CVE-2021-3971
A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable.
- Score
- CVSS 3.1 6.7 Medium
- Status
- Modified - psirt@lenovo.com
- Published
- 2022-04-22
- Last modified
- 2024-08-03
- Weaknesses
- CWE-489
Affected products
- Ideapad 3-14ada05 Firmware (Lenovo)
- Ideapad 3-14ada6 Firmware (Lenovo)
- Ideapad 3-14alc6 Firmware (Lenovo)
- Ideapad 3-14are05 Firmware (Lenovo)
- Ideapad 3-14igl05 Firmware (Lenovo)
- Ideapad 3-14iil05 Firmware (Lenovo)
- Ideapad 3-15ada05 Firmware (Lenovo)
- Ideapad 3-15ada6 Firmware (Lenovo)
- Ideapad 3-15alc6 Firmware (Lenovo)
- Ideapad 3-15are05 Firmware (Lenovo)
- Ideapad 3-15igl05 Firmware (Lenovo)
- Ideapad 3-15iil05 Firmware (Lenovo)
- Ideapad 3-17ada05 Firmware (Lenovo)
- Ideapad 3-17ada6 Firmware (Lenovo)
- Ideapad 3-17alc6 Firmware (Lenovo)
- Ideapad 3-17are05 Firmware (Lenovo)
- Ideapad 3-17iil05 Firmware (Lenovo)
- Ideapad 5-15are05 Firmware (Lenovo)
- Ideapad Creator 5-15imh05 Firmware (Lenovo)
- Ideapad Gaming 3-15arh05 Firmware (Lenovo)
- Ideapad Gaming 3-15imh05 Firmware (Lenovo)
- L3-15itl6 Firmware (Lenovo)
- L340-15irh Firmware (Lenovo)
- L340-15iwl Firmware (Lenovo)
- L340-15iwl Touch Firmware (Lenovo)
- L340-17irh Firmware (Lenovo)
- L340-17iwl Firmware (Lenovo)
- Legion 5-15ach6 Firmware (Lenovo)
- Legion 5-15ach6a Firmware (Lenovo)
- Legion 5-15ach6h Firmware (Lenovo)
- Legion 5-15ith6 Firmware (Lenovo)
- Legion 5-15ith6h Firmware (Lenovo)
- Legion 5-17ach6 Firmware (Lenovo)
- Legion 5-17ach6h Firmware (Lenovo)
- Legion 5-17ith6 Firmware (Lenovo)
- Legion 5-17ith6h Firmware (Lenovo)
- Legion 5 Pro-16ach6 Firmware (Lenovo)
- Legion 5 Pro-16ach6h Firmware (Lenovo)
- Legion 5 Pro-16ith6 Firmware (Lenovo)
- Legion 5 Pro-16ith6h Firmware (Lenovo)
- Legion 7-16achg6 Firmware (Lenovo)
- Legion 7-16ithg6 Firmware (Lenovo)
- Legion Y540-15irh-pg0 Firmware (Lenovo)
- Legion Y540-15irh Firmware (Lenovo)
- Legion Y540-17irh-pg0 Firmware (Lenovo)
- Legion Y540-17irh Firmware (Lenovo)
- Legion Y545-pg0 Firmware (Lenovo)
- Legion Y545 Firmware (Lenovo)
- Legion Y7000-2019-pg0 Firmware (Lenovo)
- Legion Y7000-2019 Firmware (Lenovo)
- Notebook Bios (Lenovo)
- S145-14api Firmware (Lenovo)
- S145-14ast Firmware (Lenovo)
- S145-14igm Firmware (Lenovo)
- S145-14iil Firmware (Lenovo)
- S145-15api Firmware (Lenovo)
- S145-15ast Firmware (Lenovo)
- S145-15igm Firmware (Lenovo)
- S145-15iil Firmware (Lenovo)
- S540-13api Firmware (Lenovo)
- V14-ada Firmware (Lenovo)
- V14-are Firmware (Lenovo)
- V14-igl Firmware (Lenovo)
- V14-iil Firmware (Lenovo)
- V140-15iwl Firmware (Lenovo)
- V14 G2-acl Firmware (Lenovo)
- V15-ada Firmware (Lenovo)
- V15-igl Firmware (Lenovo)
- V15-iil Firmware (Lenovo)
- V15 G2-alc Firmware (Lenovo)
- V17-iil Firmware (Lenovo)
- V340-17iwl Firmware (Lenovo)
- Yoga Slim 7 Pro-14ach5 D Firmware (Lenovo)
- Yoga Slim 7 Pro-14ach5 Od Firmware (Lenovo)
References
- https://support.lenovo.com/us/en/product_security/LEN-73440
