CVEvulnerability

CVE-2021-3519

6.8 MEDIUM Published 2021-11-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-11-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.

Affected configurations

• lenovo ideacentre c5-14mb05 firmware (< o4hkt33a) • lenovo ideacentre 3-07imb05 firmware (< m2vkt18a) • lenovo ideacentre 5-14imb05 firmware (< o4hkt33a) • lenovo ideacentre 5-14iob6 firmware (< m3gkt29a) • lenovo ideacentre creator 5-14iob6 firmware (< m3gkt29a) • lenovo ideacentre g5-14imb05 firmware (< o4hkt33a) • lenovo ideacentre gaming 5-14iob6 firmware (< m3gkt29a) • lenovo thinkcentre m60e tiny firmware (< m3skt1ea) • lenovo thinkcentre m630e firmware (< m28kt36a) • lenovo thinkcentre m70a firmware (<= m2skt21a) • lenovo thinkcentre m70s firmware (< m2tkt3ca) • lenovo thinkcentre m70t firmware (< m2tkt3ca) • lenovo thinkcentre m710e firmware (< m1zkt37a) • lenovo thinkcentre m710s firmware (< m16kt67a) • lenovo thinkcentre m710t firmware (< m16kt67a) • lenovo thinkcentre m720e firmware (< m30kt23a) • lenovo thinkcentre m75n firmware (< m33kt21a) • lenovo thinkcentre m75s gen 2 firmware (< m3bkt24a) • lenovo thinkcentre m70a gen 2 firmware (< m3nkt17a) • lenovo thinkcentre m70c firmware (< m2vkt18a) • lenovo thinkcentre m70q firmware (< m2wkt49a) • lenovo thinkcentre m75s gen 2 firmware (< m3akt35a) • lenovo thinkcentre m75t gen 2 firmware (< m3bkt24a) • lenovo thinkcentre m75t gen 2 firmware (< m3akt35a) • lenovo thinkcentre m80q firmware (< m2wkt49a) • lenovo thinkcentre m80s firmware (< m2tkt3ca) • lenovo thinkcentre m80t firmware (< m2tkt3ca) • lenovo thinkcentre m810z firmware (< m1ckt47a) • lenovo thinkcentre m820z firmware (< m1nkt57a) • lenovo thinkcentre m90a firmware (< m2rkt47a) • lenovo thinkcentre m90q tiny firmware (< m2wkt49a) • lenovo thinkcentre m90s firmware (< m2tkt3ca) • lenovo thinkcentre m90t firmware (< m2tkt3ca) • lenovo thinkcentre qt m410 firmware (< m16kt67a) • lenovo thinkcentre qt b415 firmware (< m16kt67a) • lenovo thinkcentre qt m415 firmware (< m16kt67a) • lenovo thinkcentre e75 t\/s firmware (< m16kt67a) • lenovo ideacentre 310s-08igm firmware (<= m1tkt31a) • lenovo ideacentre 510a-15arr firmware (<= o4dkt41a) • lenovo ideacentre 510s-07icb firmware (< m22kt46a) • lenovo ideacentre 510s-07ick firmware (< m30kt24a) • lenovo ideacentre 510s-07ick firmware (< m30kt23a) • lenovo v30a-22iml firmware (< m37kt26a) • lenovo v330 firmware (<= m1tkt32a) • lenovo v50a-24imb firmware (< m36kt27a) • lenovo v50s-07imb firmware (< m2vkt18a) • lenovo v50a-22imb firmware (< m36kt27a) • lenovo v50t-13imb firmware (< o4hkt33a) • lenovo v50t-13imb g2 firmware (< m3gkt29a) • lenovo v520 firmware (< m16kt67a) • lenovo v520s firmware (< m16kt67a) • lenovo v530-15arr firmware (<= o4dkt41a) • lenovo v530-15icr firmware (< m2ykt29a) • lenovo v530s-07icb firmware (< m30kt23a) • lenovo v530s-07icr firmware (< m30kt23a) • lenovo v55t-15api firmware (<= o4dkt41a) • lenovo thinkstation p340 tiny firmware (< m2wkt49a) • lenovo thinkstation p340 firmware (< s08kt3fa) • lenovo thinkstation p520 firmware (<= s03kt49a) • lenovo thinkstation p520c firmware (<= s03kt49a) … and 2 more

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References