Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-3614

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.

Published

2021-07-16T21:15:10.820

Last Modified

2024-11-21T06:21:59.070

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.4 (MEDIUM)

CVSSv2 Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.4

Impact Score

6.4

Weaknesses
  • Type: Secondary
    CWE-636
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lenovo ideapad_1-11ada05_firmware fqcn19ww Yes
Hardware lenovo ideapad_1-11ada05 - No
Operating System lenovo ideapad_1-14ada05_firmware fqcn19ww Yes
Hardware lenovo ideapad_1-14ada05 - No
Operating System lenovo v130-15ikb_firmware - Yes
Hardware lenovo v130-15ikb - No
Operating System lenovo 100e_2nd_gen_firmware - Yes
Hardware lenovo 100e_2nd_gen - No
Operating System lenovo 300e_2nd_gen_firmware - Yes
Hardware lenovo 300e_2nd_gen - No
Operating System lenovo ideapad_730-13iml_firmware - Yes
Hardware lenovo ideapad_730-13iml - No
Operating System lenovo ideapad_flex_5-14alc05_firmware - Yes
Hardware lenovo ideapad_flex_5-14alc05 - No
Operating System lenovo ideapad_flex_5-15alc05_firmware - Yes
Hardware lenovo ideapad_flex_5-15alc05 - No
Operating System lenovo ideapad_1-11igl05_firmware - Yes
Hardware lenovo ideapad_1-11igl05 - No
Operating System lenovo ideapad_1-14igl05_firmware - Yes
Hardware lenovo ideapad_1-14igl05 - No
Operating System lenovo ideapad_s940-14iil_firmware - Yes
Hardware lenovo ideapad_s940-14iil - No
Operating System lenovo ideapad_s940-14iwl_firmware - Yes
Hardware lenovo ideapad_s940-14iwl - No
Operating System lenovo ideapad_slim_1-11ast-05_firmware - Yes
Hardware lenovo ideapad_slim_1-11ast-05 - No
Operating System lenovo ideapad_slim_1-14ast-05_firmware - Yes
Hardware lenovo ideapad_slim_1-14ast-05 - No
Operating System lenovo v130-15igm_firmware - Yes
Hardware lenovo v130-15igm - No
Operating System lenovo v130-15ikb_firmware - Yes
Hardware lenovo v130-15ikb - No
Operating System lenovo v330-15ikb_firmware - Yes
Hardware lenovo v330-15ikb - No
Operating System lenovo v330-15isk_firmware - Yes
Hardware lenovo v330-15isk - No
Operating System lenovo ideapad_yoga_c940-15irh_firmware - Yes
Hardware lenovo ideapad_yoga_c940-15irh - No
Operating System lenovo ideapad_yoga_s730-13iml_firmware - Yes
Hardware lenovo ideapad_yoga_s730-13iml - No
Operating System lenovo ideapad_yoga_s940-14iil_firmware - Yes
Hardware lenovo ideapad_yoga_s940-14iil - No
Operating System lenovo ideapad_yoga_s940-14iwl_firmware - Yes
Hardware lenovo ideapad_yoga_s940-14iwl - No
References