Search
Find a vulnerability
Search criteria
Related vulnerabilities
BDU:2022-02965 (CVE-2021-4212)
Vulnerability from fstec – Published: 2022-05-17 – Updated: 2022-05-17 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость функции обратного вызова обработчика System Management Interrupt (SMI) драйвера режима Legacy BIOS ноутбуков Lenovo, позволяющая нарушителю выполнить произвольный код с повышенными привилегиями
Summary
Уязвимость функции обратного вызова обработчика System Management Interrupt (SMI) драйвера режима Legacy BIOS ноутбуков Lenovo связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код с повышенными привилегиями
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Resource manipulation
Incidents
Being clarified
Remediation
Software update
CWE
- CWE-20 - Недостаточная проверка вводимых данных
Aliases
References
Impacted products
145 products
from 1 vendor
Vendors
Lenovo Group Limited
Products
IdeaPad 3-14ARE05, IdeaPad 3-15ARE05, IdeaPad 3-17ARE05, Ideapad Gaming L340-15IRH, IdeaPad L340-15IWL, Legion Y540-15IRH, Legion Y540-15IRH-PG0, Legion Y540-17IRH, Legion Y540-17IRH-PG0, Legion Y545, Legion Y545-PG0, Legion Y7000-2019, Legion Y7000-2019-PG0, Ideapad S540-13IML, Ideapad Slim 7 Pro-14IHU5, Ideapad Slim 9-14ITL05, V140-15IWL, Yoga 7-14ACN6, Yoga C740-14IML, Yoga C740-15IML, Yoga C940-14IIL, Yoga Slim 7 Pro-14ACH5, Yoga Slim 7 Pro-14ACH5 O, Yoga Slim 7 Pro-14IHU5, Yoga Slim 7 Pro-14IHU5 O, Yoga Slim 7 Pro-14ITL5, Yoga Slim 9-14ITL05, ideapad 3-14IML05, ideapad 3-14ITL05, ideapad 3-14ITL6, ideapad 3-15IML05, ideapad 3-15ITL05, ideapad 3-15ITL6, ideapad 3-17IML05, ideapad 5-15IIL05, ideapad Creator 5-15IMH05, ideapad Gaming 3-15ARH05, ideapad Gaming 3-15IMH05, IdeaPad 3-17ITL6, Lenovo S14 G2 ITL, Lenovo 14W Gen 2, Lenovo 500w Gen 3, ideapad C340-14API, ideapad C340-14IML, ideapad C340-15IML, ideapad D330-10IGM, ideapad Duet 3-10IGL5, Lenovo E41-50, Lenovo E41-55, ideapad FLEX-14IML, ideapad FLEX-15IML, ideapad Flex 3-11ADA05, IdeaPad 3-15IGL05, IdeaPad 3-17IIL05, IdeaPad 5-14ITL05, IdeaPad Gaming 3-15IHU6, Ideapad 5-15ITL05, ideapad L3-15IML05, IdeaPad L3 15ITL6, Legion 5 Pro-16ACH6, Legion 5 Pro-16ACH6H, Legion 5 Pro-16ITH6, Legion 5 Pro-16ITH6H, Legion 5-15ACH6, Legion 5-15ACH6A, Legion 5-15ACH6H, Legion 5-15IMH6, Legion 5-15ITH6, Legion 5-15ITH6H, Legion 5-17ACH6, Legion 5-17ACH6H, Legion 5-17ITH6, Legion 5-17ITH6H, Legion 7-16ACHg6, Legion 7-16ITHg6, Ideapad S145-14IGM, Ideapad S145-14IIL, Ideapad S145-15IGM, Ideapad S145-15IIL, ideapad S340-13IML, ideapad S340-14API, ideapad S340-14IML, ideapad S340-15API, ideapad S340-15API Touch, ideapad S340-15IML, ideapad S340-15IML Touch, ideapad S530-13IML, ideapad S530-13IWL, ideapad S540-14API, ideapad S540-14IML, ideapad S540-14IML Touch, ideapad S540-15IML, ideapad S740-15IRH, ideapad S740-15IRH Touch, ideapad Slim 7-14ARE05, ideapad Slim 7-14IIL05, ideapad Slim 7-14ITL05, ideapad Slim 7-15IIL05, ideapad Slim 7-15IMH05, ideapad Slim 7-15ITL05, ThinkBook 13x ITG, ThinkBook 14 G3 ACL, ThinkBook 14 G3 ITL, ThinkBook 14s Yoga ITL, ThinkBook 15 G3 ACL, ThinkBook Plus G2 ITG, Lenovo V14 G1-IML, Lenovo V14 G2-ITL, Lenovo V14-ARE, Lenovo V14-IGL, Lenovo V14-IIL, Lenovo V15 G1-IML, Lenovo V15 G2-ITL, Lenovo V15-IGL, Lenovo V15-IIL, Lenovo V17 G2-ITL, Lenovo V17-IIL, Lenovo V340-17IWL, Yoga 6-13ALC6, Yoga 730-15IWL, Yoga Creator 7-15IMH05, Yoga Duet 7-13ITL6, Yoga Duet 7-13ITL6-LTE, Yoga S740-15IRH, Yoga Slim 7 Carbon 13ITL5, Yoga Slim 7-13ITL05, Yoga Slim 7-14ARE05, Yoga Slim 7-14IIL05, Yoga Slim 7-14ITL05, Yoga Slim 7-15IIL05, Yoga Slim 7-15IMH05, Yoga Slim 7-15ITL05, ideapad 3-14IGL05, ideapad 3-14IIL05, ideapad 3-15IIL05, ideapad 5 Pro-14ACN6, ideapad 5 Pro-14ITL6, ideapad 5 Pro-16ACH6, ideapad 5 Pro-16IHU6, ideapad 5-14ALC05, ideapad 5-14ARE05, ideapad Creator 5-16ACH6, ideapad Gaming 3-15ACH6, ThinkPad X1 Carbon 9th Gen, ThinkPad X1 Yoga 6th Gen
