CVE-2021-3786: Lenovo Ideapad s940-14iwl Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.

Affected products

  • Lenovo Ideapad s940-14iwl Firmware: up to and including 12.0.81.1753
  • Lenovo Ideapad Yoga s940-14iwl Firmware: up to and including 12.0.81.1753
  • Lenovo Thinkpad 10 Firmware: before 2021-10-25 (fixed in 2021-10-25)
  • Lenovo Thinkpad 11e 3rd Gen Firmware: before 2021-10-31 (fixed in 2021-10-31)
  • Lenovo Thinkpad 11e 4th Gen Firmware: before 2021-10-31 (fixed in 2021-10-31)
  • Lenovo Thinkpad 11e Yoga Gen 6 Firmware: before 2021-10-31 (fixed in 2021-10-31)
  • Lenovo Thinkpad 13 Gen 2 Firmware: before 2021-10-31 (fixed in 2021-10-31)
  • Lenovo Thinkpad 25 Firmware: before n1qet92w (fixed in n1qet92w)
  • Lenovo Thinkpad e14 Firmware: up to and including 2021-10-15
  • Lenovo Thinkpad e14 Gen 2 Firmware: before 2021-10-15 (fixed in 2021-10-15)
  • Lenovo Thinkpad e14 Gen 3 Firmware: before 2021-10-15 (fixed in 2021-10-15)
  • Lenovo Thinkpad e15 Firmware: before 2021-10-15 (fixed in 2021-10-15)
  • Lenovo Thinkpad e15 Gen 2 Firmware: before 2021-10-15 (fixed in 2021-10-15)
  • Lenovo Thinkpad e15 Gen 3 Firmware: before 2021-10-15 (fixed in 2021-10-15)
  • Lenovo Thinkpad e470 Firmware: before 2021-10-15 (fixed in 2021-10-15)
  • Lenovo Thinkpad e480 Firmware: before 2021-10-15 (fixed in 2021-10-15)
  • Lenovo Thinkpad e490 Firmware: before 2021-10-15 (fixed in 2021-10-15)
  • Lenovo Thinkpad e570 Firmware: before 2021-10-15 (fixed in 2021-10-15)
  • Lenovo Thinkpad e580 Firmware: before 2021-10-15 (fixed in 2021-10-15)
  • Lenovo Thinkpad e590 Firmware: before 2021-10-15 (fixed in 2021-10-15)
  • Lenovo Thinkpad Helix Firmware: before n17etb6w (fixed in n17etb6w)
  • Lenovo Thinkpad l13 Firmware: before 2021-10-31 (fixed in 2021-10-31)
  • Lenovo Thinkpad l13 Gen 2 Firmware: before 2021-10-31 (fixed in 2021-10-31)
  • Lenovo Thinkpad l13 Yoga Firmware: before 2021-10-31 (fixed in 2021-10-31)
  • Lenovo Thinkpad l13 Yoga Gen 2 Firmware: before 2021-10-31 (fixed in 2021-10-31)
  • and 108 more

Published 2021-11-12. Last modified 2026-06-17.