CVE Feed

    Dashboard / CVE / CVE-2021-3972

    CVE-2021-3972

    A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

    Published:Apr 22, 2022
    Last Modified:Nov 21, 2024
    EPS:Apr 22, 2022
    EPSS Score:0.09717
    CVSS Score:6.7

    Affected Products

    Vendor
    Lenovo
    Product
    Ideapad 3-14ada05
    Vendor
    Lenovo
    Product
    Ideapad 3-14ada05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-14ada6
    Vendor
    Lenovo
    Product
    Ideapad 3-14ada6 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-14alc6
    Vendor
    Lenovo
    Product
    Ideapad 3-14alc6 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-14are05
    Vendor
    Lenovo
    Product
    Ideapad 3-14are05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-14igl05
    Vendor
    Lenovo
    Product
    Ideapad 3-14igl05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-14iil05
    Vendor
    Lenovo
    Product
    Ideapad 3-14iil05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-14iml05
    Vendor
    Lenovo
    Product
    Ideapad 3-14iml05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-14itl05
    Vendor
    Lenovo
    Product
    Ideapad 3-14itl05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-14itl6
    Vendor
    Lenovo
    Product
    Ideapad 3-14itl6 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-15ada05
    Vendor
    Lenovo
    Product
    Ideapad 3-15ada05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-15ada6
    Vendor
    Lenovo
    Product
    Ideapad 3-15ada6 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-15alc6
    Vendor
    Lenovo
    Product
    Ideapad 3-15alc6 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-15are05
    Vendor
    Lenovo
    Product
    Ideapad 3-15are05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-15igl05
    Vendor
    Lenovo
    Product
    Ideapad 3-15igl05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-15iil05
    Vendor
    Lenovo
    Product
    Ideapad 3-15iil05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-15iml05
    Vendor
    Lenovo
    Product
    Ideapad 3-15iml05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-15itl05
    Vendor
    Lenovo
    Product
    Ideapad 3-15itl05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-15itl6
    Vendor
    Lenovo
    Product
    Ideapad 3-15itl6 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-17ada05
    Vendor
    Lenovo
    Product
    Ideapad 3-17ada05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-17ada6
    Vendor
    Lenovo
    Product
    Ideapad 3-17ada6 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-17alc6
    Vendor
    Lenovo
    Product
    Ideapad 3-17alc6 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-17are05
    Vendor
    Lenovo
    Product
    Ideapad 3-17are05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-17iil05
    Vendor
    Lenovo
    Product
    Ideapad 3-17iil05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-17iml05
    Vendor
    Lenovo
    Product
    Ideapad 3-17iml05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 3-17itl6
    Vendor
    Lenovo
    Product
    Ideapad 3-17itl6 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 5-15are05
    Vendor
    Lenovo
    Product
    Ideapad 5-15are05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad 5-15iil05
    Vendor
    Lenovo
    Product
    Ideapad 5-15iil05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad Creator 5-15imh05
    Vendor
    Lenovo
    Product
    Ideapad Creator 5-15imh05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad Gaming 3-15arh05
    Vendor
    Lenovo
    Product
    Ideapad Gaming 3-15arh05 Firmware
    Vendor
    Lenovo
    Product
    Ideapad Gaming 3-15imh05
    Vendor
    Lenovo
    Product
    Ideapad Gaming 3-15imh05 Firmware
    Vendor
    Lenovo
    Product
    L3-15itl6
    Vendor
    Lenovo
    Product
    L3-15itl6 Firmware
    Vendor
    Lenovo
    Product
    L340-15irh
    Vendor
    Lenovo
    Product
    L340-15irh Firmware
    Vendor
    Lenovo
    Product
    L340-15iwl
    Vendor
    Lenovo
    Product
    L340-15iwl Firmware
    Vendor
    Lenovo