Versions
до dzcn42ww (IdeaPad 3-14ARE05), до DZCN42WW (IdeaPad 3-15ARE05), до DZCN42WW (IdeaPad 3-17ARE05), до BGCN35WW (Ideapad Gaming L340-15IRH), до ATCN46WW (IdeaPad L340-15IWL), до BHCN44WW (Legion Y540-15IRH), до BHCN44WW (Legion Y540-15IRH-PG0), до BHCN44WW (Legion Y540-17IRH), до BHCN44WW (Legion Y540-17IRH-PG0), до BHCN44WW (Legion Y545), до BHCN44WW (Legion Y545-PG0), до BHCN44WW (Legion Y7000-2019), до BHCN44WW (Legion Y7000-2019-PG0), - (Ideapad S540-13IML), - (Ideapad Slim 7 Pro-14IHU5), - (Ideapad Slim 9-14ITL05), до ATCN46WW (V140-15IWL), - (Yoga 7-14ACN6), - (Yoga C740-14IML), - (Yoga C740-15IML), - (Yoga C940-14IIL), - (Yoga Slim 7 Pro-14ACH5), - (Yoga Slim 7 Pro-14ACH5 O), - (Yoga Slim 7 Pro-14IHU5), - (Yoga Slim 7 Pro-14IHU5 O), - (Yoga Slim 7 Pro-14ITL5), - (Yoga Slim 9-14ITL05), - (ideapad 3-14IML05), - (ideapad 3-14ITL05), - (ideapad 3-14ITL6), - (ideapad 3-15IML05), - (ideapad 3-15ITL05), - (ideapad 3-15ITL6), - (ideapad 3-17IML05), - (ideapad 5-15IIL05), до EGCN36WW (ideapad Creator 5-15IMH05), до FCCN17WW (ideapad Gaming 3-15ARH05), до EGCN36WW (ideapad Gaming 3-15IMH05), - (IdeaPad 3-17ITL6), - (Lenovo S14 G2 ITL), - (Lenovo 14W Gen 2), - (Lenovo 500w Gen 3), - (ideapad C340-14API), до CKCN18WW (ideapad C340-14IML), до CRCN19WW (ideapad C340-15IML), до 8NCN42WW (ideapad D330-10IGM), до EQCN31WW (ideapad Duet 3-10IGL5), до G2CN23WW (Lenovo E41-50), - (Lenovo E41-55), до CKCN18WW (ideapad FLEX-14IML), до CRCN19WW (ideapad FLEX-15IML), - (ideapad Flex 3-11ADA05), - (IdeaPad 3-15IGL05), - (IdeaPad 3-17IIL05), - (IdeaPad 5-14ITL05), - (IdeaPad Gaming 3-15IHU6), до FHCN64WW (Ideapad 5-15ITL05), - (ideapad L3-15IML05), - (IdeaPad L3 15ITL6), - (Legion 5 Pro-16ACH6), - (Legion 5 Pro-16ACH6H), - (Legion 5 Pro-16ITH6), - (Legion 5 Pro-16ITH6H), - (Legion 5-15ACH6), - (Legion 5-15ACH6A), - (Legion 5-15ACH6H), - (Legion 5-15IMH6), - (Legion 5-15ITH6), - (Legion 5-15ITH6H), - (Legion 5-17ACH6), - (Legion 5-17ACH6H), - (Legion 5-17ITH6), - (Legion 5-17ITH6H), - (Legion 7-16ACHg6), - (Legion 7-16ITHg6), - (Ideapad S145-14IGM), - (Ideapad S145-14IIL), - (Ideapad S145-15IGM), - (Ideapad S145-15IIL), до BZCN23WW (ideapad S340-13IML), до AMCN30WW (ideapad S340-14API), до CRCN19WW (ideapad S340-14IML), до AMCN30WW (ideapad S340-15API), до AMCN30WW (ideapad S340-15API Touch), до CRCN19WW (ideapad S340-15IML), до CRCN19WW (ideapad S340-15IML Touch), - (ideapad S530-13IML), - (ideapad S530-13IWL), - (ideapad S540-14API), до CKCN18WW (ideapad S540-14IML), до CKCN18WW (ideapad S540-14IML Touch), до CNCN20WW (ideapad S540-15IML), - (ideapad S740-15IRH), - (ideapad S740-15IRH Touch), до DMCN41WW (ideapad Slim 7-14ARE05), до DHCN33WW (ideapad Slim 7-14IIL05), до FBCN27WW (ideapad Slim 7-14ITL05), до DHCN33WW (ideapad Slim 7-15IIL05), до DNCN30WW (ideapad Slim 7-15IMH05), до FBCN27WW (ideapad Slim 7-15ITL05), до HLCN27WW (ThinkBook 13x ITG), - (ThinkBook 14 G3 ACL), до HRCN10WW (ThinkBook 14 G3 ITL), - (ThinkBook 14s Yoga ITL), - (ThinkBook 15 G3 ACL), до GYCN28WW (ThinkBook Plus G2 ITG), - (Lenovo V14 G1-IML), - (Lenovo V14 G2-ITL), до DZCN42WW (Lenovo V14-ARE), - (Lenovo V14-IGL), - (Lenovo V14-IIL), - (Lenovo V15 G1-IML), - (Lenovo V15 G2-ITL), - (Lenovo V15-IGL), - (Lenovo V15-IIL), - (Lenovo V17 G2-ITL), - (Lenovo V17-IIL), до ATCN46WW (Lenovo V340-17IWL), до H6CN14WW (Yoga 