● CVE — Medium
CVE-2021-3843
VendorlenovoProductthinkpad 11e yoga gen 6 firmware, thinkpad l390 yoga firmware, thinkpad x12 detachable gen 1 firmware, thinkpad x260 firmware, thinkpad 11e 3rd gen firmware, thinkpad 11e 4th gen celeron firmware, thinkpad 11e 4th gen i3 firmware, thinkpad 11e 4th gen i5 firmware, thinkpad 11e 4th gen i7 firmware, thinkpad 13 gen 2 firmware, thinkpad l13 firmware, thinkpad l13 gen 2 firmware, thinkpad l13 yoga firmware, thinkpad l13 yoga gen 2 firmware, thinkpad l14 firmware, thinkpad l14 gen 1 firmware, thinkpad l15 firmware, thinkpad l15 gen 1 firmware, thinkpad l380 firmware, thinkpad l380 yoga firmware, thinkpad l390 firmware, thinkpad s2 gen 6 firmware, thinkpad s2 yoga gen 6 firmware, thinkpad s5 2nd gen firmware, thinkpad t460 firmwareDiscoveredNov 12, 2021UpdatedNov 21, 2024
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.