Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-3971

A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable.

Published

2022-04-22T21:15:09.817

Last Modified

2024-11-21T06:23:15.993

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

6.4

Weaknesses
  • Type: Secondary
    CWE-489
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lenovo ideapad_3-14ada05_firmware < e8cn33ww Yes
Hardware lenovo ideapad_3-14ada05 - No
Operating System lenovo ideapad_3-14ada6_firmware < hbcn21ww Yes
Hardware lenovo ideapad_3-14ada6 - No
Operating System lenovo ideapad_3-14alc6_firmware < glcn43ww Yes
Hardware lenovo ideapad_3-14alc6 - No
Operating System lenovo ideapad_3-14are05_firmware < dzcn42ww Yes
Hardware lenovo ideapad_3-14are05 - No
Operating System lenovo ideapad_3-15ada6_firmware < hbcn21ww Yes
Hardware lenovo ideapad_3-15ada6 - No
Operating System lenovo ideapad_3-15alc6_firmware < glcn43ww Yes
Hardware lenovo ideapad_3-15alc6 - No
Operating System lenovo ideapad_3-15are05_firmware < dzcn42ww Yes
Hardware lenovo ideapad_3-15are05 - No
Operating System lenovo ideapad_3-15igl05_firmware < dvcn23ww Yes
Hardware lenovo ideapad_3-15igl05 - No
Operating System lenovo ideapad_3-17ada05_firmware < e8cn33ww Yes
Hardware lenovo ideapad_3-17ada05 - No
Operating System lenovo ideapad_3-17ada6_firmware < hbcn21ww Yes
Hardware lenovo ideapad_3-17ada6 - No
Operating System lenovo ideapad_3-17alc6_firmware < glcn43ww Yes
Hardware lenovo ideapad_3-17alc6 - No
Operating System lenovo ideapad_3-17are05_firmware < dzcn42ww Yes
Hardware lenovo ideapad_3-17are05 - No
Operating System lenovo ideapad_3-17iil05_firmware < emcn52ww Yes
Hardware lenovo ideapad_3-17iil05 - No
Operating System lenovo ideapad_3-15ada05_firmware < e8cn33ww Yes
Hardware lenovo ideapad_3-15ada05 - No
Operating System lenovo l3-15itl6_firmware < gfcn23ww Yes
Hardware lenovo l3-15itl6 - No
Operating System lenovo l340-15irh_firmware < bgcn35ww Yes
Hardware lenovo l340-15irh - No
Operating System lenovo l340-15iwl_firmware < atcn46ww Yes
Hardware lenovo l340-15iwl - No
Operating System lenovo l340-15iwl_touch_firmware < atcn46ww Yes
Hardware lenovo l340-15iwl_touch - No
Operating System lenovo l340-17irh_firmware < bgcn35ww Yes
Hardware lenovo l340-17irh - No
Operating System lenovo l340-17iwl_firmware < atcn46ww Yes
Hardware lenovo l340-17iwl - No
Operating System lenovo legion_5_pro-16ach6_firmware < hhcn25ww Yes
Hardware lenovo legion_5_pro-16ach6 - No
Operating System lenovo legion_5_pro-16ach6h_firmware < gkcn51ww Yes
Hardware lenovo legion_5_pro-16ach6h - No
Operating System lenovo legion_5_pro-16ith6_firmware < h1cn46ww Yes
Hardware lenovo legion_5_pro-16ith6 - No
Operating System lenovo legion_5_pro-16ith6h_firmware < h1cn46ww Yes
Hardware lenovo legion_5_pro-16ith6h - No
Operating System lenovo legion_5-15ach6_firmware < hhcn25ww Yes
Hardware lenovo legion_5-15ach6 - No
Operating System lenovo legion_5-15ach6a_firmware < g9cn28ww Yes
Hardware lenovo legion_5-15ach6a - No
Operating System lenovo legion_5-15ach6h_firmware < gkcn51ww Yes
Hardware lenovo legion_5-15ach6h - No
Operating System lenovo legion_5-15ith6_firmware < h1cn46ww Yes
Hardware lenovo legion_5-15ith6 - No
Operating System lenovo legion_5-15ith6h_firmware < h1cn46ww Yes
Hardware lenovo legion_5-15ith6h - No
Operating System lenovo legion_5-17ach6_firmware < hhcn25ww Yes
Hardware lenovo legion_5-17ach6 - No
Operating System lenovo legion_5-17ach6h_firmware < gkcn51ww Yes
Hardware lenovo legion_5-17ach6h - No
Operating System lenovo legion_5-17ith6_firmware < h1cn46ww Yes
Hardware lenovo legion_5-17ith6 - No
Operating System lenovo legion_5-17ith6h_firmware < h1cn46ww Yes
Hardware lenovo legion_5-17ith6h - No
Operating System lenovo legion_7-16achg6_firmware < gkcn51ww Yes
Hardware lenovo legion_7-16achg6 - No
