CVE-2021-3614 | Severity.io

Description

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.

Related CPE's

ideapad_1-11ada05_firmware

Vulnerable

ideapad_1-11ada05

ideapad_1-14ada05_firmware

Vulnerable

ideapad_1-14ada05

o

lenovo

v130-15ikb_firmware

2

h

lenovo

v130-15ikb

2

100e_2nd_gen_firmware

Vulnerable

300e_2nd_gen_firmware

Vulnerable

ideapad_730-13iml_firmware

Vulnerable

ideapad_730-13iml

ideapad_flex_5-14alc05_firmware

Vulnerable

ideapad_flex_5-14alc05

ideapad_flex_5-15alc05_firmware

Vulnerable

ideapad_flex_5-15alc05

ideapad_1-11igl05_firmware

Vulnerable

ideapad_1-11igl05

ideapad_1-14igl05_firmware

Vulnerable

ideapad_1-14igl05

ideapad_s940-14iil_firmware

Vulnerable

ideapad_s940-14iil

ideapad_s940-14iwl_firmware

Vulnerable

ideapad_s940-14iwl

ideapad_slim_1-11ast-05_firmware

Vulnerable

ideapad_slim_1-11ast-05

ideapad_slim_1-14ast-05_firmware

Vulnerable

ideapad_slim_1-14ast-05

v130-15igm_firmware

Vulnerable

v330-15ikb_firmware

Vulnerable

v330-15isk_firmware

Vulnerable

ideapad_yoga_c940-15irh_firmware

Vulnerable

ideapad_yoga_c940-15irh

ideapad_yoga_s730-13iml_firmware

Vulnerable

ideapad_yoga_s730-13iml

ideapad_yoga_s940-14iil_firmware

Vulnerable

ideapad_yoga_s940-14iil

ideapad_yoga_s940-14iwl_firmware

Vulnerable

ideapad_yoga_s940-14iwl

References

https://support.lenovo.com/us/en/product_security/LEN-65529

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-65529

Vendor Advisory

Weaknesses

[email protected]

Secondary

CWE-636

[email protected]

Primary

NVD-CWE-noinfo

CVSS impact metrics

CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

6.4 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2021-07-16T21:15:10.820Z

5 years ago

Last modified

2026-06-17T04:05:26.603Z

2 months ago