "Lenovo",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Source	Link
support	www.support.lenovo.com/us/en/product_security/LEN-72619

21 Nov 2024 06:22Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.7

CVSS 27.2

EPSS0.00037

CWE-20