CVE-2021-3843: Lenovo Thinkpad 11e 3rd Gen Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected products

  • Lenovo Thinkpad 11e 3rd Gen Firmware: up to and including 1.22; up to and including 1.29
  • Lenovo Thinkpad 11e 4th Gen Celeron Firmware: up to and including 1.27
  • Lenovo Thinkpad 11e 4th Gen i3 Firmware: up to and including 1.22
  • Lenovo Thinkpad 11e 4th Gen i5 Firmware: up to and including 1.22
  • Lenovo Thinkpad 11e 4th Gen i7 Firmware: up to and including 1.22
  • Lenovo Thinkpad 11e 5th Gen Firmware: up to and including 1.13
  • Lenovo Thinkpad 11e Yoga Gen 6 Firmware: up to and including 1.12
  • Lenovo Thinkpad 13 Gen 2 Firmware: up to and including 1.29
  • Lenovo Thinkpad l13 Firmware: up to and including 1.31
  • Lenovo Thinkpad l13 Gen 2 Firmware: up to and including 1.11; up to and including 1.08
  • Lenovo Thinkpad l13 Yoga Firmware: up to and including 1.31
  • Lenovo Thinkpad l13 Yoga Gen 2 Firmware: up to and including 1.11; up to and including 1.08
  • Lenovo Thinkpad l14 Firmware: before 1.20.1.17 (fixed in 1.20.1.17)
  • Lenovo Thinkpad l14 Gen 1 Firmware: before 1.15 (fixed in 1.15)
  • Lenovo Thinkpad l15 Firmware: before 1.20.1.17 (fixed in 1.20.1.17)
  • Lenovo Thinkpad l15 Gen 1 Firmware: before 1.15 (fixed in 1.15)
  • Lenovo Thinkpad l380 Firmware: up to and including 1.26
  • Lenovo Thinkpad l380 Yoga Firmware: up to and including 1.26
  • Lenovo Thinkpad l390 Firmware: up to and including 1.35
  • Lenovo Thinkpad l390 Yoga Firmware: up to and including 1.35
  • Lenovo Thinkpad s2 Gen 6 Firmware: up to and including 2021-09-30
  • Lenovo Thinkpad s2 Yoga Gen 6 Firmware: up to and including 2021-09-30
  • Lenovo Thinkpad s5 2nd Gen Firmware: up to and including 1.28
  • Lenovo Thinkpad t460 Firmware: up to and including 1.43.1.11
  • Lenovo Thinkpad x12 Detachable Gen 1 Firmware: before 1.16 (fixed in 1.16)
  • and 4 more

Published 2021-11-12. Last modified 2026-06-17.