{"id":"CVE-2021-3970","aliases":["EUVD-2021-27175","GHSA-2g3v-5cpr-rx7q"],"status":"published","title":"A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some...","description":"A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01263,"percentile":0.69894,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2022-04-22T20:30:37Z","modified":"2026-06-17T04:06:18Z","products":[{"vendor":"lenovo","product":"ideapad_3-14ada05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14ada6_firmware"},{"vendor":"lenovo","product":"ideapad_3-14alc6_firmware"},{"vendor":"lenovo","product":"ideapad_3-14are05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14igl05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14iil05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14iml05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14itl05_firmware"},{"vendor":"lenovo","product":"ideapad_3-14itl6_firmware"},{"vendor":"lenovo","product":"ideapad_3-15ada05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15ada6_firmware"},{"vendor":"lenovo","product":"ideapad_3-15alc6_firmware"},{"vendor":"lenovo","product":"ideapad_3-15are05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15igl05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15iil05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15iml05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15itl05_firmware"},{"vendor":"lenovo","product":"ideapad_3-15itl6_firmware"},{"vendor":"lenovo","product":"ideapad_3-17ada05_firmware"},{"vendor":"lenovo","product":"ideapad_3-17ada6_firmware"},{"vendor":"lenovo","product":"ideapad_3-17alc6_firmware"},{"vendor":"lenovo","product":"ideapad_3-17are05_firmware"},{"vendor":"lenovo","product":"ideapad_3-17iil05_firmware"},{"vendor":"lenovo","product":"ideapad_3-17iml05_firmware"},{"vendor":"lenovo","product":"ideapad_3-17itl6_firmware"},{"vendor":"lenovo","product":"ideapad_5-15are05_firmware"},{"vendor":"lenovo","product":"ideapad_5-15iil05_firmware"},{"vendor":"lenovo","product":"ideapad_creator_5-15imh05_firmware"},{"vendor":"lenovo","product":"ideapad_gaming_3-15arh05_firmware"},{"vendor":"lenovo","product":"ideapad_gaming_3-15imh05_firmware"},{"vendor":"lenovo","product":"l3-15itl6_firmware"},{"vendor":"lenovo","product":"l340-15irh_firmware"},{"vendor":"lenovo","product":"l340-15iwl_firmware"},{"vendor":"lenovo","product":"l340-15iwl_touch_firmware"},{"vendor":"lenovo","product":"l340-17irh_firmware"},{"vendor":"lenovo","product":"l340-17iwl_firmware"},{"vendor":"lenovo","product":"l3_15iml05_firmware"},{"vendor":"lenovo","product":"legion_5-15ach6_firmware"},{"vendor":"lenovo","product":"legion_5-15ach6a_firmware"},{"vendor":"lenovo","product":"legion_5-15ach6h_firmware"},{"vendor":"lenovo","product":"legion_5-15imh6_firmware"},{"vendor":"lenovo","product":"legion_5-15ith6_firmware"},{"vendor":"lenovo","product":"legion_5-15ith6h_firmware"},{"vendor":"lenovo","product":"legion_5-17ach6_firmware"},{"vendor":"lenovo","product":"legion_5-17ach6h_firmware"},{"vendor":"lenovo","product":"legion_5-17ith6_firmware"},{"vendor":"lenovo","product":"legion_5-17ith6h_firmware"},{"vendor":"lenovo","product":"legion_5_pro-16ach6_firmware"},{"vendor":"lenovo","product":"legion_5_pro-16ach6h_firmware"},{"vendor":"lenovo","product":"legion_5_pro-16ith6_firmware"},{"vendor":"lenovo","product":"legion_5_pro-16ith6h_firmware"},{"vendor":"lenovo","product":"legion_7-16achg6_firmware"},{"vendor":"lenovo","product":"legion_7-16ithg6_firmware"},{"vendor":"lenovo","product":"legion_s7-15ach6_firmware"},{"vendor":"lenovo","product":"legion_y540-15irh-pg0_firmware"},{"vendor":"lenovo","product":"legion_y540-15irh_firmware"},{"vendor":"lenovo","product":"legion_y540-17irh-pg0_firmware"},{"vendor":"lenovo","product":"legion_y540-17irh_firmware"},{"vendor":"lenovo","product":"legion_y545-pg0_firmware"},{"vendor":"lenovo","product":"legion_y545_firmware"},{"vendor":"lenovo","product":"legion_y7000-2019-pg0_firmware"},{"vendor":"lenovo","product":"legion_y7000-2019_firmware"},{"vendor":"lenovo","product":"notebook