CVE-2021-3971
Summary
| CVE | CVE-2021-3971 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-04-22 21:15:00 UTC |
| Updated | 2022-05-06 20:57:00 UTC |
| Description | A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Lenovo | Ideapad 3-14ada05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14ada05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14ada6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14ada6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14alc6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14alc6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14are05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14are05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14igl05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14igl05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-14iil05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-14iil05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15ada05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15ada05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15ada6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15ada6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15alc6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15alc6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15are05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15are05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15igl05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15igl05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-15iil05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-15iil05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17ada05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17ada05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17ada6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17ada6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17alc6 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17alc6 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17are05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17are05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 3-17iil05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 3-17iil05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad 5-15are05 | - | All | All | All |
| Operating System | Lenovo | Ideapad 5-15are05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad Creator 5-15imh05 | - | All | All | All |
| Operating System | Lenovo | Ideapad Creator 5-15imh05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad Gaming 3-15arh05 | - | All | All | All |
| Operating System | Lenovo | Ideapad Gaming 3-15arh05 Firmware | All | All | All | All |
| Hardware | Lenovo | Ideapad Gaming 3-15imh05 | - | All | All | All |
| Operating System | Lenovo | Ideapad Gaming 3-15imh05 Firmware | All | All | All | All |
| Hardware | Lenovo | L3-15itl6 | - | All | All | All |
| Operating System | Lenovo | L3-15itl6 Firmware | All | All | All | All |
| Hardware | Lenovo | L340-15irh | - | All | All | All |
| Operating System | Lenovo | L340-15irh Firmware | All | All | All | All |
| Hardware | Lenovo | L340-15iwl | - | All | All | All |
| Operating System | Lenovo | L340-15iwl Firmware | All | All | All | All |
| Hardware | Lenovo | L340-15iwl Touch | - | All | All | All |
| Operating System | Lenovo | L340-15iwl Touch Firmware | All | All | All | All |
| Hardware | Lenovo | L340-17irh | - | All | All | All |
| Operating System | Lenovo | L340-17irh Firmware | All | All | All | All |
| Hardware | Lenovo | L340-17iwl | - | All | All | All |
| Operating System | Lenovo | L340-17iwl Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-15ach6 | - | All | All | All |
| Hardware | Lenovo | Legion 5-15ach6a | - | All | All | All |
| Operating System | Lenovo | Legion 5-15ach6a Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-15ach6h | - | All | All | All |
| Operating System | Lenovo | Legion 5-15ach6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5-15ach6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-15ith6 | - | All | All | All |
| Hardware | Lenovo | Legion 5-15ith6h | - | All | All | All |
| Operating System | Lenovo | Legion 5-15ith6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5-15ith6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-17ach6 | - | All | All | All |
| Hardware | Lenovo | Legion 5-17ach6h | - | All | All | All |
| Operating System | Lenovo | Legion 5-17ach6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5-17ach6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5-17ith6 | - | All | All | All |
| Hardware | Lenovo | Legion 5-17ith6h | - | All | All | All |
| Operating System | Lenovo | Legion 5-17ith6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5-17ith6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5 Pro-16ach6 | - | All | All | All |
| Hardware | Lenovo | Legion 5 Pro-16ach6h | - | All | All | All |
