CVE-2021-3786 in Notebook

Resumen

por MITRE • 2021-11-13

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Lenovo Group Ltd.
• Reservar: 2021-09-09
• Divulgación: 2021-11-13
• Moderación: aceptado
• Artículo: VDB-186624
• CPE: listo
• CWE: CWE-20 (confirmado)
• CVSS: 4.4 (CNA)
• EPSS: 0.00226
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-3786
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-3786
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-3786/