6-13ALC6), - (Yoga 730-15IWL), до DNCN30WW (Yoga Creator 7-15IMH05), - (Yoga Duet 7-13ITL6), - (Yoga Duet 7-13ITL6-LTE), - (Yoga S740-15IRH), до F7CN37WW (Yoga Slim 7 Carbon 13ITL5), до F7CN37WW (Yoga Slim 7-13ITL05), до DMCN41WW (Yoga Slim 7-14ARE05), до DHCN33WW (Yoga Slim 7-14IIL05), до FBCN27WW (Yoga Slim 7-14ITL05), до DHCN33WW (Yoga Slim 7-15IIL05), до DNCN30WW (Yoga Slim 7-15IMH05), до FBCN27WW (Yoga Slim 7-15ITL05), - (ideapad 3-14IGL05), - (ideapad 3-14IIL05), - (ideapad 3-15IIL05), до GECN30WW (ideapad 5 Pro-14ACN6), до GDCN61WW (ideapad 5 Pro-14ITL6), - (ideapad 5 Pro-16ACH6), до GRCN20WW (ideapad 5 Pro-16IHU6), до G5CN61WW (ideapad 5-14ALC05), до DTCN26WW (ideapad 5-14ARE05), - (ideapad Creator 5-16ACH6), до H3CN32WW (ideapad Gaming 3-15ACH6), - (ThinkPad X1 Carbon 9th Gen), - (ThinkPad X1 Yoga 6th Gen)
Product types
Firmware
Mitigations
Использование рекомендаций производителя:
https://support.lenovo.com/us/en/product_security/LEN-77639
{
"CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"CVSS 3.0": "AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Lenovo Group Limited",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e dzcn42ww (IdeaPad 3-14ARE05), \u0434\u043e DZCN42WW (IdeaPad 3-15ARE05), \u0434\u043e DZCN42WW (IdeaPad 3-17ARE05), \u0434\u043e BGCN35WW (Ideapad Gaming L340-15IRH), \u0434\u043e ATCN46WW (IdeaPad L340-15IWL), \u0434\u043e BHCN44WW (Legion Y540-15IRH), \u0434\u043e BHCN44WW (Legion Y540-15IRH-PG0), \u0434\u043e BHCN44WW (Legion Y540-17IRH), \u0434\u043e BHCN44WW (Legion Y540-17IRH-PG0), \u0434\u043e BHCN44WW (Legion Y545), \u0434\u043e BHCN44WW (Legion Y545-PG0), \u0434\u043e BHCN44WW (Legion Y7000-2019), \u0434\u043e BHCN44WW (Legion Y7000-2019-PG0), - (Ideapad S540-13IML), - (Ideapad Slim 7 Pro-14IHU5), - (Ideapad Slim 9-14ITL05), \u0434\u043e ATCN46WW (V140-15IWL), - (Yoga 7-14ACN6), - (Yoga C740-14IML), - (Yoga C740-15IML), - (Yoga C940-14IIL), - (Yoga Slim 7 Pro-14ACH5), - (Yoga Slim 7 Pro-14ACH5 O), - (Yoga Slim 7 Pro-14IHU5), - (Yoga Slim 7 Pro-14IHU5 O), - (Yoga Slim 7 Pro-14ITL5), - (Yoga Slim 9-14ITL05), - (ideapad 3-14IML05), - (ideapad 3-14ITL05), - (ideapad 3-14ITL6), - (ideapad 3-15IML05), - (ideapad 3-15ITL05), - (ideapad 3-15ITL6), - (ideapad 3-17IML05), - (ideapad 5-15IIL05), \u0434\u043e EGCN36WW (ideapad Creator 5-15IMH05), \u0434\u043e FCCN17WW (ideapad Gaming 3-15ARH05), \u0434\u043e EGCN36WW (ideapad Gaming 3-15IMH05), - (IdeaPad 3-17ITL6), - (Lenovo S14 G2 ITL), - (Lenovo 14W Gen 2), - (Lenovo 500w Gen 3), - (ideapad C340-14API), \u0434\u043e CKCN18WW (ideapad C340-14IML), \u0434\u043e CRCN19WW (ideapad C340-15IML), \u0434\u043e 8NCN42WW (ideapad D330-10IGM), \u0434\u043e EQCN31WW (ideapad Duet 3-10IGL5), \u0434\u043e G2CN23WW (Lenovo E41-50), - (Lenovo E41-55), \u0434\u043e CKCN18WW (ideapad FLEX-14IML), \u0434\u043e CRCN19WW (ideapad FLEX-15IML), - (ideapad Flex 3-11ADA05), - (IdeaPad 3-15IGL05), - (IdeaPad 3-17IIL05), - (IdeaPad 5-14ITL05), - (IdeaPad Gaming 3-15IHU6), \u0434\u043e FHCN64WW (Ideapad 5-15ITL05), - (ideapad L3-15IML05), - (IdeaPad L3 15ITL6), - (Legion 5 Pro-16ACH6), - (Legion 5 Pro-16ACH6H), - (Legion 5 Pro-16ITH6), - (Legion 5 Pro-16ITH6H), - (Legion 5-15ACH6), - (Legion 5-15ACH6A), - (Legion 5-15ACH6H), - (Legion 5-15IMH6), - (Legion 5-15ITH6), - (Legion 5-15ITH6H), - (Legion 5-17ACH6), - (Legion 5-17ACH6H), - (Legion 5-17ITH6), - (Legion 5-17ITH6H), - (Legion 7-16ACHg6), - (Legion 7-16ITHg6), - (Ideapad S145-14IGM), - (Ideapad S145-14IIL), - (Ideapad S145-15IGM), - (Ideapad S145-15IIL), \u0434\u043e BZCN23WW (ideapad S340-13IML), \u0434\u043e AMCN30WW (ideapad S340-14API), \u0434\u043e CRCN19WW (ideapad S340-14IML), \u0434\u043e AMCN30WW (ideapad S340-15API), \u0434\u043e AMCN30WW (ideapad S340-15API Touch), \u0434\u043e CRCN19WW (ideapad S340-15IML), \u0434\u043e CRCN19WW (ideapad S340-15IML Touch), - (ideapad S530-13IML), - (ideapad S530-13IWL), - (ideapad S540-14API), \u0434\u043e CKCN18WW (ideapad S540-14IML), \u0434\u043e CKCN18WW (ideapad S540-14IML Touch), \u0434\u043e CNCN20WW (ideapad S540-15IML), - (ideapad S740-15IRH), - (ideapad S740-15IRH Touch), \u0434\u043e DMCN41WW (ideapad Slim 7-14ARE05), \u0434\u043e DHCN33WW (ideapad Slim 7-14IIL05), \u0434\u043e FBCN27WW (ideapad Slim 7-14ITL05), \u0434\u043e DHCN33WW (ideapad Slim 7-15IIL05), \u0434\u043e DNCN30WW (ideapad Slim 7-15IMH05), \u0434\u043e FBCN27WW (ideapad Slim 7-15ITL05), \u0434\u043e HLCN27WW (ThinkBook 13x ITG), - (ThinkBook 14 G3 ACL), \u0434\u043e HRCN10WW (ThinkBook 14 G3 ITL), - (ThinkBook 14s Yoga ITL), - (ThinkBook 15 G3 ACL), \u0434\u043e GYCN28WW (ThinkBook Plus G2 ITG), - (Lenovo V14 G1-IML), - (Lenovo V14 G2-ITL), \u0434\u043e DZCN42WW (Lenovo V14-ARE), - (Lenovo V14-IGL), - (Lenovo V14-IIL), - (Lenovo V15 G1-IML), - (Lenovo V15 G2-ITL), - (Lenovo V15-IGL), - (Lenovo V15-IIL), - (Lenovo V17 G2-ITL), - (Lenovo V17-IIL), \u0434\u043e ATCN46WW (Lenovo V340-17IWL), \u0434\u043e H6CN14WW (Yoga 6-13ALC6), - (Yoga 730-15IWL), \u0434\u043e DNCN30WW (Yoga Creator 7-15IMH05), - (Yoga Duet 7-13ITL6), - (Yoga Duet 7-13ITL6-LTE), - (Yoga S740-15IRH), \u0434\u043e F7CN37WW (Yoga Slim 7 Carbon 13ITL5), \u0434\u043e F7CN37WW (Yoga Slim 7-13ITL05), \u0434\u043e DMCN41WW (Yoga Slim 7-14ARE05), \u0434\u043e DHCN33WW (Yoga Slim 7-14IIL05), \u0434\u043e FBCN27WW (Yoga Slim 7-14ITL05), \u0434\u043e DHCN33WW (Yoga Slim 7-15IIL05), \u0434\u043e DNCN30WW (Yoga Slim 7-15IMH05), \u0434\u043e FBCN27WW (Yoga Slim 7-15ITL05), - (ideapad 3-14IGL05), - (ideapad 3-14IIL05), - (ideapad 3-15IIL05), \u0434\u043e GECN30WW (ideapad 5 Pro-14ACN6), \u0434\u043e GDCN61WW (ideapad 5 Pro-14ITL6), - (ideapad 5 Pro-16ACH6), \u0434\u043e GRCN20WW (ideapad 5 Pro-16IHU6), \u0434\u043e G5CN61WW (ideapad 5-14ALC05), \u0434\u043e DTCN26WW (ideapad 5-14ARE05), - (ideapad Creator 5-16ACH6), \u0434\u043e H3CN32WW (ideapad Gaming 3-15ACH6), - (ThinkPad X1 Carbon 9th Gen), - (ThinkPad X1 Yoga 6th Gen)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://support.lenovo.com/us/en/product_security/LEN-77639",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "24.01.2022",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "17.05.2022",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "17.05.2022",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-02965",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-4212, LEN-77639",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "IdeaPad 3-14ARE05, IdeaPad 3-15ARE05, IdeaPad 3-17ARE05, Ideapad Gaming L340-15IRH, IdeaPad L340-15IWL, Legion Y540-15IRH, Legion Y540-15IRH-PG0, Legion Y540-17IRH, Legion Y540-17IRH-PG0, Legion Y545, Legion Y545-PG0, Legion Y7000-2019, Legion Y7000-2019-PG0, Ideapad S540-13IML, Ideapad Slim 7 Pro-14IHU5, Ideapad Slim 9-14ITL05, V140-15IWL, Yoga 7-14ACN6, Yoga C740-14IML, Yoga C740-15IML, Yoga C940-14IIL, Yoga Slim 7 Pro-14ACH5, Yoga Slim 7 Pro-14ACH5 O, Yoga Slim 7 Pro-14IHU5, Yoga Slim 7 Pro-14IHU5 O, Yoga Slim 7 Pro-14ITL5, Yoga Slim 9-14ITL05, ideapad 3-14IML05, ideapad 3-14ITL05, ideapad 3-14ITL6, ideapad 3-15IML05, ideapad 3-15ITL05, ideapad 3-15ITL6, ideapad 3-17IML05, ideapad 5-15IIL05, ideapad Creator 5-15IMH05, ideapad Gaming 3-15ARH05, ideapad Gaming 3-15IMH05, IdeaPad 