CVE-2021-3519: Medium severity lenovo ideacentre c5-14mb05 vulnerability
Published Nov 12, 2021
·Updated
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.
Affected Software
122 affected components
Lenovo Ideacentre C5-14mb05 Firmware<o4hkt33a
Lenovo Ideacentre C5-14mb05
Lenovo Ideacentre 3-07imb05 Firmware<m2vkt18a
Lenovo Ideacentre 3-07imb05
Lenovo Ideacentre 5-14imb05 Firmware<o4hkt33a
Lenovo Ideacentre 5-14imb05
Lenovo Ideacentre 5-14iob6 Firmware<m3gkt29a
Lenovo Ideacentre 5-14iob6
Lenovo Ideacentre Creator 5-14iob6 Firmware<m3gkt29a
Lenovo Ideacentre Creator 5-14iob6
Lenovo Ideacentre G5-14imb05 Firmware<o4hkt33a
Lenovo Ideacentre G5-14imb05
Lenovo Ideacentre Gaming 5-14iob6 Firmware<m3gkt29a
Lenovo Ideacentre Gaming 5-14iob6
Lenovo Thinkcentre M60e Tiny Firmware<m3skt1ea
Lenovo Thinkcentre M60e Tiny
Lenovo Thinkcentre M630e Firmware<m28kt36a
Lenovo Thinkcentre M630e
Lenovo Thinkcentre M70a Firmware<=m2skt21a
Lenovo Thinkcentre M70a
Lenovo Thinkcentre M70s Firmware<m2tkt3ca
Lenovo Thinkcentre M70s
Lenovo Thinkcentre M70t Firmware<m2tkt3ca
Lenovo Thinkcentre M70t
Lenovo Thinkcentre M710e Firmware<m1zkt37a
Lenovo Thinkcentre M710e
Lenovo Thinkcentre M710s Firmware<m16kt67a
Lenovo ThinkCentre M710s
Lenovo Thinkcentre M710t Firmware<m16kt67a
Lenovo Thinkcentre M710t
Lenovo Thinkcentre M720e Firmware<m30kt23a
Lenovo Thinkcentre M720e
Lenovo Thinkcentre M75n Firmware<m33kt21a
Lenovo Thinkcentre M75n
Lenovo Thinkcentre M75s Gen 2 Firmware<m3bkt24a
Lenovo Thinkcentre M75s Gen 2
Lenovo Thinkcentre M70a Gen 2 Firmware<m3nkt17a
Lenovo Thinkcentre M70a Gen 2
Lenovo Thinkcentre M70c Firmware<m2vkt18a
Lenovo Thinkcentre M70c
Lenovo Thinkcentre M70q Firmware<m2wkt49a
Lenovo Thinkcentre M70q
Lenovo Thinkcentre M75s Gen 2 Firmware<m3akt35a
Lenovo Thinkcentre M75t Gen 2 Firmware<m3bkt24a
Lenovo Thinkcentre M75t Gen 2
Lenovo Thinkcentre M75t Gen 2 Firmware<m3akt35a
Lenovo Thinkcentre M80q Firmware<m2wkt49a
Lenovo Thinkcentre M80q
Lenovo Thinkcentre M80s Firmware<m2tkt3ca
Lenovo Thinkcentre M80s
Lenovo Thinkcentre M80t Firmware<m2tkt3ca
Lenovo Thinkcentre M80t
Lenovo Thinkcentre M810z Firmware<m1ckt47a
Lenovo Thinkcentre M810z
Lenovo Thinkcentre M820z Firmware<m1nkt57a
Lenovo Thinkcentre M820z
Lenovo Thinkcentre M90a Firmware<m2rkt47a
Lenovo Thinkcentre M90a
Lenovo Thinkcentre M90q Tiny Firmware<m2wkt49a
Lenovo Thinkcentre M90a Tiny
Lenovo Thinkcentre M90s Firmware<m2tkt3ca
Lenovo Thinkcentre M90s
Lenovo Thinkcentre M90t Firmware<m2tkt3ca
Lenovo Thinkcentre M90t
Lenovo Thinkcentre Qt M410 Firmware<m16kt67a
Lenovo Thinkcentre Qt M410
Lenovo Thinkcentre Qt B415 Firmware<m16kt67a
Lenovo Thinkcentre Qt B415
Lenovo Thinkcentre Qt M415 Firmware<m16kt67a
