CVE-2021-3972

🗓️ 22 Apr 2022 21:15:09Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 11 Views

Lenovo Notebook BIOS vulnerability allows secure boot modification

Reporter	Title	Published	Views	Family All 15
GithubExploit	Exploit for Active Debug Code in Lenovo Ideapad_3-14Ada05_Firmware	21 Apr 202210:25	–	githubexploit
Circl	CVE-2021-3972	20 Apr 202203:02	–	circl
CNNVD	Lenovo Notebook 安全漏洞	18 Apr 202200:00	–	cnnvd
CVE	CVE-2021-3972	22 Apr 202220:30	–	cve
Cvelist	CVE-2021-3972	22 Apr 202220:30	–	cvelist
EUVD	EUVD-2021-27177	7 Oct 202500:30	–	euvd
Lenovo	Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US	18 Apr 202215:28	–	lenovo
Malwarebytes	Lenovo issues fixes for laptop backdoors	21 Apr 202215:11	–	malwarebytes
NCSC	Vulnerabilities fixed in Lenovo notebook BIOS	19 Apr 202200:00	–	ncsc
OSV	CVE-2021-3972	22 Apr 202221:15	–	osv

NVD

Node

lenovo ideapad_3-14ada05_firmwareRange<e8cn33ww

AND

lenovo ideapad_3-14ada05Match-

Node

lenovo ideapad_3-14ada6_firmwareRange<hbcn21ww

AND

lenovo ideapad_3-14ada6Match-

Node

lenovo ideapad_3-14alc6_firmwareRange<glcn43ww

AND

lenovo ideapad_3-14alc6Match-

Node

lenovo ideapad_3-14are05_firmwareRange<dzcn42ww

AND

lenovo ideapad_3-14are05Match-

Node

lenovo ideapad_3-15ada6_firmwareRange<hbcn21ww

AND

lenovo ideapad_3-15ada6Match-

Node

lenovo ideapad_3-15alc6_firmwareRange<glcn43ww

AND

lenovo ideapad_3-15alc6Match-

Node

lenovo ideapad_3-15are05_firmwareRange<dzcn42ww

AND

lenovo ideapad_3-15are05Match-

Node

lenovo ideapad_3-15igl05_firmwareRange<dvcn23ww

AND

lenovo ideapad_3-15igl05Match-

Node

lenovo ideapad_3-17ada05_firmwareRange<e8cn33ww

AND

lenovo ideapad_3-17ada05Match-

Node

lenovo ideapad_3-17ada6_firmwareRange<hbcn21ww

AND

lenovo ideapad_3-17ada6Match-

Node

lenovo ideapad_3-17alc6_firmwareRange<glcn43ww

AND

lenovo ideapad_3-17alc6Match-

Node

lenovo ideapad_3-17are05_firmwareRange<dzcn42ww

AND

lenovo ideapad_3-17are05Match-

Node

lenovo ideapad_3-17iil05_firmwareRange<emcn52ww

AND

lenovo ideapad_3-17iil05Match-

Node

lenovo ideapad_3-17itl6_firmwareRange<ggcn33ww

AND

lenovo ideapad_3-17itl6Match-

Node

lenovo ideapad_3-15ada05_firmwareRange<e8cn33ww

AND

lenovo ideapad_3-15ada05Match-

Node

lenovo l3_15iml05_firmwareRange<ejcn27ww

AND

lenovo l3_15iml05Match-

Node

lenovo l3-15itl6_firmwareRange<gfcn23ww

AND

lenovo l3-15itl6Match-

Node

lenovo l340-15irh_firmwareRange<bgcn35ww

AND

lenovo l340-15irhMatch-

Node

lenovo l340-15iwl_firmwareRange<atcn46ww

AND

lenovo l340-15iwlMatch-

Node

lenovo l340-15iwl_touch_firmwareRange<atcn46ww

