CVEvulnerability

CVE-2021-3453

4.6 MEDIUM Published 2021-07-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-07-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-693

Description

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.

Affected configurations

• lenovo thinkpad helix firmware n17etb4w • lenovo thinkpad t550 firmware n11et53w • lenovo thinkpad w550s firmware n11et53w • lenovo thinkpad x1 carbon 3rd gen firmware n14et55w • lenovo thinkpad x250 firmware n10et62w • lenovo thinkpad yoga 15 firmware n19et65w • lenovo 730s-13iml firmware • lenovo ideapad 1-11igl05 firmware • lenovo ideapad 1-14igl05 firmware • lenovo ideapad s940-14iil firmware • lenovo ideapad s940-14iwl firmware • lenovo ideapad slim 1-11ast-05 firmware • lenovo ideapad slim 1-14ast-05 firmware • lenovo v130-15igm firmware • lenovo v330-15ikb firmware • lenovo v330-15isk firmware • lenovo yoga s730-13iml firmware • lenovo yoga s940-14iil firmware • lenovo yoga s940-14iwl firmware • lenovo ideacentre aio 5-24imb05 firmware (< 2021-09-30) • lenovo ideacentre aio 5-74imb05 firmware (< 2021-09-30)

Related

Weakness · CWE (1)

  • CWE-693 Protection Mechanism Failure weakness

References