CVE-2021-3719 : A potential vulnerability in the SMI callback function that saves and restore bo

A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Published 2021-11-12 22:15:08

Updated 2021-11-19 21:57:14

Source Lenovo Group Ltd.

View at NVD, CVE.org

Vulnerability category: Input validationExecute code

Products affected by CVE-2021-3719

Lenovo » Thinkcentre E93 Firmware
Versions before (<) fbktdfa
cpe:2.3:o:lenovo:thinkcentre_e93_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre E93 » Version: N/A
Lenovo » Thinkcentre M4500q Firmware
Versions before (<) fhkt86a
cpe:2.3:o:lenovo:thinkcentre_m4500q_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M4500q » Version: N/A
Lenovo » Thinkcentre M600 Firmware
Versions before (<) m00kt65a
cpe:2.3:o:lenovo:thinkcentre_m600_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M600 » Version: N/A
Lenovo » Thinkcentre M6500t/s Firmware
Versions before (<) fbktdfa
cpe:2.3:o:lenovo:thinkcentre_m6500t\/s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M6500t/s » Version: N/A
Lenovo » Thinkcentre M73 Firmware
Versions before (<) fhkt86a
cpe:2.3:o:lenovo:thinkcentre_m73_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M73 » Version: N/A
Lenovo » Thinkcentre M73p Firmware
Versions before (<) fbktdfa
cpe:2.3:o:lenovo:thinkcentre_m73p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M73p » Version: N/A
Lenovo » Thinkcentre M800 Firmware
Versions before (<) fwktb9a
cpe:2.3:o:lenovo:thinkcentre_m800_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M800 » Version: N/A
Lenovo » Thinkcentre M83 Firmware
Versions before (<) fbktdfa
cpe:2.3:o:lenovo:thinkcentre_m83_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M83 » Version: N/A
Lenovo » Thinkcentre M8500t/s Firmware
Versions before (<) fbktdfa
cpe:2.3:o:lenovo:thinkcentre_m8500t\/s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M8500t/s » Version: N/A
Lenovo » Thinkcentre M900 Firmware
Versions before (<) fwktb9a
cpe:2.3:o:lenovo:thinkcentre_m900_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M900 » Version: N/A
Lenovo » Thinkcentre M93 Firmware
Versions before (<) fbktdfa
cpe:2.3:o:lenovo:thinkcentre_m93_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M93 » Version: N/A
Lenovo » Thinkcentre M93p Firmware
Versions before (<) fbktdfa
cpe:2.3:o:lenovo:thinkcentre_m93p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M93p » Version: N/A
Lenovo » Thinkstation P300 Firmware
Versions before (<) fbktdfa
cpe:2.3:o:lenovo:thinkstation_p300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkstation P300 » Version: N/A
Lenovo » Thinkstation P500 Firmware
Versions before (<) a4ktaba
cpe:2.3:o:lenovo:thinkstation_p500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkstation P500 » Version: N/A
Lenovo » Thinkstation P700 Firmware
Versions before (<) a5ktaba
cpe:2.3:o:lenovo:thinkstation_p700_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkstation P700 » Version: N/A
Lenovo » Thinkstation P900 Firmware
Versions before (<) a6ktaba
cpe:2.3:o:lenovo:thinkstation_p900_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkstation P900 » Version: N/A
Lenovo » Thinkcentre M818z Firmware
Versions before (<) m1ekt23a
cpe:2.3:o:lenovo:thinkcentre_m818z_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M818z » Version: N/A
Lenovo » Thinkcentre M700 Tiny Firmware
Versions before (<) fwktb9a
cpe:2.3:o:lenovo:thinkcentre_m700_tiny_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M700 Tiny » Version: N/A
Lenovo » Thinkcentre M900x Firmware
Versions before (<) fwktb9a
cpe:2.3:o:lenovo:thinkcentre_m900x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre M900x » Version: N/A
Lenovo » Thinkcentre X1 Firmware
Versions before (<) m0hkt50a
cpe:2.3:o:lenovo:thinkcentre_x1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkcentre X1 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-3719

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-3719

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	Lenovo Group Ltd.
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2021-3719

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Assigned by: psirt@lenovo.com (Secondary)

References for CVE-2021-3719

https://support.lenovo.com/us/en/product_security/LEN-67440

Multi-vendor BIOS Security Vulnerabilities (September 2021) - Lenovo Support US
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-3719

Products affected by CVE-2021-3719

Exploit prediction scoring system (EPSS) score for CVE-2021-3719

CVSS scores for CVE-2021-3719

CWE ids for CVE-2021-3719

References for CVE-2021-3719