3-17ITL6, Lenovo S14 G2 ITL, Lenovo 14W Gen 2, Lenovo 500w Gen 3, ideapad C340-14API, ideapad C340-14IML, ideapad C340-15IML, ideapad D330-10IGM, ideapad Duet 3-10IGL5, Lenovo E41-50, Lenovo E41-55, ideapad FLEX-14IML, ideapad FLEX-15IML, ideapad Flex 3-11ADA05, IdeaPad 3-15IGL05, IdeaPad 3-17IIL05, IdeaPad 5-14ITL05, IdeaPad Gaming 3-15IHU6, Ideapad 5-15ITL05, ideapad L3-15IML05, IdeaPad L3 15ITL6, Legion 5 Pro-16ACH6, Legion 5 Pro-16ACH6H, Legion 5 Pro-16ITH6, Legion 5 Pro-16ITH6H, Legion 5-15ACH6, Legion 5-15ACH6A, Legion 5-15ACH6H, Legion 5-15IMH6, Legion 5-15ITH6, Legion 5-15ITH6H, Legion 5-17ACH6, Legion 5-17ACH6H, Legion 5-17ITH6, Legion 5-17ITH6H, Legion 7-16ACHg6, Legion 7-16ITHg6, Ideapad S145-14IGM, Ideapad S145-14IIL, Ideapad S145-15IGM, Ideapad S145-15IIL, ideapad S340-13IML, ideapad S340-14API, ideapad S340-14IML, ideapad S340-15API, ideapad S340-15API Touch, ideapad S340-15IML, ideapad S340-15IML Touch, ideapad S530-13IML, ideapad S530-13IWL, ideapad S540-14API, ideapad S540-14IML, ideapad S540-14IML Touch, ideapad S540-15IML, ideapad S740-15IRH, ideapad S740-15IRH Touch, ideapad Slim 7-14ARE05, ideapad Slim 7-14IIL05, ideapad Slim 7-14ITL05, ideapad Slim 7-15IIL05, ideapad Slim 7-15IMH05, ideapad Slim 7-15ITL05, ThinkBook 13x ITG, ThinkBook 14 G3 ACL, ThinkBook 14 G3 ITL, ThinkBook 14s Yoga ITL, ThinkBook 15 G3 ACL, ThinkBook Plus G2 ITG, Lenovo V14 G1-IML, Lenovo V14 G2-ITL, Lenovo V14-ARE, Lenovo V14-IGL, Lenovo V14-IIL, Lenovo V15 G1-IML, Lenovo V15 G2-ITL, Lenovo V15-IGL, Lenovo V15-IIL, Lenovo V17 G2-ITL, Lenovo V17-IIL, Lenovo V340-17IWL, Yoga 6-13ALC6, Yoga 730-15IWL, Yoga Creator 7-15IMH05, Yoga Duet 7-13ITL6, Yoga Duet 7-13ITL6-LTE, Yoga S740-15IRH, Yoga Slim 7 Carbon 13ITL5, Yoga Slim 7-13ITL05, Yoga Slim 7-14ARE05, Yoga Slim 7-14IIL05, Yoga Slim 7-14ITL05, Yoga Slim 7-15IIL05, Yoga Slim 7-15IMH05, Yoga Slim 7-15ITL05, ideapad 3-14IGL05, ideapad 3-14IIL05, ideapad 3-15IIL05, ideapad 5 Pro-14ACN6, ideapad 5 Pro-14ITL6, ideapad 5 Pro-16ACH6, ideapad 5 Pro-16IHU6, ideapad 5-14ALC05, ideapad 5-14ARE05, ideapad Creator 5-16ACH6, ideapad Gaming 3-15ACH6, ThinkPad X1 Carbon 9th Gen, ThinkPad X1 Yoga 6th Gen",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 System Management Interrupt (SMI) \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0440\u0435\u0436\u0438\u043c\u0430 Legacy BIOS \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 System Management Interrupt (SMI) \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0440\u0435\u0436\u0438\u043c\u0430 Legacy BIOS \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.lenovo.com/us/en/product_security/LEN-77639\nhttps://vuldb.com/?id.198432",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,7)"
}
BDU:2022-02970 (CVE-2021-4211)
Vulnerability from fstec – Published: 2022-05-17 – Updated: 2022-05-17 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость функции обратного вызова обработчика System Management Interrupt (SMI) драйвера журнала событий SMBIOS рабочих станций Lenovo ThinkStation, компьютеров Lenovo ThinkEdge и Lenovo Desktop, позволяющая нарушителю выполнить произвольный код с повышенными привилегиями
Summary
Уязвимость функции обратного вызова обработчика System Management Interrupt (SMI) драйвера журнала событий SMBIOS рабочих станций Lenovo ThinkStation, компьютеров Lenovo ThinkEdge и Lenovo Desktop связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код с повышенными привилегиями
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Resource manipulation
Incidents
Being clarified
Remediation
Software update
CWE
- CWE-20 - Недостаточная проверка вводимых данных
