CVEvulnerability

CVE-2021-3614

6.8 MEDIUM Published 2021-07-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-07-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-636

Description

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.

Affected configurations

• lenovo ideapad 1-11ada05 firmware fqcn19ww • lenovo ideapad 1-14ada05 firmware fqcn19ww • lenovo v130-15ikb firmware • lenovo 100e 2nd gen firmware • lenovo 300e 2nd gen firmware • lenovo ideapad 730-13iml firmware • lenovo ideapad flex 5-14alc05 firmware • lenovo ideapad flex 5-15alc05 firmware • lenovo ideapad 1-11igl05 firmware • lenovo ideapad 1-14igl05 firmware • lenovo ideapad s940-14iil firmware • lenovo ideapad s940-14iwl firmware • lenovo ideapad slim 1-11ast-05 firmware • lenovo ideapad slim 1-14ast-05 firmware • lenovo v130-15igm firmware • lenovo v330-15ikb firmware • lenovo v330-15isk firmware • lenovo ideapad yoga c940-15irh firmware • lenovo ideapad yoga s730-13iml firmware • lenovo ideapad yoga s940-14iil firmware • lenovo ideapad yoga s940-14iwl firmware

Related

Weakness · CWE (1)

  • CWE-636 Not Failing Securely weakness

References