Lenovo Thinkcentre Qt M415
Lenovo Thinkcentre E75 T\/s Firmware<m16kt67a
Lenovo Thinkcentre E75 T\/s
Lenovo Ideacentre 310s-08igm Firmware<=m1tkt31a
Lenovo Ideacentre 310s-08igm
Microsoft Windows 10
Lenovo Ideacentre 510a-15arr Firmware<=o4dkt41a
Lenovo Ideacentre 510a-15arr
Lenovo Ideacentre 510s-07icb Firmware<m22kt46a
Lenovo Ideacentre 510s-07icb
Lenovo Ideacentre 510s-07ick Firmware<m30kt24a
Lenovo Ideacentre 510s-07ick
Lenovo Ideacentre 510s-07ick Firmware<m30kt23a
Lenovo V30a-22iml Firmware<m37kt26a
Lenovo V30a-22iml
Lenovo V330 Firmware<=m1tkt32a
Lenovo V330
Lenovo V50a-24imb Firmware<m36kt27a
Lenovo V50a-24imb
Lenovo V50s-07imb Firmware<m2vkt18a
Lenovo V50s-07imb
Lenovo V50a-22imb Firmware<m36kt27a
Lenovo V50a-22imb
Lenovo V50t-13imb Firmware<o4hkt33a
Lenovo V50t-13imb
Lenovo V50t-13imb G2 Firmware<m3gkt29a
Lenovo V50t-13imb G2
Lenovo V520 Firmware<m16kt67a
Lenovo V520
Lenovo V520s Firmware<m16kt67a
Lenovo V520s
Lenovo V530-15arr Firmware<=o4dkt41a
Lenovo V530-15arr
Lenovo V530-15icr Firmware<m2ykt29a
Lenovo V530-15icr
Lenovo V530s-07icb Firmware<m30kt23a
Lenovo V530s-07icb
Lenovo V530s-07icr Firmware<m30kt23a
Lenovo V530s-07icr
Lenovo V55t-15api Firmware<=o4dkt41a
Lenovo V55t-15api
Lenovo Thinkstation P340 Tiny Firmware<m2wkt49a
Lenovo Thinkstation P340 Tiny
Lenovo Thinkstation P340 Firmware<s08kt3fa
Lenovo Thinkstation P340
Lenovo Thinkstation P520 Firmware<=s03kt49a
Lenovo Thinkstation P520
Lenovo Thinkstation P520c Firmware<=s03kt49a
Lenovo Thinkstation P520c
Lenovo Thinkstation P720 Firmware<s04kt54a\/s04kt54p
Lenovo Thinkstation P720
Lenovo Thinkstation P920 Firmware<s04kt54a\/s04kt54p
Lenovo Thinkstation P920
Remediation
Information
Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-67440.
Event History
Nov 12, 2021
CVE Published
via MITRE·10:05 PM
Data Sourced
via MITRE·10:05 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-3519?
CVE-2021-3519 is classified as a moderate severity vulnerability due to its potential to allow unauthorized access to the boot menu.
2
How do I fix CVE-2021-3519?
To mitigate CVE-2021-3519, disable the "BIOS Password At Boot Device List" setting in the affected Lenovo systems' BIOS.
3
Which Lenovo models are affected by CVE-2021-3519?
CVE-2021-3519 affects several Lenovo desktop models including Ideacentre C5, 3, 5, G5, Creator, and ThinkCentre models.
4
What is the impact of CVE-2021-3519?
The impact of CVE-2021-3519 allows unauthorized users to potentially boot the system from an unprotected device.
5
Are there any available updates for CVE-2021-3519?
Lenovo has released specific firmware updates to address the vulnerability CVE-2021-3519 for affected models.