AND

lenovo l340-15iwl_touchMatch-

Node

lenovo l340-17irh_firmwareRange<bgcn35ww

AND

lenovo l340-17irhMatch-

Node

lenovo l340-17iwl_firmwareRange<atcn46ww

AND

lenovo l340-17iwlMatch-

Node

lenovo legion_5_pro-16ach6_firmwareRange<hhcn25ww

AND

lenovo legion_5_pro-16ach6Match-

Node

lenovo legion_5_pro-16ach6h_firmwareRange<gkcn51ww

AND

lenovo legion_5_pro-16ach6hMatch-

Node

lenovo legion_5_pro-16ith6_firmwareRange<h1cn46ww

AND

lenovo legion_5_pro-16ith6Match-

Node

lenovo legion_5_pro-16ith6h_firmwareRange<h1cn46ww

AND

lenovo legion_5_pro-16ith6hMatch-

Node

lenovo legion_5-15ach6_firmwareRange<hhcn25ww

AND

lenovo legion_5-15ach6Match-

Node

lenovo legion_5-15ach6a_firmwareRange<g9cn28ww

AND

lenovo legion_5-15ach6aMatch-

Node

lenovo legion_5-15ach6h_firmwareRange<gkcn51ww

AND

lenovo legion_5-15ach6hMatch-

Node

lenovo legion_5-15imh6_firmwareRange<g8cn19ww

AND

lenovo legion_5-15imh6Match-

Node

lenovo legion_5-15ith6_firmwareRange<h1cn46ww

AND

lenovo legion_5-15ith6Match-

Node

lenovo legion_5-15ith6h_firmwareRange<h1cn46ww

AND

lenovo legion_5-15ith6hMatch-

Node

lenovo legion_5-17ach6_firmwareRange<hhcn25ww

AND

lenovo legion_5-17ach6Match-

Node

lenovo legion_5-17ach6h_firmwareRange<gkcn51ww

AND

lenovo legion_5-17ach6hMatch-

Node

lenovo legion_5-17ith6_firmwareRange<h1cn46ww

AND

lenovo legion_5-17ith6Match-

Node

lenovo legion_5-17ith6h_firmwareRange<h1cn46ww

AND

lenovo legion_5-17ith6hMatch-

Node

lenovo legion_7-16achg6_firmwareRange<gkcn51ww

AND

lenovo legion_7-16achg6Match-

Node

lenovo legion_7-16ithg6_firmwareRange<gkcn51ww

AND

lenovo legion_7-16ithg6Match-

Node

lenovo legion_s7-15ach6_firmwareRange<hacn35ww

AND

lenovo legion_s7-15ach6Match-

Node

lenovo legion_y540-15irh_firmwareRange<bhcn44ww

AND

lenovo legion_y540-15irhMatch-

Node

lenovo legion_y540-15irh-pg0_firmwareRange<bhcn44ww

AND

lenovo legion_y540-15irh-pg0Match-

Node

lenovo legion_y540-17irh_firmwareRange<bhcn44ww

AND

lenovo legion_y540-17irhMatch-

Node

lenovo legion_y540-17irh-pg0_firmwareRange<bhcn44ww

AND

lenovo legion_y540-17irh-pg0Match-

Node

lenovo legion_y545_firmwareRange<bhcn44ww

AND

lenovo legion_y545Match-

Node

lenovo legion_y545-pg0_firmwareRange<bhcn44ww

AND

lenovo legion_y545-pg0Match-

Node

lenovo legion_y7000-2019_firmwareRange<bhcn44ww

AND

lenovo legion_y7000-2019Match-

Node

lenovo legion_y7000-2019-pg0_firmwareRange<bhcn44ww

AND

lenovo legion_y7000-2019-pg0Match-

Node

lenovo s14_g2_itl_firmwareRange<ggcn33ww

AND

lenovo s14_g2_itlMatch-

Node

lenovo s145-14api_firmwareRange<bucn31ww

AND

lenovo s145-14apiMatch-

Node

lenovo s145-14ast_firmwareRange<aycn26ww

AND

lenovo s145-14astMatch-

Node

lenovo s145-14igm_firmwareRange<awcn28ww

AND

lenovo s145-14igmMatch-

Node

lenovo s145-14iil_firmwareRange<dkcn54ww

AND

lenovo s145-14iilMatch-

Node

lenovo s145-15api_firmwareRange<bucn31ww

AND

lenovo s145-15apiMatch-

Node

lenovo s145-15ast_firmwareRange<aycn26ww

AND

lenovo s145-15astMatch-

Node

lenovo s145-15igm_firmwareRange<awcn28ww

AND

lenovo s145-15igmMatch-

Node

lenovo s145-15iil_firmwareRange<dkcn54ww

AND

lenovo s145-15iilMatch-

Node

lenovo s540-13api_firmwareRange<cxcn34ww

AND

lenovo s540-13apiMatch-

Node

lenovo s540-13iml_firmwareMatch-

AND

lenovo s540-13imlMatch-

Node

lenovo slim_7_pro-14ihu5_firmwareMatch-

AND

lenovo slim_7_pro-14ihu5Match-

Node

lenovo slim_9-14itl05_firmwareMatch-

AND

lenovo slim_9-14itl05Match-

Node

lenovo v14_g1-iml_firmwareRange<dxcn41ww

AND

lenovo v14_g1-imlMatch-

Node

lenovo v14_g2-acl_firmwareRange<glcn43ww

AND

lenovo v14_g2-aclMatch-

Node

lenovo v14_g2-itl_firmwareRange<ggcn33ww

AND

lenovo v14_g2-itlMatch-

Node

lenovo v14-ada_firmwareRange<e8cn33ww

AND

lenovo v14-adaMatch-

Node

lenovo v14-are_firmwareRange<dzcn42ww

AND

lenovo v14-areMatch-

Node

lenovo v14-igl_firmwareRange<dvcn23ww

AND

lenovo v14-iglMatch-

Node

lenovo v14-iil_firmwareRange<dkcn54ww

AND

lenovo v14-iilMatch-

Node

lenovo v140-15iwl_firmwareRange<atcn46ww

AND

lenovo v140-15iwlMatch-

Node

lenovo v15_g1-iml_firmwareRange<dxcn41ww

AND

lenovo v15_g1-imlMatch-

Node

lenovo v15_g2-alc_firmwareRange<glcn43ww

AND

lenovo v15_g2-alcMatch-

Node

lenovo v15_g2-itl_firmwareRange<ggcn33ww

AND

lenovo v15_g2-itlMatch-

Node

lenovo v15-ada_firmwareRange<e8cn33ww

AND

lenovo v15-adaMatch-

Node

lenovo v15-igl_firmwareRange<dvcn23ww

AND

lenovo v15-iglMatch-

Node

lenovo v15-iil_firmwareRange<dkcn54ww

AND

lenovo v15-iilMatch-

Node

lenovo v17_g2-itl_firmwareRange<ggcn33ww

AND

lenovo v17_g2-itlMatch-

Node

lenovo v17-iil_firmwareRange<emcn52ww

AND

lenovo v17-iilMatch-

Node

lenovo v340-17iwl_firmwareRange<atcn46ww

AND

lenovo v340-17iwlMatch-

Node

lenovo yoga_7-14acn6_firmwareRange<h9cn26ww

AND

lenovo yoga_7-14acn6Match-

Node

lenovo yoga_c740-14iml_firmwareRange<bncn44ww

AND

lenovo yoga_c740-14imlMatch-

Node

lenovo yoga_c740-15iml_firmwareRange<bncn44ww

AND

lenovo yoga_c740-15imlMatch-

Node

lenovo yoga_c940-14iil_firmwareMatch-

AND

lenovo yoga_c940-14iilMatch-

