CVE Feed

    Dashboard / CVE / CVE-2021-3614

    CVE-2021-3614

    A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.

    Published:Jul 16, 2021
    Last Modified:Nov 21, 2024
    EPS:Jul 16, 2021
    EPSS Score:0.00047
    CVSS Score:6.4

    Affected Products

    Vendor
    Lenovo
    Product
    100e 2nd Gen
    Vendor
    Lenovo
    Product
    100e 2nd Gen Firmware
    Vendor
    Lenovo
    Product
    300e 2nd Gen
    Vendor
    Lenovo
    Product
    300e 2nd Gen Firmware
    Vendor
    Lenovo
    Product
    Ideapad 1-11ada05
    Vendor
    Lenovo
    Product
    Ideapad 1-11ada05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 1-11igl05
    Vendor
    Lenovo
    Product
    Ideapad 1-11igl05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 1-14ada05
    Vendor
    Lenovo
    Product
    Ideapad 1-14ada05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 1-14igl05
    Vendor
    Lenovo
    Product
    Ideapad 1-14igl05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 730-13iml
    Vendor
    Lenovo
    Product
    Ideapad 730-13iml Firmware
    Vendor
    Lenovo
    Product
    Ideapad Flex 5-14alc05
    Vendor
    Lenovo
    Product
    Ideapad Flex 5-14alc05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad Flex 5-15alc05
    Vendor
    Lenovo
    Product
    Ideapad Flex 5-15alc05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad S940-14iil
    Vendor
    Lenovo
    Product
    Ideapad S940-14iil Firmware
    Vendor
    Lenovo
    Product
    Ideapad S940-14iwl
    Vendor
    Lenovo
    Product
    Ideapad S940-14iwl Firmware
    Vendor
    Lenovo
    Product
    Ideapad Slim 1-11ast-05
    Vendor
    Lenovo
    Product
    Ideapad Slim 1-11ast-05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad Slim 1-14ast-05
    Vendor
    Lenovo
    Product
    Ideapad Slim 1-14ast-05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad Yoga C940-15irh
    Vendor
    Lenovo
    Product
    Ideapad Yoga C940-15irh Firmware
    Vendor
    Lenovo
    Product
    Ideapad Yoga S730-13iml
    Vendor
    Lenovo
    Product
    Ideapad Yoga S730-13iml Firmware
    Vendor
    Lenovo
    Product
    Ideapad Yoga S940-14iil
    Vendor
    Lenovo
    Product
    Ideapad Yoga S940-14iil Firmware
    Vendor
    Lenovo
    Product
    Ideapad Yoga S940-14iwl
    Vendor
    Lenovo
    Product
    Ideapad Yoga S940-14iwl Firmware
    Vendor
    Lenovo
    Product
    V130-15igm
    Vendor
    Lenovo
    Product
    V130-15igm Firmware
    Vendor
    Lenovo
    Product
    V130-15ikb
    Vendor
    Lenovo
    Product
    V130-15ikb Firmware
    Vendor
    Lenovo
    Product
    V330-15ikb
    Vendor
    Lenovo
    Product
    V330-15ikb Firmware
    Vendor
    Lenovo
    Product
    V330-15isk
    Vendor
    Lenovo
    Product
    V330-15isk Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High