CVE-2021-3970

🗓️ 22 Apr 2022 20:30:37Reported by lenovoType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 90 Views

Potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2021-3970	20 Apr 202203:02	–	circl
CNNVD	Lenovo Notebook 输入验证错误漏洞	18 Apr 202200:00	–	cnnvd
Cvelist	CVE-2021-3970	22 Apr 202220:30	–	cvelist
EUVD	EUVD-2021-27175	7 Oct 202500:30	–	euvd
Lenovo	Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US	18 Apr 202215:28	–	lenovo
Malwarebytes	Lenovo issues fixes for laptop backdoors	21 Apr 202215:11	–	malwarebytes
NCSC	Vulnerabilities fixed in Lenovo notebook BIOS	19 Apr 202200:00	–	ncsc
NVD	CVE-2021-3970	22 Apr 202221:15	–	nvd
OSV	CVE-2021-3970	22 Apr 202221:15	–	osv
Prion	Input validation	22 Apr 202221:15	–	prion

NVD

Vulners

Node

lenovo ideapad_3-14ada05_firmwareRange<e8cn33ww

AND

lenovo ideapad_3-14ada05Match-

Node

lenovo ideapad_3-14ada6_firmwareRange<hbcn21ww

AND

lenovo ideapad_3-14ada6Match-

Node

lenovo ideapad_3-14alc6_firmwareRange<glcn43ww

AND

lenovo ideapad_3-14alc6Match-

Node

lenovo ideapad_3-14are05_firmwareRange<dzcn42ww

AND

lenovo ideapad_3-14are05Match-

Node

lenovo ideapad_3-15ada6_firmwareRange<hbcn21ww

AND

lenovo ideapad_3-15ada6Match-

Node

lenovo ideapad_3-15alc6_firmwareRange<glcn43ww

AND

lenovo ideapad_3-15alc6Match-

Node

lenovo ideapad_3-15are05_firmwareRange<dzcn42ww

AND

lenovo ideapad_3-15are05Match-

Node

lenovo ideapad_3-15igl05_firmwareRange<dvcn23ww

AND

lenovo ideapad_3-15igl05Match-

Node

lenovo ideapad_3-17ada05_firmwareRange<e8cn33ww

AND

lenovo ideapad_3-17ada05Match-

Node

lenovo ideapad_3-17ada6_firmwareRange<hbcn21ww

AND

lenovo ideapad_3-17ada6Match-

Node

lenovo ideapad_3-17alc6_firmwareRange<glcn43ww

AND

lenovo ideapad_3-17alc6Match-

Node

lenovo ideapad_3-17are05_firmwareRange<dzcn42ww

AND

lenovo ideapad_3-17are05Match-

Node

lenovo ideapad_3-17iil05_firmwareRange<emcn52ww

AND

lenovo ideapad_3-17iil05Match-

Node

lenovo ideapad_3-17itl6_firmwareRange<ggcn33ww

AND

lenovo ideapad_3-17itl6Match-

Node

lenovo ideapad_3-15ada05_firmwareRange<e8cn33ww

AND

lenovo ideapad_3-15ada05Match-

Node

lenovo l3_15iml05_firmwareRange<ejcn27ww

AND

lenovo l3_15iml05Match-

Node

lenovo l3-15itl6_firmwareRange<gfcn23ww

AND

lenovo l3-15itl6Match-

Node

lenovo l340-15irh_firmwareRange<bgcn35ww

AND

lenovo l340-15irhMatch-

Node

lenovo l340-15iwl_firmwareRange<atcn46ww

AND

lenovo l340-15iwlMatch-

Node

lenovo l340-15iwl_touch_firmwareRange<atcn46ww

AND

lenovo l340-15iwl_touchMatch-

Node

lenovo l340-17irh_firmwareRange<bgcn35ww

AND

lenovo l340-17irhMatch-

Node

lenovo l340-17iwl_firmwareRange<atcn46ww

AND

lenovo l340-17iwlMatch-

Node

lenovo legion_5_pro-16ach6_firmwareRange<hhcn25ww

AND

lenovo legion_5_pro-16ach6Match-

Node

lenovo legion_5_pro-16ach6h_firmwareRange<gkcn51ww

AND

lenovo legion_5_pro-16ach6hMatch-

Node

lenovo legion_5_pro-16ith6_firmwareRange<h1cn46ww

AND

lenovo legion_5_pro-16ith6Match-

Node

lenovo legion_5_pro-16ith6h_firmwareRange<h1cn46ww

AND

lenovo legion_5_pro-16ith6hMatch-

Node

lenovo legion_5-15ach6_firmwareRange<hhcn25ww

AND

lenovo legion_5-15ach6Match-

Node

lenovo legion_5-15ach6a_firmwareRange<g9cn28ww

AND

lenovo legion_5-15ach6aMatch-

Node

lenovo legion_5-15ach6h_firmwareRange<gkcn51ww

AND

lenovo legion_5-15ach6hMatch-

Node

lenovo legion_5-15imh6_firmwareRange<g8cn19ww

AND

