CVE-2021-3719: Lenovo Thinkcentre e93 Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected products

• Lenovo Thinkcentre e93 Firmware: before fbktdfa (fixed in fbktdfa)
• Lenovo Thinkcentre m4500q Firmware: before fhkt86a (fixed in fhkt86a)
• Lenovo Thinkcentre m600 Firmware: before m00kt65a (fixed in m00kt65a)
• Lenovo Thinkcentre m6500t/s Firmware: before fbktdfa (fixed in fbktdfa)
• Lenovo Thinkcentre m700 Tiny Firmware: before fwktb9a (fixed in fwktb9a)
• Lenovo Thinkcentre m73 Firmware: before fhkt86a (fixed in fhkt86a)
• Lenovo Thinkcentre m73p Firmware: before fbktdfa (fixed in fbktdfa)
• Lenovo Thinkcentre m800 Firmware: before fwktb9a (fixed in fwktb9a)
• Lenovo Thinkcentre m818z Firmware: before m1ekt23a (fixed in m1ekt23a)
• Lenovo Thinkcentre m83 Firmware: before fbktdfa (fixed in fbktdfa)
• Lenovo Thinkcentre m8500t/s Firmware: before fbktdfa (fixed in fbktdfa)
• Lenovo Thinkcentre m900 Firmware: before fwktb9a (fixed in fwktb9a)
• Lenovo Thinkcentre m900x Firmware: before fwktb9a (fixed in fwktb9a)
• Lenovo Thinkcentre m93 Firmware: before fbktdfa (fixed in fbktdfa)
• Lenovo Thinkcentre m93p Firmware: before fbktdfa (fixed in fbktdfa)
• Lenovo Thinkcentre x1 Firmware: before m0hkt50a (fixed in m0hkt50a)
• Lenovo Thinkstation p300 Firmware: before fbktdfa (fixed in fbktdfa)
• Lenovo Thinkstation p500 Firmware: before a4ktaba (fixed in a4ktaba)
• Lenovo Thinkstation p700 Firmware: before a5ktaba (fixed in a5ktaba)
• Lenovo Thinkstation p900 Firmware: before a6ktaba (fixed in a6ktaba)

Published 2021-11-12. Last modified 2026-06-17.