Operating System lenovo legion_7-16ithg6_firmware < gkcn51ww Yes
Hardware lenovo legion_7-16ithg6 - No
Operating System lenovo legion_y540-15irh_firmware < bhcn44ww Yes
Hardware lenovo legion_y540-15irh - No
Operating System lenovo legion_y540-15irh-pg0_firmware < bhcn44ww Yes
Hardware lenovo legion_y540-15irh-pg0 - No
Operating System lenovo legion_y540-17irh_firmware < bhcn44ww Yes
Hardware lenovo legion_y540-17irh - No
Operating System lenovo legion_y540-17irh-pg0_firmware < bhcn44ww Yes
Hardware lenovo legion_y540-17irh-pg0 - No
Operating System lenovo legion_y545_firmware < bhcn44ww Yes
Hardware lenovo legion_y545 - No
Operating System lenovo legion_y545-pg0_firmware < bhcn44ww Yes
Hardware lenovo legion_y545-pg0 - No
Operating System lenovo legion_y7000-2019_firmware < bhcn44ww Yes
Hardware lenovo legion_y7000-2019 - No
Operating System lenovo legion_y7000-2019-pg0_firmware < bhcn44ww Yes
Hardware lenovo legion_y7000-2019-pg0 - No
Operating System lenovo s145-14api_firmware < bucn31ww Yes
Hardware lenovo s145-14api - No
Operating System lenovo s145-14ast_firmware < aycn26ww Yes
Hardware lenovo s145-14ast - No
Operating System lenovo s145-14igm_firmware < awcn28ww Yes
Hardware lenovo s145-14igm - No
Operating System lenovo s145-14iil_firmware < dkcn54ww Yes
Hardware lenovo s145-14iil - No
Operating System lenovo s145-15api_firmware < bucn31ww Yes
Hardware lenovo s145-15api - No
Operating System lenovo s145-15ast_firmware < aycn26ww Yes
Hardware lenovo s145-15ast - No
Operating System lenovo s145-15igm_firmware < awcn28ww Yes
Hardware lenovo s145-15igm - No
Operating System lenovo s145-15iil_firmware < dkcn54ww Yes
Hardware lenovo s145-15iil - No
Operating System lenovo s540-13api_firmware < cxcn34ww Yes
Hardware lenovo s540-13api - No
Operating System lenovo v14_g2-acl_firmware < glcn43ww Yes
Hardware lenovo v14_g2-acl - No
Operating System lenovo v14-ada_firmware < e8cn33ww Yes
Hardware lenovo v14-ada - No
Operating System lenovo v14-are_firmware < dzcn42ww Yes
Hardware lenovo v14-are - No
Operating System lenovo v14-igl_firmware < dvcn23ww Yes
Hardware lenovo v14-igl - No
Operating System lenovo v14-iil_firmware < dkcn54ww Yes
Hardware lenovo v14-iil - No
Operating System lenovo v140-15iwl_firmware < atcn46ww Yes
Hardware lenovo v140-15iwl - No
Operating System lenovo v15_g2-alc_firmware < glcn43ww Yes
Hardware lenovo v15_g2-alc - No
Operating System lenovo v15-ada_firmware < e8cn33ww Yes
Hardware lenovo v15-ada - No
Operating System lenovo v15-igl_firmware < dvcn23ww Yes
Hardware lenovo v15-igl - No
Operating System lenovo v15-iil_firmware < dkcn54ww Yes
Hardware lenovo v15-iil - No
Operating System lenovo v17-iil_firmware < emcn52ww Yes
Hardware lenovo v17-iil - No
Operating System lenovo v340-17iwl_firmware < atcn46ww Yes
Hardware lenovo v340-17iwl - No
Operating System lenovo yoga_slim_7_pro-14ach5_d_firmware < hecn24ww Yes
Hardware lenovo yoga_slim_7_pro-14ach5_d - No
Operating System lenovo yoga_slim_7_pro-14ach5_od_firmware < hecn24ww Yes
Hardware lenovo yoga_slim_7_pro-14ach5_od - No
Operating System lenovo ideapad_3-14iil05_firmware < dvcn23ww Yes
Hardware lenovo ideapad_3-14iil05 - No
Operating System lenovo ideapad_3-14igl05_firmware < emcn52ww Yes
Hardware lenovo ideapad_3-14igl05 - No
Operating System lenovo ideapad_3-15iil05_firmware < emcn52ww Yes
Hardware lenovo ideapad_3-15iil05 - No
Operating System lenovo ideapad_5-15are05_firmware < e7cn44ww Yes
Hardware lenovo ideapad_5-15are05 - No
Operating System lenovo ideapad_creator_5-15imh05_firmware < egcn36ww Yes
Hardware lenovo ideapad_creator_5-15imh05 - No
Operating System lenovo ideapad_gaming_3-15arh05_firmware < fccn17ww Yes
Hardware lenovo ideapad_gaming_3-15arh05 - No
Operating System lenovo ideapad_gaming_3-15imh05_firmware < egcn36ww Yes
Hardware lenovo ideapad_gaming_3-15imh05 - No
References