| Operating System | Lenovo | Legion 5 Pro-16ach6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5 Pro-16ach6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 5 Pro-16ith6 | - | All | All | All |
| Hardware | Lenovo | Legion 5 Pro-16ith6h | - | All | All | All |
| Operating System | Lenovo | Legion 5 Pro-16ith6h Firmware | All | All | All | All |
| Operating System | Lenovo | Legion 5 Pro-16ith6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 7-16achg6 | - | All | All | All |
| Operating System | Lenovo | Legion 7-16achg6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion 7-16ithg6 | - | All | All | All |
| Operating System | Lenovo | Legion 7-16ithg6 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion Y540-15irh | - | All | All | All |
| Hardware | Lenovo | Legion Y540-15irh-pg0 | - | All | All | All |
| Operating System | Lenovo | Legion Y540-15irh-pg0 Firmware | All | All | All | All |
| Operating System | Lenovo | Legion Y540-15irh Firmware | All | All | All | All |
| Hardware | Lenovo | Legion Y540-17irh | - | All | All | All |
| Hardware | Lenovo | Legion Y540-17irh-pg0 | - | All | All | All |
| Operating System | Lenovo | Legion Y540-17irh-pg0 Firmware | All | All | All | All |
| Operating System | Lenovo | Legion Y540-17irh Firmware | All | All | All | All |
| Hardware | Lenovo | Legion Y545 | - | All | All | All |
| Hardware | Lenovo | Legion Y545-pg0 | - | All | All | All |
| Operating System | Lenovo | Legion Y545-pg0 Firmware | All | All | All | All |
| Operating System | Lenovo | Legion Y545 Firmware | All | All | All | All |
| Hardware | Lenovo | Legion Y7000-2019 | - | All | All | All |
| Hardware | Lenovo | Legion Y7000-2019-pg0 | - | All | All | All |
| Operating System | Lenovo | Legion Y7000-2019-pg0 Firmware | All | All | All | All |
| Operating System | Lenovo | Legion Y7000-2019 Firmware | All | All | All | All |
| Hardware | Lenovo | S145-14api | - | All | All | All |
| Operating System | Lenovo | S145-14api Firmware | All | All | All | All |
| Hardware | Lenovo | S145-14ast | - | All | All | All |
| Operating System | Lenovo | S145-14ast Firmware | All | All | All | All |
| Hardware | Lenovo | S145-14igm | - | All | All | All |
| Operating System | Lenovo | S145-14igm Firmware | All | All | All | All |
| Hardware | Lenovo | S145-14iil | - | All | All | All |
| Operating System | Lenovo | S145-14iil Firmware | All | All | All | All |
| Hardware | Lenovo | S145-15api | - | All | All | All |
| Operating System | Lenovo | S145-15api Firmware | All | All | All | All |
| Hardware | Lenovo | S145-15ast | - | All | All | All |
| Operating System | Lenovo | S145-15ast Firmware | All | All | All | All |
| Hardware | Lenovo | S145-15igm | - | All | All | All |
| Operating System | Lenovo | S145-15igm Firmware | All | All | All | All |
| Hardware | Lenovo | S145-15iil | - | All | All | All |
| Operating System | Lenovo | S145-15iil Firmware | All | All | All | All |
| Hardware | Lenovo | S540-13api | - | All | All | All |
| Operating System | Lenovo | S540-13api Firmware | All | All | All | All |
| Hardware | Lenovo | V14-ada | - | All | All | All |
| Operating System | Lenovo | V14-ada Firmware | All | All | All | All |
| Hardware | Lenovo | V14-are | - | All | All | All |
| Operating System | Lenovo | V14-are Firmware | All | All | All | All |
| Hardware | Lenovo | V14-igl | - | All | All | All |
| Operating System | Lenovo | V14-igl Firmware | All | All | All | All |
| Hardware | Lenovo | V14-iil | - | All | All | All |
| Operating System | Lenovo | V14-iil Firmware | All | All | All | All |
| Hardware | Lenovo | V140-15iwl | - | All | All | All |
| Operating System | Lenovo | V140-15iwl Firmware | All | All | All | All |
| Hardware | Lenovo | V14 G2-acl | - | All | All | All |
| Operating System | Lenovo | V14 G2-acl Firmware | All | All | All | All |
| Hardware | Lenovo | V15-ada | - | All | All | All |
| Operating System | Lenovo | V15-ada Firmware | All | All | All | All |
| Hardware | Lenovo | V15-igl | - | All | All | All |
| Operating System | Lenovo | V15-igl Firmware | All | All | All | All |
| Hardware | Lenovo | V15-iil | - | All | All | All |
| Operating System | Lenovo | V15-iil Firmware | All | All | All | All |
| Hardware | Lenovo | V15 G2-alc | - | All | All | All |
| Operating System | Lenovo | V15 G2-alc Firmware | All | All | All | All |
| Hardware | Lenovo | V17-iil | - | All | All | All |
| Operating System | Lenovo | V17-iil Firmware | All | All | All | All |
| Hardware | Lenovo | V340-17iwl | - | All | All | All |
| Operating System | Lenovo | V340-17iwl Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ach5 D | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ach5 D Firmware | All | All | All | All |
| Hardware | Lenovo | Yoga Slim 7 Pro-14ach5 Od | - | All | All | All |
| Operating System | Lenovo | Yoga Slim 7 Pro-14ach5 Od Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US | MISC | support.lenovo.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Lenovo thanks Martin Smolár from ESET for reporting this issue.
There are currently no legacy QID mappings associated with this CVE.