Node

lenovo yoga_slim_7_pro-14ach5_d_firmwareRange<hecn24ww

AND

lenovo yoga_slim_7_pro-14ach5_dMatch-

Node

lenovo yoga_slim_7_pro-14ach5_firmwareRange<gzcn27ww

AND

lenovo yoga_slim_7_pro-14ach5Match-

Node

lenovo yoga_slim_7_pro-14ach5_o_firmwareRange<gzcn27ww

AND

lenovo yoga_slim_7_pro-14ach5_oMatch-

Node

lenovo yoga_slim_7_pro-14ach5_od_firmwareRange<hecn24ww

AND

lenovo yoga_slim_7_pro-14ach5_odMatch-

Node

lenovo yoga_slim_7_pro-14arh5_firmwareRange<g7cn21ww

AND

lenovo yoga_slim_7_pro-14arh5Match-

Node

lenovo yoga_slim_7_pro-14ihu5_firmwareMatch-

AND

lenovo yoga_slim_7_pro-14ihu5Match-

Node

lenovo yoga_slim_7_pro-14ihu5_o_firmwareMatch-

AND

lenovo yoga_slim_7_pro-14ihu5_oMatch-

Node

lenovo yoga_slim_7_pro-14itl5_firmwareMatch-

AND

lenovo yoga_slim_7_pro-14itl5Match-

Node

lenovo yoga_slim_9-14itl05_firmwareMatch-

AND

lenovo yoga_slim_9-14itl05Match-

Node

lenovo ideapad_3-14iil05_firmwareRange<dvcn23ww

AND

lenovo ideapad_3-14iil05Match-

Node

lenovo ideapad_3-14igl05_firmwareRange<emcn52ww

AND

lenovo ideapad_3-14igl05Match-

Node

lenovo ideapad_3-14iml05_firmwareRange<dxcn41ww

AND

lenovo ideapad_3-14iml05Match-

Node

lenovo ideapad_3-14itl05_firmwareRange<gccn26ww

AND

lenovo ideapad_3-14itl05Match-

Node

lenovo ideapad_3-14itl6_firmwareRange<ggcn33ww

AND

lenovo ideapad_3-14itl6Match-

Node

lenovo ideapad_3-15iil05_firmwareRange<emcn52ww

AND

lenovo ideapad_3-15iil05Match-

Node

lenovo ideapad_3-15iml05_firmwareRange<dxcn41ww

AND

lenovo ideapad_3-15iml05Match-

Node

lenovo ideapad_3-15itl05_firmwareRange<gccn26ww

AND

lenovo ideapad_3-15itl05Match-

Node

lenovo ideapad_3-15itl6_firmwareRange<ggcn33ww

AND

lenovo ideapad_3-15itl6Match-

Node

lenovo ideapad_3-17iml05_firmwareRange<dxcn41ww

AND

lenovo ideapad_3-17iml05Match-

Node

lenovo ideapad_5-15are05_firmwareRange<e7cn44ww

AND

lenovo ideapad_5-15are05Match-

Node

lenovo ideapad_5-15iil05_firmwareRange<dpcn54ww

AND

lenovo ideapad_5-15iil05Match-

Node

lenovo ideapad_creator_5-15imh05_firmwareRange<egcn36ww

AND

lenovo ideapad_creator_5-15imh05Match-

Node

lenovo ideapad_gaming_3-15arh05_firmwareRange<fccn17ww

AND

lenovo ideapad_gaming_3-15arh05Match-

Node

lenovo ideapad_gaming_3-15imh05_firmwareRange<egcn36ww

AND

lenovo ideapad_gaming_3-15imh05Match-

Source	Link
support	www.support.lenovo.com/us/en/product_security/LEN-73440

21 Nov 2024 06:23Current

CVSS 24.6

CVSS 3.16.7

EPSS0.03212

potential vulnerability lenovo notebook bios secure boot nvram variable attacker elevated privileges