bios"},{"vendor":"lenovo","product":"s145-14api_firmware"},{"vendor":"lenovo","product":"s145-14ast_firmware"},{"vendor":"lenovo","product":"s145-14igm_firmware"},{"vendor":"lenovo","product":"s145-14iil_firmware"},{"vendor":"lenovo","product":"s145-15api_firmware"},{"vendor":"lenovo","product":"s145-15ast_firmware"},{"vendor":"lenovo","product":"s145-15igm_firmware"},{"vendor":"lenovo","product":"s145-15iil_firmware"},{"vendor":"lenovo","product":"s14_g2_itl_firmware"},{"vendor":"lenovo","product":"s540-13api_firmware"},{"vendor":"lenovo","product":"s540-13iml_firmware"},{"vendor":"lenovo","product":"slim_7_pro-14ihu5_firmware"},{"vendor":"lenovo","product":"slim_9-14itl05_firmware"},{"vendor":"lenovo","product":"v14-ada_firmware"},{"vendor":"lenovo","product":"v14-are_firmware"},{"vendor":"lenovo","product":"v14-igl_firmware"},{"vendor":"lenovo","product":"v14-iil_firmware"},{"vendor":"lenovo","product":"v140-15iwl_firmware"},{"vendor":"lenovo","product":"v14_g1-iml_firmware"},{"vendor":"lenovo","product":"v14_g2-acl_firmware"},{"vendor":"lenovo","product":"v14_g2-itl_firmware"},{"vendor":"lenovo","product":"v15-ada_firmware"},{"vendor":"lenovo","product":"v15-igl_firmware"},{"vendor":"lenovo","product":"v15-iil_firmware"},{"vendor":"lenovo","product":"v15_g1-iml_firmware"},{"vendor":"lenovo","product":"v15_g2-alc_firmware"},{"vendor":"lenovo","product":"v15_g2-itl_firmware"},{"vendor":"lenovo","product":"v17-iil_firmware"},{"vendor":"lenovo","product":"v17_g2-itl_firmware"},{"vendor":"lenovo","product":"v340-17iwl_firmware"},{"vendor":"lenovo","product":"yoga_7-14acn6_firmware"},{"vendor":"lenovo","product":"yoga_c740-14iml_firmware"},{"vendor":"lenovo","product":"yoga_c740-15iml_firmware"},{"vendor":"lenovo","product":"yoga_c940-14iil_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14ach5_d_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14ach5_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14ach5_o_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14ach5_od_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14arh5_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14ihu5_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14ihu5_o_firmware"},{"vendor":"lenovo","product":"yoga_slim_7_pro-14itl5_firmware"},{"vendor":"lenovo","product":"yoga_slim_9-14itl05_firmware"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-73440","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3970"},{"url":"https://github.com/advisories/GHSA-2g3v-5cpr-rx7q"}],"sources":{"cve":[{"id":"CVE-2021-3970","description":"A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.","status":"published","published":"2022-04-22T20:30:37Z","modified":"2024-08-03T17:09:09.797Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:33:03.671751Z"}],"euvd":[{"id":"EUVD-2021-27175","description":"A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.","status":"published","published":"2022-04-22T20:30:37Z","modified":"2024-08-03T17:09:09Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T03:25:11.376657Z"}],"ghsa":[{"id":"GHSA-2g3v-5cpr-rx7q","title":"A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some...","description":"A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.","status":"published","published":"2022-04-23T00:03:01Z","modified":"2023-01-27T05:02:01Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:42:00.381555Z"}],"nvd":[{"id":"CVE-2021-3970","description":"A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.","status":"published","published":"2022-04-22T21:15:09.75Z","modified":"2026-06-17T04:06:18.663Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:06.029737Z"}]}}