medium6.8
CVE-2021-3453
Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access …
Impact
Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkpad Helix Firmware | Version n17etb4w |
| Lenovo | Thinkpad T550 Firmware | Version n11et53w |
| Lenovo | Thinkpad W550s Firmware | Version n11et53w |
| Lenovo | Thinkpad X1 Carbon 3rd Gen Firmware | Version n14et55w |
| Lenovo | Thinkpad X250 Firmware | Version n10et62w |
| Lenovo | Thinkpad Yoga 15 Firmware | Version n19et65w |
| Lenovo | 730s-13iml Firmware | All versions |
| Lenovo | Ideapad 1-11igl05 Firmware | All versions |
| Lenovo | Ideapad 1-14igl05 Firmware | All versions |
| Lenovo | Ideapad S940-14iil Firmware | All versions |
| Lenovo | Ideapad S940-14iwl Firmware | All versions |
| Lenovo | Ideapad Slim 1-11ast-05 Firmware | All versions |