● CVE — Medium
CVE-2021-3599
VendorlenovoProductthinkpad yoga 11e 3rd gen firmware, thinkpad yoga 11e 4th gen firmware, thinkpad yoga 11e 5th gen firmware, thinkpad x250 firmware, thinkpad yoga 15 firmware, thinkpad x12 detachable gen 1 firmware, thinkpad x13 gen 1 firmware, thinkpad x13 gen 2 firmware, thinkpad x13 yoga gen 1 firmware, thinkpad x13 yoga gen 2 firmware, thinkpad x1 carbon 5th gen kabylake firmware, thinkpad x1 carbon 5th gen skylake firmware, thinkpad x1 fold gen 1 firmware, thinkpad x1 titanium firmware, thinkpad x1 yoga 1st gen firmware, thinkpad x1 yoga 3rd gen firmware, thinkpad x1 yoga 4th gen firmware, thinkpad x260 firmware, thinkpad x270 firmware, thinkpad x280 firmware, thinkpad x380 yoga firmware, thinkpad x390 firmware, thinkpad x390 yoga firmware, thinkpad yoga 260 firmware, thinkpad yoga 370 firmwareDiscoveredNov 12, 2021UpdatedNov 21, 2024
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.