    Product
    L340-15iwl Touch
    Vendor
    Lenovo
    Product
    L340-15iwl Touch Firmware
    Vendor
    Lenovo
    Product
    L340-17irh
    Vendor
    Lenovo
    Product
    L340-17irh Firmware
    Vendor
    Lenovo
    Product
    L340-17iwl
    Vendor
    Lenovo
    Product
    L340-17iwl Firmware
    Vendor
    Lenovo
    Product
    L3 15iml05
    Vendor
    Lenovo
    Product
    L3 15iml05 Firmware
    Vendor
    Lenovo
    Product
    Legion 5-15ach6
    Vendor
    Lenovo
    Product
    Legion 5-15ach6 Firmware
    Vendor
    Lenovo
    Product
    Legion 5-15ach6a
    Vendor
    Lenovo
    Product
    Legion 5-15ach6a Firmware
    Vendor
    Lenovo
    Product
    Legion 5-15ach6h
    Vendor
    Lenovo
    Product
    Legion 5-15ach6h Firmware
    Vendor
    Lenovo
    Product
    Legion 5-15imh6
    Vendor
    Lenovo
    Product
    Legion 5-15imh6 Firmware
    Vendor
    Lenovo
    Product
    Legion 5-15ith6
    Vendor
    Lenovo
    Product
    Legion 5-15ith6 Firmware
    Vendor
    Lenovo
    Product
    Legion 5-15ith6h
    Vendor
    Lenovo
    Product
    Legion 5-15ith6h Firmware
    Vendor
    Lenovo
    Product
    Legion 5-17ach6
    Vendor
    Lenovo
    Product
    Legion 5-17ach6 Firmware
    Vendor
    Lenovo
    Product
    Legion 5-17ach6h
    Vendor
    Lenovo
    Product
    Legion 5-17ach6h Firmware
    Vendor
    Lenovo
    Product
    Legion 5-17ith6
    Vendor
    Lenovo
    Product
    Legion 5-17ith6 Firmware
    Vendor
    Lenovo
    Product
    Legion 5-17ith6h
    Vendor
    Lenovo
    Product
    Legion 5-17ith6h Firmware
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ach6
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ach6 Firmware
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ach6h
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ach6h Firmware
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ith6
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ith6 Firmware
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ith6h
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ith6h Firmware
    Vendor
    Lenovo
    Product
    Legion 7-16achg6
    Vendor
    Lenovo
    Product
    Legion 7-16achg6 Firmware
    Vendor
    Lenovo
    Product
    Legion 7-16ithg6
    Vendor
    Lenovo
    Product
    Legion 7-16ithg6 Firmware
    Vendor
    Lenovo
    Product
    Legion S7-15ach6
    Vendor
    Lenovo
    Product
    Legion S7-15ach6 Firmware
    Vendor
    Lenovo
    Product
    Legion Y540-15irh
    Vendor
    Lenovo
    Product
    Legion Y540-15irh-pg0
    Vendor
    Lenovo
    Product
    Legion Y540-15irh-pg0 Firmware
    Vendor
    Lenovo
    Product
    Legion Y540-15irh Firmware
    Vendor
    Lenovo
    Product
    Legion Y540-17irh
    Vendor
    Lenovo
    Product
    Legion Y540-17irh-pg0
    Vendor
    Lenovo
    Product
    Legion Y540-17irh-pg0 Firmware
    Vendor
    Lenovo
    Product
    Legion Y540-17irh Firmware
    Vendor
    Lenovo
    Product
    Legion Y545
    Vendor
    Lenovo
    Product
    Legion Y545-pg0
    Vendor
    Lenovo
    Product
    Legion Y545-pg0 Firmware
    Vendor
    Lenovo
    Product
    Legion Y545 Firmware
    Vendor
    Lenovo
    Product
    Legion Y7000-2019
    Vendor
    Lenovo
    Product
    Legion Y7000-2019-pg0
    Vendor
    Lenovo
    Product
    Legion Y7000-2019-pg0 Firmware
    Vendor
    Lenovo
    Product
    Legion Y7000-2019 Firmware
    Vendor
    Lenovo
    Product
    S145-14api
    Vendor
    Lenovo
    Product
    S145-14api Firmware
    Vendor
    Lenovo
    Product
    S145-14ast
    Vendor
    Lenovo
    Product
    S145-14ast Firmware
    Vendor
    Lenovo
    Product
    S145-14igm
    Vendor
    Lenovo
    Product
    S145-14igm Firmware
    Vendor
    Lenovo
    Product
    S145-14iil
    Vendor
    Lenovo
    Product
    S145-14iil Firmware
    Vendor
    Lenovo
    Product
    S145-15api
    Vendor
    Lenovo
    Product
    S145-15api Firmware
    Vendor
    Lenovo
    Product
    S145-15ast
    Vendor
    Lenovo
    Product
    S145-15ast Firmware
    Vendor
    Lenovo
    Product
    S145-15igm
    Vendor
    Lenovo
    Product
    S145-15igm Firmware
