CVE-2021-3786

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Nov 12, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-378606.1Mattermost 5.38 and earlier fails to sufficiently sanitize clipboard contents, which allows a user-assisted attacker to inject arbitrary web CVE-2021-378617.5Mattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when user creation fails.CVE-2021-378625.4Mattermost 6.0 and earlier fails to sufficiently validate the email address during registration, which allows attackers to trick users into CVE-2021-378635.7Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a c CVE-2021-378646.5Mattermost 6.1 and earlier fails to sufficiently validate permissions while viewing archived channels, which allows authenticated users to v CVE-2021-378655.7Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which al CVE-2021-378667.5Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows CVE-2021-378674.3Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, which allows authenti CVE-2021-37877.8A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the M CVE-2021-37886.8An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access u CVE-2021-37894.6An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with phys CVE-2021-37906.5A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated