NetSight
medium6.4

CVE-2021-3614

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions d…

Impact

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.

Affected products

VendorProductAffected versions
LenovoIdeapad 1-11ada05 Firmware
Version fqcn19ww
LenovoIdeapad 1-14ada05 Firmware
Version fqcn19ww
LenovoV130-15ikb Firmware
All versions
Lenovo100e 2nd Gen Firmware
All versions
Lenovo300e 2nd Gen Firmware
All versions
LenovoIdeapad 730-13iml Firmware
All versions
LenovoIdeapad Flex 5-14alc05 Firmware
All versions
LenovoIdeapad Flex 5-15alc05 Firmware
All versions
LenovoIdeapad 1-11igl05 Firmware
All versions
LenovoIdeapad 1-14igl05 Firmware
All versions
LenovoIdeapad S940-14iil Firmware
All versions
LenovoIdeapad S940-14iwl Firmware
All versions

Weakness classification

References