CVE-2021-3719

{"id": "CVE-2021-3719", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}, {"type": "Secondary", "source": "psirt@lenovo.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2021-11-12T22:15:07.957", "references": [{"url": "https://support.lenovo.com/us/en/product_security/LEN-67440", "tags": ["Vendor Advisory"], "source": "psirt@lenovo.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "psirt@lenovo.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may allow an attacker with local access and elevated privileges to execute arbitrary code."}, {"lang": "es", "value": "Una posible vulnerabilidad en la funci\u00f3n SMI callback que guarda y restaura las tablas de scripts de arranque usadas para reanudar desde el estado de suspensi\u00f3n en algunos modelos ThinkCentre y ThinkStation puede permitir a un atacante con acceso local y privilegios elevados ejecutar c\u00f3digo arbitrario"}], "lastModified": "2021-11-19T21:57:13.783", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_e93_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F534F97A-0288-4015-8C8B-B98AE66CB812", "versionEndExcluding": "fbktdfa"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_e93:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DA9110B9-D4E6-4DEC-B0B9-DE4641117B54"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m600_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69F0297B-815E-4912-A23B-A4F38BB43BAF", "versionEndExcluding": "m00kt65a"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m600:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DCA4E481-3FE3-4AC5-BDEA-EF0C667E331E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m700_tiny_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "118DA580-F89C-40FF-930C-E974C13108EE", "versionEndExcluding": "fwktb9a"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m700_tiny:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AE20DD1E-5C2C-4253-B71E-529D699FB8D0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m73_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5FA79F6-A8EF-4B91-9C11-F03DF14A4313", "versionEndExcluding": "fhkt86a"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m73:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6FB24CE6-E1F1-4151-9228-61DCD08E9D01"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m73p_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2BDBA965-81EB-4898-9C06-A8D917841553", "versionEndExcluding": "fbktdfa"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m73p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CB7C0580-76A1-41C4-B743-96000853236B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m800_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E0468FF-B7A5-4199-8A5A-CD26C7992EB2", "versionEndExcluding": "fwktb9a"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m800:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B97FE070-E06D-433B-AAC9-A2460E404B94"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m818z_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54C60F2A-20C6-44D9-AEF4-92CEBCAB1B6C", "versionEndExcluding": "m1ekt23a"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m818z:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "37E62D35-9270-4959-A9C2-97E3F9F0719A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m83_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A37FFBD9-559D-4798-BFF5-94BD14EB0FD4", "versionEndExcluding": "fbktdfa"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m83:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9BB1BF39-4D09-4133-88CB-AD9E1271EFF0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m900_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C6746A2-953E-4F8A-AEC7-0FD2CC688777", "versionEndExcluding": "fwktb9a"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m900:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ADC80C43-18AF-433D-AA51-F473B8501329"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m900x_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94EB1312-08C4-4018-AEEA-6305716BF89C", "versionEndExcluding": "fwktb9a"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m900x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "261F2F75-E0E4-4318-BB7B-065EC466D671"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m93_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5C2FD29-75C8-46BE-878F-590A9DB316AF", "versionEndExcluding": "fbktdfa"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m93:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6340A351-D5A0-46D2-BF97-412DD66BDE65"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m93p_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58AA9D3A-6CB8-4715-8394-4573EE16E293", "versionEndExcluding": "fbktdfa"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m93p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "11A2CF02-7D37-4C2A-ABB5-0F072BF7C739"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m4500q_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E375987D-4349-4285-856A-22D60E52523C", "versionEndExcluding": "fhkt86a"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m4500q:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C0B588AF-BB3E-4A22-8197-0450B307F38B"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m6500t\\/s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "817002BF-7E5C-43EA-BA8A-28B1DC908CE7", "versionEndExcluding": "fbktdfa"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m6500t\\/s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E2BD6A2B-9A26-410E-A4D0-CCCCDECB7036"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_m8500t\\/s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "328A37CD-78D2-4B20-AF44-CC1AD8395556", "versionEndExcluding": "fbktdfa"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_m8500t\\/s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9DC5D34D-72DB-455E-9A01-9066BE4D3670"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkcentre_x1_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75BA83EE-4F80-499B-9634-E350088D87D5", "versionEndExcluding": "m0hkt50a"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkcentre_x1:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "62066C05-06E3-4443-B217-98FB5038FCA4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkstation_p300_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8618E20B-AF94-47FD-86EC-C661DE63FEF6", "versionEndExcluding": "fbktdfa"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkstation_p300:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EDCE0A0B-C9EB-402A-B43B-6B7670E2BF73"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkstation_p500_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7D7EE98-676F-474A-BBBF-E71B128FBCB8", "versionEndExcluding": "a4ktaba"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkstation_p500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B4CA9A54-00A0-4569-9AE0-6AE02A039600"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkstation_p700_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2D8F272-C7C2-45BC-B83F-0430A6CB6AEA", "versionEndExcluding": "a5ktaba"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkstation_p700:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BA54FF9E-3B77-4B09-A77B-D7F522A69326"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:thinkstation_p900_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F06F1ABF-130E-416F-993B-25E3F6832B72", "versionEndExcluding": "a6ktaba"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkstation_p900:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5FB1B208-2854-4F95-BAB0-661442FEC477"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@lenovo.com"}