Lucene search

LenovoCVE-2021-3614

HistoryJul 16, 2021 - 9:15 p.m.

CVE-2021-3614

2021-07-1621:15:10

CWE-636

lenovo

web.nvd.nist.gov

cve-2021-3614

lenovo

notebook

bios

vulnerability

privilege elevation

security

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

30.6%

JSON

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.

Affected configurations

Nvd

Node

lenovoideapad_1-11ada05_firmwareMatchfqcn19ww

AND

lenovoideapad_1-11ada05Match-

Node

lenovoideapad_1-14ada05_firmwareMatchfqcn19ww

AND

lenovoideapad_1-14ada05Match-

Node

lenovov130-15ikb_firmwareMatch-

AND

lenovov130-15ikbMatch-

Node

lenovo100e_2nd_gen_firmwareMatch-

AND

lenovo100e_2nd_genMatch-

Node

lenovo300e_2nd_gen_firmwareMatch-

AND

lenovo300e_2nd_genMatch-

Node

lenovoideapad_730-13iml_firmwareMatch-

AND

lenovoideapad_730-13imlMatch-

Node

lenovoideapad_flex_5-14alc05_firmwareMatch-

AND

lenovoideapad_flex_5-14alc05Match-

Node

lenovoideapad_flex_5-15alc05_firmwareMatch-

AND

lenovoideapad_flex_5-15alc05Match-

Node

lenovoideapad_1-11igl05_firmwareMatch-

AND

lenovoideapad_1-11igl05Match-

Node

lenovoideapad_1-14igl05_firmwareMatch-

AND

lenovoideapad_1-14igl05Match-

Node

lenovoideapad_s940-14iil_firmwareMatch-

AND

lenovoideapad_s940-14iilMatch-

Node

lenovoideapad_s940-14iwl_firmwareMatch-

AND

lenovoideapad_s940-14iwlMatch-

Node

lenovoideapad_slim_1-11ast-05_firmwareMatch-

AND

lenovoideapad_slim_1-11ast-05Match-

Node

lenovoideapad_slim_1-14ast-05_firmwareMatch-

AND

lenovoideapad_slim_1-14ast-05Match-

Node

lenovov130-15igm_firmwareMatch-

AND

lenovov130-15igmMatch-

Node

lenovov130-15ikb_firmwareMatch-

AND

lenovov130-15ikbMatch-

Node

lenovov330-15ikb_firmwareMatch-

AND

lenovov330-15ikbMatch-

Node

lenovov330-15isk_firmwareMatch-

AND

lenovov330-15iskMatch-

Node

lenovoideapad_yoga_c940-15irh_firmwareMatch-

AND

lenovoideapad_yoga_c940-15irhMatch-

Node

lenovoideapad_yoga_s730-13iml_firmwareMatch-

AND

lenovoideapad_yoga_s730-13imlMatch-

Node

lenovoideapad_yoga_s940-14iil_firmwareMatch-

AND

lenovoideapad_yoga_s940-14iilMatch-

Node

lenovoideapad_yoga_s940-14iwl_firmwareMatch-

AND

lenovoideapad_yoga_s940-14iwlMatch-

VendorProductVersionCPE
lenovoideapad_1-11ada05_firmwarefqcn19wwcpe:2.3:o:lenovo:ideapad_1-11ada05_firmware:fqcn19ww:*:*:*:*:*:*:*
lenovoideapad_1-11ada05-cpe:2.3:h:lenovo:ideapad_1-11ada05:-:*:*:*:*:*:*:*
lenovoideapad_1-14ada05_firmwarefqcn19wwcpe:2.3:o:lenovo:ideapad_1-14ada05_firmware:fqcn19ww:*:*:*:*:*:*:*
lenovoideapad_1-14ada05-cpe:2.3:h:lenovo:ideapad_1-14ada05:-:*:*:*:*:*:*:*
lenovov130-15ikb_firmware-cpe:2.3:o:lenovo:v130-15ikb_firmware:-:*:*:*:*:*:*:*
lenovov130-15ikb-cpe:2.3:h:lenovo:v130-15ikb:-:*:*:*:*:*:*:*
lenovo100e_2nd_gen_firmware-cpe:2.3:o:lenovo:100e_2nd_gen_firmware:-:*:*:*:*:*:*:*
lenovo100e_2nd_gen-cpe:2.3:h:lenovo:100e_2nd_gen:-:*:*:*:*:*:*:*
lenovo300e_2nd_gen_firmware-cpe:2.3:o:lenovo:300e_2nd_gen_firmware:-:*:*:*:*:*:*:*
lenovo300e_2nd_gen-cpe:2.3:h:lenovo:300e_2nd_gen:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lenovo	ideapad_1-11ada05_firmware	fqcn19ww	cpe:2.3:o:lenovo:ideapad_1-11ada05_firmware:fqcn19ww:::::::*
lenovo	ideapad_1-11ada05	-	cpe:2.3:h:lenovo:ideapad_1-11ada05:-:::::::*
lenovo	ideapad_1-14ada05_firmware	fqcn19ww	cpe:2.3:o:lenovo:ideapad_1-14ada05_firmware:fqcn19ww:::::::*
lenovo	ideapad_1-14ada05	-	cpe:2.3:h:lenovo:ideapad_1-14ada05:-:::::::*
lenovo	v130-15ikb_firmware	-	cpe:2.3:o:lenovo:v130-15ikb_firmware:-:::::::*
lenovo	v130-15ikb	-	cpe:2.3:h:lenovo:v130-15ikb:-:::::::*
lenovo	100e_2nd_gen_firmware	-	cpe:2.3:o:lenovo:100e_2nd_gen_firmware:-:::::::*
lenovo	100e_2nd_gen	-	cpe:2.3:h:lenovo:100e_2nd_gen:-:::::::*
lenovo	300e_2nd_gen_firmware	-	cpe:2.3:o:lenovo:300e_2nd_gen_firmware:-:::::::*
lenovo	300e_2nd_gen	-	cpe:2.3:h:lenovo:300e_2nd_gen:-:::::::*

Rows per page:

1-10 of 421

CNA Affected

[
  {
    "product": "Notebook BIOS",
    "vendor": "Lenovo",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-65529

Social References

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

30.6%

JSON

Related for CVE-2021-3614