CVE-2021-4211: Lenovo a340-22icb Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected products

  • Lenovo a340-22icb Firmware: affected versions not specified
  • Lenovo a340-22ick Firmware: affected versions not specified
  • Lenovo a340-24icb Firmware: affected versions not specified
  • Lenovo a340-24ick Firmware: affected versions not specified
  • Lenovo a540-24icb Firmware: affected versions not specified
  • Lenovo a540-27icb Firmware: affected versions not specified
  • Lenovo Ideacentre 5-14iob6 Firmware: affected versions not specified
  • Lenovo Ideacentre 510s-07icb Firmware: affected versions not specified
  • Lenovo Ideacentre 510s-07ick Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-22ada6 Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-22iil5 Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-22itl6 Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-24ada6 Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-24iil5 Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-24itl6 Firmware: affected versions not specified
  • Lenovo Ideacentre Aio 3-27itl6 Firmware: affected versions not specified
  • Lenovo Ideacentre Creator 5-14iob6 Firmware: affected versions not specified
  • Lenovo Ideacentre Gaming 5-14iob6 Firmware: affected versions not specified
  • Lenovo SE30 Firmware: affected versions not specified
  • Lenovo Thinkcentre m600 Firmware: affected versions not specified
  • Lenovo Thinkcentre m700 Tiny Firmware: affected versions not specified
  • Lenovo Thinkcentre m70a Firmware: affected versions not specified
  • Lenovo Thinkcentre m710e Firmware: affected versions not specified
  • Lenovo Thinkcentre m710q (10yc) Firmware: affected versions not specified
  • Lenovo Thinkcentre m710q Firmware: affected versions not specified
  • and 28 more

Published 2022-04-22. Last modified 2026-06-17.