CVE Feed

    Dashboard / CVE / CVE-2021-3519

    CVE-2021-3519

    A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.

    Published:Nov 12, 2021
    Last Modified:Nov 21, 2024
    EPS:Nov 12, 2021
    EPSS Score:0.00034
    CVSS Score:6.4

    Affected Products

    Vendor
    Lenovo
    Product
    Ideacentre 3-07imb05
    Vendor
    Lenovo
    Product
    Ideacentre 3-07imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 310s-08igm
    Vendor
    Lenovo
    Product
    Ideacentre 310s-08igm Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14imb05
    Vendor
    Lenovo
    Product
    Ideacentre 5-14imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 510a-15arr
    Vendor
    Lenovo
    Product
    Ideacentre 510a-15arr Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 510s-07icb
    Vendor
    Lenovo
    Product
    Ideacentre 510s-07icb Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 510s-07ick
    Vendor
    Lenovo
    Product
    Ideacentre 510s-07ick Firmware
    Vendor
    Lenovo
    Product
    Ideacentre C5-14mb05
    Vendor
    Lenovo
    Product
    Ideacentre C5-14mb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Creator 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre Creator 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre G5-14imb05
    Vendor
    Lenovo
    Product
    Ideacentre G5-14imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre E75 T\/s
    Vendor
    Lenovo
    Product
    Thinkcentre E75 T\/s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M60e Tiny
    Vendor
    Lenovo
    Product
    Thinkcentre M60e Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M630e
    Vendor
    Lenovo
    Product
    Thinkcentre M630e Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70a
    Vendor
    Lenovo
    Product
    Thinkcentre M70a Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70a Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M70a Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70c
    Vendor
    Lenovo
    Product
    Thinkcentre M70c Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70q
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70s
    Vendor
    Lenovo
    Product
    Thinkcentre M70s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70t
    Vendor
    Lenovo
    Product
    Thinkcentre M70t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M710e
    Vendor
    Lenovo
    Product
    Thinkcentre M710e Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M710s
    Vendor
    Lenovo
    Product
    Thinkcentre M710s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M710t
    Vendor
    Lenovo
    Product
    Thinkcentre M710t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M720e
    Vendor
    Lenovo
    Product
    Thinkcentre M720e Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75n
    Vendor
    Lenovo
    Product
    Thinkcentre M75n Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75s Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M75s Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75t Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M75t Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80q
    Vendor
    Lenovo
    Product
    Thinkcentre M80q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80s
    Vendor
    Lenovo
    Product
    Thinkcentre M80s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80t
    Vendor
    Lenovo
    Product
    Thinkcentre M80t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M810z
    Vendor
    Lenovo
    Product
    Thinkcentre M810z Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M820z
    Vendor
    Lenovo
    Product
    Thinkcentre M820z Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90a
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Tiny
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90s
    Vendor
    Lenovo
    Product
    Thinkcentre M90s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90t
    Vendor
    Lenovo
    Product
    Thinkcentre M90t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Qt B415
    Vendor
    Lenovo
    Product
    Thinkcentre Qt B415 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Qt M410
    Vendor
    Lenovo
    Product
    Thinkcentre Qt M410 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Qt M415
    Vendor
    Lenovo
    Product
    Thinkcentre Qt M415 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P340
    Vendor
    Lenovo
    Product
    Thinkstation P340 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P340 Tiny
    Vendor
    Lenovo
    Product
    Thinkstation P340 Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P520
    Vendor
    Lenovo
    Product
    Thinkstation P520 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P520c
    Vendor
    Lenovo
    Product
    Thinkstation P520c Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P720
    Vendor
    Lenovo
    Product
    Thinkstation P720 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P920
    Vendor
    Lenovo
    Product
    Thinkstation P920 Firmware
    Vendor
    Lenovo
    Product
    V30a-22iml
    Vendor
    Lenovo
    Product
    V30a-22iml Firmware
    Vendor
    Lenovo
    Product
    V330
    Vendor
    Lenovo
    Product
    V330 Firmware
    Vendor
    Lenovo
    Product
    V50a-22imb
    Vendor
    Lenovo
    Product
    V50a-22imb Firmware
    Vendor
    Lenovo
    Product
    V50a-24imb
    Vendor
    Lenovo
    Product
    V50a-24imb Firmware
    Vendor
    Lenovo
    Product
    V50s-07imb
    Vendor
    Lenovo
    Product
    V50s-07imb Firmware
    Vendor
    Lenovo
    Product
    V50t-13imb
    Vendor
    Lenovo
    Product
    V50t-13imb Firmware
    Vendor
    Lenovo
    Product
    V50t-13imb G2
    Vendor
    Lenovo
    Product
    V50t-13imb G2 Firmware
    Vendor
    Lenovo
    Product
    V520
    Vendor
    Lenovo
    Product
    V520 Firmware
    Vendor
    Lenovo
    Product
    V520s
    Vendor
    Lenovo
    Product
    V520s Firmware
    Vendor
    Lenovo
    Product
    V530-15arr
    Vendor
    Lenovo
    Product
    V530-15arr Firmware
    Vendor
    Lenovo
    Product
    V530-15icr
    Vendor
    Lenovo
    Product
    V530-15icr Firmware
    Vendor
    Lenovo
    Product
    V530s-07icb
    Vendor
    Lenovo
    Product
    V530s-07icb Firmware
    Vendor
    Lenovo
    Product
    V530s-07icr
    Vendor
    Lenovo
    Product
    V530s-07icr Firmware
    Vendor
    Lenovo
    Product
    V55t-15api
    Vendor
    Lenovo
    Product
    V55t-15api Firmware
    Vendor
    Microsoft
    Product
    Windows 10

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2023-43577 (CVSS 6.7) — A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local at…
    CVE-2023-43576 (CVSS 6.7) — A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local a…
    CVE-2023-43575 (CVSS 6.7) — A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow…
    CVE-2023-43574 (CVSS 4.4) — A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products …
    CVE-2023-43573 (CVSS 6.7) — A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products t…
    CVE-2023-43572 (CVSS 4.4) — A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may all…
    CVE-2023-45079 (CVSS 6.7) — A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with e…
    CVE-2023-45078 (CVSS 6.7) — A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attack…
    CVE-2023-45077 (CVSS 6.7) — A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with el…
    CVE-2023-45076 (CVSS 6.7) — A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with el…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High