Aliases
References
Impacted products
72 products
from 1 vendor
Vendors
Lenovo Group Limited
Products
IdeaCentre 5-14ACN6, IdeaCentre 5-14IOB6, IdeaCentre AIO 3-22ADA6, IdeaCentre AIO 3-22IIL5, IdeaCentre AIO 3-22ITL6, IdeaCentre AIO 3-24ADA6, IdeaCentre AIO 3-24ALC6, IdeaCentre AIO 3-24IIL5, IdeaCentre AIO 3-24ITL6, IdeaCentre AIO 3-27ITL6, IdeaCentre Creator 5-14IOB6, IdeaCentre Gaming 5-14ACN6, IdeaCentre Gaming 5-14IOB6, ThinkCentre M600, ThinkCentre M700 Thin Client (M700 Desktop Tiny), ThinkCentre M700 Desktop Tiny, ThinkCentre M70a, ThinkCentre M710e, ThinkCentre M710q (type 10YC), ThinkCentre M710q, ThinkCentre M710s, ThinkCentre M710t, ThinkCentre M720e, ThinkCentre M75n, ThinkCentre M800, ThinkCentre M810z All-in-One, ThinkCentre M820z All-in-One, ThinkCentre M900, ThinkCentre M900x, ThinkCentre M90a Gen 2, ThinkCentre M910q, ThinkCentre M910s, ThinkCentre M910t, ThinkCentre M910x, QT M410/B415/M415, ThinkCentre E75 t/s, ThinkCentre M610, ThinkCentre M6600q/t/s, ThinkCentre M700q, ThinkCentre M8600t/s, ideacentre AIO 3-22IMB05, ideacentre AIO 3-24IMB05, ideacentre AIO 3-27IMB05, ideacentre 510S-07ICB, ideacentre 510S-07ICK, ideacentre A340-22ICB, IdeaCentre A340-22ICK, ideacentre A340-22IGM, ideacentre A340-24ICB, IdeaCentre A340-24ICK, ideacentre A340-24IGM, ideacentre A540-24ICB, ideacentre A540-27ICB, ideacentre AIO 520-24ARR, Lenovo V30a-22IML, Lenovo V30a-24IML, Lenovo V410z, Lenovo V50t-13IOB G2, Lenovo V520, Lenovo V530-15ICB, Lenovo V530-15ICR, Lenovo V530s-07ICB, Lenovo V530s-07ICR, Lenovo V540-24IWL, YANGTIAN AfQ150, YTA8900f, ThinkEdge SE30, ThinkStation P310, ThinkStation P320 Tiny, ThinkStation P320, ThinkStation P340, ThinkStation P318
Versions
- (IdeaCentre 5-14ACN6), до M3GKT33A (IdeaCentre 5-14IOB6), до O5CKT21A (IdeaCentre AIO 3-22ADA6), до O56JY22USA (IdeaCentre AIO 3-22IIL5), до O5AJY28A (IdeaCentre AIO 3-22ITL6), до O5CKT21A (IdeaCentre AIO 3-24ADA6), - (IdeaCentre AIO 3-24ALC6), до O56JY22USA (IdeaCentre AIO 3-24IIL5), до O5AJY28A (IdeaCentre AIO 3-24ITL6), до O5AJY28A (IdeaCentre AIO 3-27ITL6), до M3GKT33A (IdeaCentre Creator 5-14IOB6), - (IdeaCentre Gaming 5-14ACN6), до M3GKT33A (IdeaCentre Gaming 5-14IOB6), до M00KT66A (ThinkCentre M600), до FWKTBCA (ThinkCentre M700 Thin Client (M700 Desktop Tiny)), до FWKTBCA (ThinkCentre M700 Desktop Tiny), до M2SKT25A (ThinkCentre M70a), до M1ZKT38A (ThinkCentre M710e), до M1AKT52A (ThinkCentre M710q (type 10YC)), до M1AKT52A (ThinkCentre M710q), до M16KT68A (ThinkCentre M710s), до M16KT68A (ThinkCentre M710t), до M30KT26A (ThinkCentre M720e), до M33KT24A (ThinkCentre M75n), до FWKTBCA (ThinkCentre M800), до M1CKT49A (ThinkCentre M810z All-in-One), до M1NKT58A (ThinkCentre M820z All-in-One), до FWKTBCA (ThinkCentre M900), до FWKTBCA (ThinkCentre M900x), до M3LKT22A (ThinkCentre M90a Gen 2), до M1AKT52A (ThinkCentre M910q), до M1AKT52A (ThinkCentre M910s), до M1AKT52A (ThinkCentre M910t), до M1AKT52A (ThinkCentre M910x), до M16KT68A (QT M410/B415/M415), до M16KT68A (ThinkCentre E75 t/s), до M1AKT52A (ThinkCentre M610), до FWKTBBA (ThinkCentre M6600q/t/s), до FWKTBBA (ThinkCentre M700q), до FWKTBBA (ThinkCentre M8600t/s), - (ideacentre AIO 3-22IMB05), - (ideacentre AIO 3-24IMB05), - (ideacentre AIO 3-27IMB05), до M22KT47A (ideacentre 510S-07ICB), до M30KT26A (ideacentre 510S-07ICK), до O44KT32A (ideacentre A340-22ICB), до O4PKT15USA (IdeaCentre A340-22ICK), - (ideacentre A340-22IGM), до O44KT32A (ideacentre A340-24ICB), до O4PKT15USA (IdeaCentre A340-24ICK), - (ideacentre A340-24IGM), до O49KT38A (ideacentre A540-24ICB), до O48KT32A (ideacentre