CVE-2021-3970 — Lenovo / Notebook BIOS

CVE-2021-3970

Lenovo / Notebook BIOS PUBLISHED

Description (CNA)

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Lenovo / Notebook BIOS	affected various

CWE

CWE-20

References

https://support.lenovo.com/us/en/product_security/LEN-73440

ADP enrichment

CVE

No English description supplied.

https://support.lenovo.com/us/en/product_security/LEN-73440