CVE-2021-3453

🗓️ 16 Jul 2021 20:30:17Reported by lenovoType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 81 Views

Some Lenovo systems BIOS modules unprotected by Intel Boot Guard, allowing attacker to write to SPI flash storage

Reporter	Title	Published	Views	Family All 8
CNNVD	多款 Lenovo 设备安全漏洞	13 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-3453	16 Jul 202120:30	–	cvelist
EUVD	EUVD-2021-26776	7 Oct 202500:30	–	euvd
Lenovo	Lenovo BIOS Vulnerabilities (July 2021) - Lenovo Support US	13 Jul 202117:34	–	lenovo
NVD	CVE-2021-3453	16 Jul 202121:15	–	nvd
Prion	Code injection	16 Jul 202121:15	–	prion
RedhatCVE	CVE-2021-3453	22 May 202519:51	–	redhatcve
Vulnrichment	CVE-2021-3453	16 Jul 202120:30	–	vulnrichment

NVD

Vulners

Node

lenovo thinkpad_helix_firmwareMatchn17etb4w

AND

lenovo thinkpad_helixMatch-

Node

lenovo thinkpad_t550_firmwareMatchn11et53w

AND

lenovo thinkpad_t550Match-

Node

lenovo thinkpad_w550s_firmwareMatchn11et53w

AND

lenovo thinkpad_w550sMatch-

Node

lenovo thinkpad_x1_carbon_3rd_gen_firmwareMatchn14et55w

AND

lenovo thinkpad_x1_carbon_3rd_genMatch-

Node

lenovo thinkpad_x250_firmwareMatchn10et62w

AND

lenovo thinkpad_x250Match-

Node

lenovo thinkpad_yoga_15_firmwareMatchn19et65w

AND

lenovo thinkpad_yoga_15Match-

Node

lenovo 730s-13iml_firmwareMatch-

AND

lenovo 730s-13imlMatch-

Node

lenovo ideapad_1-11igl05_firmwareMatch-

AND

lenovo ideapad_1-11igl05Match-

Node

lenovo ideapad_1-14igl05_firmwareMatch-

AND

lenovo ideapad_1-14igl05Match-

Node

lenovo ideapad_s940-14iil_firmwareMatch-

AND

lenovo ideapad_s940-14iilMatch-

Node

lenovo ideapad_s940-14iwl_firmwareMatch-

AND

lenovo ideapad_s940-14iwlMatch-

Node

lenovo ideapad_slim_1-11ast-05_firmwareMatch-

AND

lenovo ideapad_slim_1-11ast-05Match-

Node

lenovo ideapad_slim_1-14ast-05_firmwareMatch-

AND

lenovo ideapad_slim_1-14ast-05Match-

Node

lenovo v130-15igm_firmwareMatch-

AND

lenovo v130-15igmMatch-

Node

lenovo v330-15ikb_firmwareMatch-

AND

lenovo v330-15ikbMatch-

Node

lenovo v330-15isk_firmwareMatch-

AND

lenovo v330-15iskMatch-

Node

lenovo yoga_s730-13iml_firmwareMatch-

AND

lenovo yoga_s730-13imlMatch-

Node

lenovo yoga_s940-14iil_firmwareMatch-

AND

lenovo yoga_s940-14iilMatch-

Node

lenovo yoga_s940-14iwl_firmwareMatch-

AND

lenovo yoga_s940-14iwlMatch-

Node

lenovo ideacentre_aio_5-24imb05_firmwareRange<2021-09-30

AND

lenovo ideacentre_aio_5-24imb05Match-

Node

lenovo ideacentre_aio_5-74imb05_firmwareRange<2021-09-30

AND

lenovo ideacentre_aio_5-74imb05Match-

[
  {
    "product": "BIOS",
    "vendor": "Lenovo",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Source	Link
support	www.support.lenovo.com/us/en/product_security/LEN-65529

21 Nov 2024 06:21Current

5Medium risk

Vulners AI Score5

CVSS 22.1

CVSS 3.14.6 - 6.8

EPSS0.00048

SSVC

CWE-693