CVE-2021-4212: Lenovo c340-14iml Firmware

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected products

  • Lenovo c340-14iml Firmware: affected versions not specified
  • Lenovo c340-15iml Firmware: affected versions not specified
  • Lenovo d330-10igm Firmware: affected versions not specified
  • Lenovo Duet 3-10igl5 Firmware: affected versions not specified
  • Lenovo e41-50 Firmware: affected versions not specified
  • Lenovo Flex-14iml Firmware: affected versions not specified
  • Lenovo Flex-15iml Firmware: affected versions not specified
  • Lenovo Ideapad 3-14are05 Firmware: affected versions not specified
  • Lenovo Ideapad 3-15are05 Firmware: affected versions not specified
  • Lenovo Ideapad 3-17are05 Firmware: affected versions not specified
  • Lenovo Ideapad 5-14alc05 Firmware: affected versions not specified
  • Lenovo Ideapad 5-14are05 Firmware: affected versions not specified
  • Lenovo Ideapad 5-15itl05 Firmware: affected versions not specified
  • Lenovo Ideapad 5 Pro-14acn6 Firmware: affected versions not specified
  • Lenovo Ideapad 5 Pro-14itl6 Firmware: affected versions not specified
  • Lenovo Ideapad 5 Pro-16ihu6 Firmware: affected versions not specified
  • Lenovo Ideapad Creator 5-15imh05 Firmware: affected versions not specified
  • Lenovo Ideapad Gaming 3-15ach6 Firmware: affected versions not specified
  • Lenovo Ideapad Gaming 3-15arh05 Firmware: affected versions not specified
  • Lenovo Ideapad Gaming 3-15imh05 Firmware: affected versions not specified
  • Lenovo l340-15irh Firmware: affected versions not specified
  • Lenovo l340-15iwl Firmware: affected versions not specified
  • Lenovo l340-15iwl Touch Firmware: affected versions not specified
  • Lenovo l340-17irh Firmware: affected versions not specified
  • Lenovo l340-17iwl Firmware: affected versions not specified
  • and 37 more

Published 2022-04-22. Last modified 2026-06-17.