lenovo legion_5-15imh6Match-

Node

lenovo legion_5-15ith6_firmwareRange<h1cn46ww

AND

lenovo legion_5-15ith6Match-

Node

lenovo legion_5-15ith6h_firmwareRange<h1cn46ww

AND

lenovo legion_5-15ith6hMatch-

Node

lenovo legion_5-17ach6_firmwareRange<hhcn25ww

AND

lenovo legion_5-17ach6Match-

Node

lenovo legion_5-17ach6h_firmwareRange<gkcn51ww

AND

lenovo legion_5-17ach6hMatch-

Node

lenovo legion_5-17ith6_firmwareRange<h1cn46ww

AND

lenovo legion_5-17ith6Match-

Node

lenovo legion_5-17ith6h_firmwareRange<h1cn46ww

AND

lenovo legion_5-17ith6hMatch-

Node

lenovo legion_7-16achg6_firmwareRange<gkcn51ww

AND

lenovo legion_7-16achg6Match-

Node

lenovo legion_7-16ithg6_firmwareRange<gkcn51ww

AND

lenovo legion_7-16ithg6Match-

Node

lenovo legion_s7-15ach6_firmwareRange<hacn35ww

AND

lenovo legion_s7-15ach6Match-

Node

lenovo legion_y540-15irh_firmwareRange<bhcn44ww

AND

lenovo legion_y540-15irhMatch-

Node

lenovo legion_y540-15irh-pg0_firmwareRange<bhcn44ww

AND

lenovo legion_y540-15irh-pg0Match-

Node

lenovo legion_y540-17irh_firmwareRange<bhcn44ww

AND

lenovo legion_y540-17irhMatch-

Node

lenovo legion_y540-17irh-pg0_firmwareRange<bhcn44ww

AND

lenovo legion_y540-17irh-pg0Match-

Node

lenovo legion_y545_firmwareRange<bhcn44ww

AND

lenovo legion_y545Match-

Node

lenovo legion_y545-pg0_firmwareRange<bhcn44ww

AND

lenovo legion_y545-pg0Match-

Node

lenovo legion_y7000-2019_firmwareRange<bhcn44ww

AND

lenovo legion_y7000-2019Match-

Node

lenovo legion_y7000-2019-pg0_firmwareRange<bhcn44ww

AND

lenovo legion_y7000-2019-pg0Match-

Node

lenovo s14_g2_itl_firmwareRange<ggcn33ww

AND

lenovo s14_g2_itlMatch-

Node

lenovo s145-14api_firmwareRange<bucn31ww

AND

lenovo s145-14apiMatch-

Node

lenovo s145-14ast_firmwareRange<aycn26ww

AND

lenovo s145-14astMatch-

Node

lenovo s145-14igm_firmwareRange<awcn28ww

AND

lenovo s145-14igmMatch-

Node

lenovo s145-14iil_firmwareRange<dkcn54ww

AND

lenovo s145-14iilMatch-

Node

lenovo s145-15api_firmwareRange<bucn31ww

AND

lenovo s145-15apiMatch-

Node

lenovo s145-15ast_firmwareRange<aycn26ww

AND

lenovo s145-15astMatch-

Node

lenovo s145-15igm_firmwareRange<awcn28ww

AND

lenovo s145-15igmMatch-

Node

lenovo s145-15iil_firmwareRange<dkcn54ww

AND

lenovo s145-15iilMatch-

Node

lenovo s540-13api_firmwareRange<cxcn34ww

AND

lenovo s540-13apiMatch-

Node

lenovo s540-13iml_firmwareMatch-

AND

lenovo s540-13imlMatch-

Node

lenovo slim_7_pro-14ihu5_firmwareMatch-

AND

lenovo slim_7_pro-14ihu5Match-

Node

lenovo slim_9-14itl05_firmwareMatch-

AND

lenovo slim_9-14itl05Match-

Node

lenovo v14_g1-iml_firmwareRange<dxcn41ww

AND

lenovo v14_g1-imlMatch-

Node

lenovo v14_g2-acl_firmwareRange<glcn43ww

AND

lenovo v14_g2-aclMatch-

Node

lenovo v14_g2-itl_firmwareRange<ggcn33ww

AND

lenovo v14_g2-itlMatch-

Node

lenovo v14-ada_firmwareRange<e8cn33ww

AND

lenovo v14-adaMatch-

Node

lenovo v14-are_firmwareRange<dzcn42ww

AND

lenovo v14-areMatch-

Node

lenovo v14-igl_firmwareRange<dvcn23ww

AND

lenovo v14-iglMatch-

Node

lenovo v14-iil_firmwareRange<dkcn54ww

AND

lenovo v14-iilMatch-

Node

lenovo v140-15iwl_firmwareRange<atcn46ww

AND

lenovo v140-15iwlMatch-

Node

lenovo v15_g1-iml_firmwareRange<dxcn41ww

AND

lenovo v15_g1-imlMatch-

Node

lenovo v15_g2-alc_firmwareRange<glcn43ww

AND

lenovo v15_g2-alcMatch-

Node

lenovo v15_g2-itl_firmwareRange<ggcn33ww

AND

lenovo v15_g2-itlMatch-