A540-27ICB), - (ideacentre AIO 520-24ARR), до M37KT28A (Lenovo V30a-22IML), до M37KT28A (Lenovo V30a-24IML), до M17KT49A (Lenovo V410z), до M3GKT33A (Lenovo V50t-13IOB G2), до M16KT68A (Lenovo V520), до M1YKT70A (Lenovo V530-15ICB), до M2YKT31A (Lenovo V530-15ICR), до M22KT47A (Lenovo V530s-07ICB), до M30KT26A (Lenovo V530s-07ICR), до M29KT39A (Lenovo V540-24IWL), до FWKTBBA (YANGTIAN AfQ150), до FWKTBBA (YTA8900f), до M3FKT23A (ThinkEdge SE30), до FWKTBBA (ThinkStation P310), до M1AKT52A (ThinkStation P320 Tiny), до S06KT60A (ThinkStation P320), - (ThinkStation P340), до M1AKT52A (ThinkStation P318)
Product types
Firmware
Mitigations
Использование рекомендаций производителя:
https://support.lenovo.com/us/en/product_security/LEN-77639
{
"CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"CVSS 3.0": "AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Lenovo Group Limited",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (IdeaCentre 5-14ACN6), \u0434\u043e M3GKT33A (IdeaCentre 5-14IOB6), \u0434\u043e O5CKT21A (IdeaCentre AIO 3-22ADA6), \u0434\u043e O56JY22USA (IdeaCentre AIO 3-22IIL5), \u0434\u043e O5AJY28A (IdeaCentre AIO 3-22ITL6), \u0434\u043e O5CKT21A (IdeaCentre AIO 3-24ADA6), - (IdeaCentre AIO 3-24ALC6), \u0434\u043e O56JY22USA (IdeaCentre AIO 3-24IIL5), \u0434\u043e O5AJY28A (IdeaCentre AIO 3-24ITL6), \u0434\u043e O5AJY28A (IdeaCentre AIO 3-27ITL6), \u0434\u043e M3GKT33A (IdeaCentre Creator 5-14IOB6), - (IdeaCentre Gaming 5-14ACN6), \u0434\u043e M3GKT33A (IdeaCentre Gaming 5-14IOB6), \u0434\u043e M00KT66A (ThinkCentre M600), \u0434\u043e FWKTBCA (ThinkCentre M700 Thin Client (M700 Desktop Tiny)), \u0434\u043e FWKTBCA (ThinkCentre M700 Desktop Tiny), \u0434\u043e M2SKT25A (ThinkCentre M70a), \u0434\u043e M1ZKT38A (ThinkCentre M710e), \u0434\u043e M1AKT52A (ThinkCentre M710q (type 10YC)), \u0434\u043e M1AKT52A (ThinkCentre M710q), \u0434\u043e M16KT68A (ThinkCentre M710s), \u0434\u043e M16KT68A (ThinkCentre M710t), \u0434\u043e M30KT26A (ThinkCentre M720e), \u0434\u043e M33KT24A (ThinkCentre M75n), \u0434\u043e FWKTBCA (ThinkCentre M800), \u0434\u043e M1CKT49A (ThinkCentre M810z All-in-One), \u0434\u043e M1NKT58A (ThinkCentre M820z All-in-One), \u0434\u043e FWKTBCA (ThinkCentre M900), \u0434\u043e FWKTBCA (ThinkCentre M900x), \u0434\u043e M3LKT22A (ThinkCentre M90a Gen 2), \u0434\u043e M1AKT52A (ThinkCentre M910q), \u0434\u043e M1AKT52A (ThinkCentre M910s), \u0434\u043e M1AKT52A (ThinkCentre M910t), \u0434\u043e M1AKT52A (ThinkCentre M910x), \u0434\u043e M16KT68A (QT M410/B415/M415), \u0434\u043e M16KT68A (ThinkCentre E75 t/s), \u0434\u043e M1AKT52A (ThinkCentre M610), \u0434\u043e FWKTBBA (ThinkCentre M6600q/t/s), \u0434\u043e FWKTBBA (ThinkCentre M700q), \u0434\u043e FWKTBBA (ThinkCentre M8600t/s), - (ideacentre AIO 3-22IMB05), - (ideacentre AIO 3-24IMB05), - (ideacentre AIO 3-27IMB05), \u0434\u043e M22KT47A (ideacentre 510S-07ICB), \u0434\u043e M30KT26A (ideacentre 510S-07ICK), \u0434\u043e O44KT32A (ideacentre A340-22ICB), \u0434\u043e O4PKT15USA (IdeaCentre A340-22ICK), - (ideacentre A340-22IGM), \u0434\u043e O44KT32A (ideacentre A340-24ICB), \u0434\u043e O4PKT15USA (IdeaCentre A340-24ICK), - (ideacentre A340-24IGM), \u0434\u043e O49KT38A (ideacentre A540-24ICB), \u0434\u043e O48KT32A (ideacentre A540-27ICB), - (ideacentre AIO 520-24ARR), \u0434\u043e M37KT28A (Lenovo V30a-22IML), \u0434\u043e M37KT28A (Lenovo V30a-24IML), \u0434\u043e M17KT49A (Lenovo V410z), \u0434\u043e M3GKT33A (Lenovo V50t-13IOB G2), \u0434\u043e M16KT68A (Lenovo V520), \u0434\u043e M1YKT70A (Lenovo V530-15ICB), \u0434\u043e M2YKT31A (Lenovo V530-15ICR), \u0434\u043e