Skip to content
Fencer Vulns
medium 6.7

CVE-2021-3970 json

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an att…

published 2022-04-22 4 y ago modified 2026-06-17 4 mo ago also EUVD-2021-27175

cvss
6.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.3%
EPSS 1.3% chance of exploitation in 30 days, percentile 69%
public exploits
0
none known

Summary

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.

Patch / fix

  • lenovo ideapad_3-14ada05_firmware e8cn33ww
  • lenovo ideapad_3-14ada6_firmware hbcn21ww
  • lenovo ideapad_3-14alc6_firmware glcn43ww
  • lenovo ideapad_3-14are05_firmware dzcn42ww
  • lenovo ideapad_3-15ada6_firmware hbcn21ww
  • lenovo ideapad_3-15alc6_firmware glcn43ww
  • lenovo ideapad_3-15are05_firmware dzcn42ww
  • lenovo ideapad_3-15igl05_firmware dvcn23ww
  • lenovo ideapad_3-17ada05_firmware e8cn33ww
  • lenovo ideapad_3-17ada6_firmware hbcn21ww
  • lenovo ideapad_3-17alc6_firmware glcn43ww
  • lenovo ideapad_3-17are05_firmware dzcn42ww
  • lenovo ideapad_3-17iil05_firmware emcn52ww
  • lenovo ideapad_3-17itl6_firmware ggcn33ww
  • lenovo ideapad_3-15ada05_firmware e8cn33ww
  • lenovo l3_15iml05_firmware ejcn27ww
  • lenovo l3-15itl6_firmware gfcn23ww
  • lenovo l340-15irh_firmware bgcn35ww
  • lenovo l340-15iwl_firmware atcn46ww
  • lenovo l340-15iwl_touch_firmware atcn46ww

Exploit prediction

1.26% chance of exploitation in the next 30 days, higher than 69% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

  • Lenovo Notebook BIOS

Classification

Weakness
  • CWE-20 Improper Input Validation

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.