Node

lenovo v15-ada_firmwareRange<e8cn33ww

AND

lenovo v15-adaMatch-

Node

lenovo v15-igl_firmwareRange<dvcn23ww

AND

lenovo v15-iglMatch-

Node

lenovo v15-iil_firmwareRange<dkcn54ww

AND

lenovo v15-iilMatch-

Node

lenovo v17_g2-itl_firmwareRange<ggcn33ww

AND

lenovo v17_g2-itlMatch-

Node

lenovo v17-iil_firmwareRange<emcn52ww

AND

lenovo v17-iilMatch-

Node

lenovo v340-17iwl_firmwareRange<atcn46ww

AND

lenovo v340-17iwlMatch-

Node

lenovo yoga_7-14acn6_firmwareRange<h9cn26ww

AND

lenovo yoga_7-14acn6Match-

Node

lenovo yoga_c740-14iml_firmwareRange<bncn44ww

AND

lenovo yoga_c740-14imlMatch-

Node

lenovo yoga_c740-15iml_firmwareRange<bncn44ww

AND

lenovo yoga_c740-15imlMatch-

Node

lenovo yoga_c940-14iil_firmwareMatch-

AND

lenovo yoga_c940-14iilMatch-

Node

lenovo yoga_slim_7_pro-14ach5_d_firmwareRange<hecn24ww

AND

lenovo yoga_slim_7_pro-14ach5_dMatch-

Node

lenovo yoga_slim_7_pro-14ach5_firmwareRange<gzcn27ww

AND

lenovo yoga_slim_7_pro-14ach5Match-

Node

lenovo yoga_slim_7_pro-14ach5_o_firmwareRange<gzcn27ww

AND

lenovo yoga_slim_7_pro-14ach5_oMatch-

Node

lenovo yoga_slim_7_pro-14ach5_od_firmwareRange<hecn24ww

AND

lenovo yoga_slim_7_pro-14ach5_odMatch-

Node

lenovo yoga_slim_7_pro-14arh5_firmwareRange<g7cn21ww

AND

lenovo yoga_slim_7_pro-14arh5Match-

Node

lenovo yoga_slim_7_pro-14ihu5_firmwareMatch-

AND

lenovo yoga_slim_7_pro-14ihu5Match-

Node

lenovo yoga_slim_7_pro-14ihu5_o_firmwareMatch-

AND

lenovo yoga_slim_7_pro-14ihu5_oMatch-

Node

lenovo yoga_slim_7_pro-14itl5_firmwareMatch-

AND

lenovo yoga_slim_7_pro-14itl5Match-

Node

lenovo yoga_slim_9-14itl05_firmwareMatch-

AND

lenovo yoga_slim_9-14itl05Match-

Node

lenovo ideapad_3-14iil05_firmwareRange<dvcn23ww

AND

lenovo ideapad_3-14iil05Match-

Node

lenovo ideapad_3-14igl05_firmwareRange<emcn52ww

AND

lenovo ideapad_3-14igl05Match-

Node

lenovo ideapad_3-14iml05_firmwareRange<dxcn41ww

AND

lenovo ideapad_3-14iml05Match-

Node

lenovo ideapad_3-14itl05_firmwareRange<gccn26ww

AND

lenovo ideapad_3-14itl05Match-

Node

lenovo ideapad_3-14itl6_firmwareRange<ggcn33ww

AND

lenovo ideapad_3-14itl6Match-

Node

lenovo ideapad_3-15iil05_firmwareRange<emcn52ww

AND

lenovo ideapad_3-15iil05Match-

Node

lenovo ideapad_3-15iml05_firmwareRange<dxcn41ww

AND

lenovo ideapad_3-15iml05Match-

Node

lenovo ideapad_3-15itl05_firmwareRange<gccn26ww

AND

lenovo ideapad_3-15itl05Match-

Node

lenovo ideapad_3-15itl6_firmwareRange<ggcn33ww

AND

lenovo ideapad_3-15itl6Match-

Node

lenovo ideapad_3-17iml05_firmwareRange<dxcn41ww

AND

lenovo ideapad_3-17iml05Match-

Node

lenovo ideapad_5-15are05_firmwareRange<e7cn44ww

AND

lenovo ideapad_5-15are05Match-

Node

lenovo ideapad_5-15iil05_firmwareRange<dpcn54ww

AND

lenovo ideapad_5-15iil05Match-

Node

lenovo ideapad_creator_5-15imh05_firmwareRange<egcn36ww

AND

lenovo ideapad_creator_5-15imh05Match-

Node

lenovo ideapad_gaming_3-15arh05_firmwareRange<fccn17ww

AND

lenovo ideapad_gaming_3-15arh05Match-

Node

lenovo ideapad_gaming_3-15imh05_firmwareRange<egcn36ww

AND

lenovo ideapad_gaming_3-15imh05Match-

[
  {
    "product": "Notebook BIOS",
    "vendor": "Lenovo",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Source	Link
support	www.support.lenovo.com/us/en/product_security/LEN-73440

21 Nov 2024 06:23Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.16.7

CVSS 27.2

EPSS0.00364

CWE-20