CVEvulnerability

CVE-2021-3718

4.6 MEDIUM Published 2021-11-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-11-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.7 MEDIUM — AV:L/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-232

Description

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.

Affected configurations

• lenovo thinkpad 11e 3rd gen firmware (<= 1.22) • lenovo thinkpad 11e 3rd gen firmware (<= 1.29) • lenovo thinkpad 11e 4th gen i3 firmware (<= 1.22) • lenovo thinkpad 11e 4th gen i7 firmware (<= 1.22) • lenovo thinkpad 11e 4th gen i5 firmware (<= 1.22) • lenovo thinkpad 11e 4th gen celeron firmware (<= 1.27) • lenovo thinkpad 11e yoga gen 6 firmware (<= 1.12) • lenovo thinkpad 13 gen 2 firmware (<= 1.29) • lenovo thinkpad e490 firmware (<= 1.30) • lenovo thinkpad e490s firmware (<= 1.30) • lenovo thinkpad e590 firmware (<= 1.30) • lenovo thinkpad l13 firmware (<= 1.31) • lenovo thinkpad l13 gen 2 firmware (<= 1.11) • lenovo thinkpad l13 gen 2 firmware (<= 1.08) • lenovo thinkpad l13 yoga firmware (<= 1.31) • lenovo thinkpad l13 yoga gen 2 firmware (<= 1.11) • lenovo thinkpad l13 yoga gen 2 firmware (<= 1.08) • lenovo thinkpad l14 gen 1 firmware (< 1.15) • lenovo thinkpad l14 firmware (< 1.20.1.17) • lenovo thinkpad l15 gen 1 firmware (< 1.15) • lenovo thinkpad l15 firmware (< 1.20.1.17) • lenovo thinkpad l380 firmware (<= 1.26) • lenovo thinkpad l380 yoga firmware (<= 1.26) • lenovo thinkpad l390 yoga firmware (<= 1.35) • lenovo thinkpad l390 firmware (<= 1.35) • lenovo thinkpad l490 firmware (< 1.26) • lenovo thinkpad l590 firmware (< 1.26) • lenovo thinkpad p43s firmware (< n2iet96w) • lenovo thinkpad p52 firmware (< n2cet60w) • lenovo thinkpad p53s firmware (< n2iet96w) • lenovo thinkpad p72 firmware (< n2cet60w) • lenovo thinkpad s5 2nd gen firmware (<= 1.28) • lenovo thinkpad t460 firmware (<= 1.43.1.11) • lenovo thinkpad t490 firmware (< n2iet96w) • lenovo thinkpad t590 firmware (< n2iet96w) • lenovo thinkpad s2 gen 6 firmware (<= 2021-09-30) • lenovo thinkpad s2 yoga gen 6 firmware (<= 2021-09-30) • lenovo thinkpad x12 detachable gen 1 firmware (< 1.16) • lenovo thinkpad x260 firmware (<= 1.47\/1.15) • lenovo thinkpad x380 yoga firmware (<= 1.34) • lenovo thinkpad x390 yoga firmware (< n2let87w) • lenovo thinkpad 11e 5th gen firmware (<= 1.13)

Related

Weakness · CWE (1)

  • CWE-232 Improper Handling of Undefined Values weakness

References