    Vendor
    Lenovo
    Product
    S145-15iil
    Vendor
    Lenovo
    Product
    S145-15iil Firmware
    Vendor
    Lenovo
    Product
    S14 G2 Itl
    Vendor
    Lenovo
    Product
    S14 G2 Itl Firmware
    Vendor
    Lenovo
    Product
    S540-13api
    Vendor
    Lenovo
    Product
    S540-13api Firmware
    Vendor
    Lenovo
    Product
    S540-13iml
    Vendor
    Lenovo
    Product
    S540-13iml Firmware
    Vendor
    Lenovo
    Product
    Slim 7 Pro-14ihu5
    Vendor
    Lenovo
    Product
    Slim 7 Pro-14ihu5 Firmware
    Vendor
    Lenovo
    Product
    Slim 9-14itl05
    Vendor
    Lenovo
    Product
    Slim 9-14itl05 Firmware
    Vendor
    Lenovo
    Product
    V14-ada
    Vendor
    Lenovo
    Product
    V14-ada Firmware
    Vendor
    Lenovo
    Product
    V14-are
    Vendor
    Lenovo
    Product
    V14-are Firmware
    Vendor
    Lenovo
    Product
    V14-igl
    Vendor
    Lenovo
    Product
    V14-igl Firmware
    Vendor
    Lenovo
    Product
    V14-iil
    Vendor
    Lenovo
    Product
    V14-iil Firmware
    Vendor
    Lenovo
    Product
    V140-15iwl
    Vendor
    Lenovo
    Product
    V140-15iwl Firmware
    Vendor
    Lenovo
    Product
    V14 G1-iml
    Vendor
    Lenovo
    Product
    V14 G1-iml Firmware
    Vendor
    Lenovo
    Product
    V14 G2-acl
    Vendor
    Lenovo
    Product
    V14 G2-acl Firmware
    Vendor
    Lenovo
    Product
    V14 G2-itl
    Vendor
    Lenovo
    Product
    V14 G2-itl Firmware
    Vendor
    Lenovo
    Product
    V15-ada
    Vendor
    Lenovo
    Product
    V15-ada Firmware
    Vendor
    Lenovo
    Product
    V15-igl
    Vendor
    Lenovo
    Product
    V15-igl Firmware
    Vendor
    Lenovo
    Product
    V15-iil
    Vendor
    Lenovo
    Product
    V15-iil Firmware
    Vendor
    Lenovo
    Product
    V15 G1-iml
    Vendor
    Lenovo
    Product
    V15 G1-iml Firmware
    Vendor
    Lenovo
    Product
    V15 G2-alc
    Vendor
    Lenovo
    Product
    V15 G2-alc Firmware
    Vendor
    Lenovo
    Product
    V15 G2-itl
    Vendor
    Lenovo
    Product
    V15 G2-itl Firmware
    Vendor
    Lenovo
    Product
    V17-iil
    Vendor
    Lenovo
    Product
    V17-iil Firmware
    Vendor
    Lenovo
    Product
    V17 G2-itl
    Vendor
    Lenovo
    Product
    V17 G2-itl Firmware
    Vendor
    Lenovo
    Product
    V340-17iwl
    Vendor
    Lenovo
    Product
    V340-17iwl Firmware
    Vendor
    Lenovo
    Product
    Yoga 7-14acn6
    Vendor
    Lenovo
    Product
    Yoga 7-14acn6 Firmware
    Vendor
    Lenovo
    Product
    Yoga C740-14iml
    Vendor
    Lenovo
    Product
    Yoga C740-14iml Firmware
    Vendor
    Lenovo
    Product
    Yoga C740-15iml
    Vendor
    Lenovo
    Product
    Yoga C740-15iml Firmware
    Vendor
    Lenovo
    Product
    Yoga C940-14iil
    Vendor
    Lenovo
    Product
    Yoga C940-14iil Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14ach5
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14ach5 D
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14ach5 D Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14ach5 Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14ach5 O
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14ach5 O Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14ach5 Od
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14ach5 Od Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14arh5
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14arh5 Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14ihu5
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14ihu5 Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14ihu5 O
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14ihu5 O Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14itl5
    Vendor
    Lenovo
    Product
    Yoga Slim 7 Pro-14itl5 Firmware
    Vendor
    Lenovo
    Product
    Yoga Slim 9-14itl05
    Vendor
    Lenovo
    Product
    Yoga Slim 9-14itl05 Firmware

    Exploits

    https://github.com/killvxk/CVE-2021-3972

    Common Weakness Enumeration

    CWE-489 Active Debug Code

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High