M22KT47A (Lenovo V530s-07ICB), \u0434\u043e M30KT26A (Lenovo V530s-07ICR), \u0434\u043e M29KT39A (Lenovo V540-24IWL), \u0434\u043e FWKTBBA (YANGTIAN AfQ150), \u0434\u043e FWKTBBA (YTA8900f), \u0434\u043e M3FKT23A (ThinkEdge SE30), \u0434\u043e FWKTBBA (ThinkStation P310), \u0434\u043e M1AKT52A (ThinkStation P320 Tiny), \u0434\u043e S06KT60A (ThinkStation P320), - (ThinkStation P340), \u0434\u043e M1AKT52A (ThinkStation P318)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://support.lenovo.com/us/en/product_security/LEN-77639",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "24.01.2022",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "17.05.2022",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "17.05.2022",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-02970",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-4211, LEN-77639",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "IdeaCentre 5-14ACN6, IdeaCentre 5-14IOB6, IdeaCentre AIO 3-22ADA6, IdeaCentre AIO 3-22IIL5, IdeaCentre AIO 3-22ITL6, IdeaCentre AIO 3-24ADA6, IdeaCentre AIO 3-24ALC6, IdeaCentre AIO 3-24IIL5, IdeaCentre AIO 3-24ITL6, IdeaCentre AIO 3-27ITL6, IdeaCentre Creator 5-14IOB6, IdeaCentre Gaming 5-14ACN6, IdeaCentre Gaming 5-14IOB6, ThinkCentre M600, ThinkCentre M700 Thin Client (M700 Desktop Tiny), ThinkCentre M700 Desktop Tiny, ThinkCentre M70a, ThinkCentre M710e, ThinkCentre M710q (type 10YC), ThinkCentre M710q, ThinkCentre M710s, ThinkCentre M710t, ThinkCentre M720e, ThinkCentre M75n, ThinkCentre M800, ThinkCentre M810z All-in-One, ThinkCentre M820z All-in-One, ThinkCentre M900, ThinkCentre M900x, ThinkCentre M90a Gen 2, ThinkCentre M910q, ThinkCentre M910s, ThinkCentre M910t, ThinkCentre M910x, QT M410/B415/M415, ThinkCentre E75 t/s, ThinkCentre M610, ThinkCentre M6600q/t/s, ThinkCentre M700q, ThinkCentre M8600t/s, ideacentre AIO 3-22IMB05, ideacentre AIO 3-24IMB05, ideacentre AIO 3-27IMB05, ideacentre 510S-07ICB, ideacentre 510S-07ICK, ideacentre A340-22ICB, IdeaCentre A340-22ICK, ideacentre A340-22IGM, ideacentre A340-24ICB, IdeaCentre A340-24ICK, ideacentre A340-24IGM, ideacentre A540-24ICB, ideacentre A540-27ICB, ideacentre AIO 520-24ARR, Lenovo V30a-22IML, Lenovo V30a-24IML, Lenovo V410z, Lenovo V50t-13IOB G2, Lenovo V520, Lenovo V530-15ICB, Lenovo V530-15ICR, Lenovo V530s-07ICB, Lenovo V530s-07ICR, Lenovo V540-24IWL, YANGTIAN AfQ150, YTA8900f, ThinkEdge SE30, ThinkStation P310, ThinkStation P320 Tiny, ThinkStation P320, ThinkStation P340, ThinkStation P318",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 System Management Interrupt (SMI) \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0436\u0443\u0440\u043d\u0430\u043b\u0430 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 SMBIOS \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439 Lenovo ThinkStation, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 Lenovo ThinkEdge \u0438 Lenovo Desktop, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0432\u044b\u0437\u043e\u0432\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 System Management Interrupt (SMI) \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0436\u0443\u0440\u043d\u0430\u043b\u0430 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 SMBIOS \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439 Lenovo ThinkStation, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 Lenovo ThinkEdge \u0438 Lenovo Desktop \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.lenovo.com/us/en/product_security/LEN-77639\nhttps://vuldb.com/?id.198431",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,7)"
}