medium
6.9
CWE
287
Advisory Published
Updated

CVE-2021-3519

First published: Fri Nov 12 2021(Updated: )

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.

Credit: psirt@lenovo.com

Affected SoftwareAffected VersionHow to fix
Lenovo Ideacentre C5-14mb05 Firmware<o4hkt33a
Lenovo Ideacentre C5-14mb05
Lenovo Ideacentre 3-07imb05 Firmware<m2vkt18a
Lenovo Ideacentre 3-07imb05
Lenovo Ideacentre 5-14imb05 Firmware<o4hkt33a
Lenovo Ideacentre 5-14imb05
Lenovo Ideacentre 5-14iob6 Firmware<m3gkt29a
Lenovo Ideacentre 5-14iob6
Lenovo Ideacentre Creator 5-14iob6 Firmware<m3gkt29a
Lenovo Ideacentre Creator 5-14iob6
Lenovo Ideacentre G5-14imb05 Firmware<o4hkt33a
Lenovo Ideacentre G5-14imb05
Lenovo Ideacentre Gaming 5-14iob6 Firmware<m3gkt29a
Lenovo Ideacentre Gaming 5-14iob6
Lenovo Thinkcentre M60e Tiny Firmware<m3skt1ea
Lenovo Thinkcentre M60e Tiny
Lenovo Thinkcentre M630e Firmware<m28kt36a
Lenovo Thinkcentre M630e
Lenovo Thinkcentre M70a Firmware<=m2skt21a
Lenovo Thinkcentre M70a
Lenovo Thinkcentre M70s Firmware<m2tkt3ca
Lenovo Thinkcentre M70s
Lenovo Thinkcentre M70t Firmware<m2tkt3ca
Lenovo Thinkcentre M70t
Lenovo Thinkcentre M710e Firmware<m1zkt37a
Lenovo Thinkcentre M710e
Lenovo Thinkcentre M710s Firmware<m16kt67a
Lenovo Thinkcentre M710s
Lenovo Thinkcentre M710t Firmware<m16kt67a
Lenovo Thinkcentre M710t
Lenovo Thinkcentre M720e Firmware<m30kt23a
Lenovo Thinkcentre M720e
Lenovo Thinkcentre M75n Firmware<m33kt21a
Lenovo Thinkcentre M75n
Lenovo Thinkcentre M75s Gen 2 Firmware<m3bkt24a
Lenovo Thinkcentre M75s Gen 2
Lenovo Thinkcentre M70a Gen 2 Firmware<m3nkt17a
Lenovo Thinkcentre M70a Gen 2
Lenovo Thinkcentre M70c Firmware<m2vkt18a
Lenovo Thinkcentre M70c
Lenovo Thinkcentre M70q Firmware<m2wkt49a
Lenovo Thinkcentre M70q
Lenovo Thinkcentre M75s Gen 2 Firmware<m3akt35a
Lenovo Thinkcentre M75t Gen 2 Firmware<m3bkt24a
Lenovo Thinkcentre M75t Gen 2
Lenovo Thinkcentre M75t Gen 2 Firmware<m3akt35a
Lenovo Thinkcentre M80q Firmware<m2wkt49a
Lenovo Thinkcentre M80q
Lenovo Thinkcentre M80s Firmware<m2tkt3ca
Lenovo Thinkcentre M80s
Lenovo Thinkcentre M80t Firmware<m2tkt3ca
Lenovo Thinkcentre M80t
Lenovo Thinkcentre M810z Firmware<m1ckt47a
Lenovo Thinkcentre M810z
Lenovo Thinkcentre M820z Firmware<m1nkt57a
Lenovo Thinkcentre M820z
Lenovo Thinkcentre M90a Firmware<m2rkt47a
Lenovo Thinkcentre M90a
Lenovo Thinkcentre M90q Tiny Firmware<m2wkt49a
Lenovo Thinkcentre M90a Tiny
Lenovo Thinkcentre M90s Firmware<m2tkt3ca
Lenovo Thinkcentre M90s
Lenovo Thinkcentre M90t Firmware<m2tkt3ca
Lenovo Thinkcentre M90t
Lenovo Thinkcentre Qt M410 Firmware<m16kt67a
Lenovo Thinkcentre Qt M410
Lenovo Thinkcentre Qt B415 Firmware<m16kt67a
Lenovo Thinkcentre Qt B415
Lenovo Thinkcentre Qt M415 Firmware<m16kt67a
Lenovo Thinkcentre Qt M415
Lenovo Thinkcentre E75 T\/s Firmware<m16kt67a
Lenovo Thinkcentre E75 T\/s
Lenovo Ideacentre 310s-08igm Firmware<=m1tkt31a
Lenovo Ideacentre 310s-08igm
Microsoft Windows 10
Lenovo Ideacentre 510a-15arr Firmware<=o4dkt41a
Lenovo Ideacentre 510a-15arr
Lenovo Ideacentre 510s-07icb Firmware<m22kt46a
Lenovo Ideacentre 510s-07icb
Lenovo Ideacentre 510s-07ick Firmware<m30kt24a
Lenovo Ideacentre 510s-07ick
Lenovo Ideacentre 510s-07ick Firmware<m30kt23a
Lenovo V30a-22iml Firmware<m37kt26a
Lenovo V30a-22iml
Lenovo V330 Firmware<=m1tkt32a
Lenovo V330
Lenovo V50a-24imb Firmware<m36kt27a
Lenovo V50a-24imb
Lenovo V50s-07imb Firmware<m2vkt18a
Lenovo V50s-07imb
Lenovo V50a-22imb Firmware<m36kt27a
Lenovo V50a-22imb
Lenovo V50t-13imb Firmware<o4hkt33a
Lenovo V50t-13imb
Lenovo V50t-13imb G2 Firmware<m3gkt29a
Lenovo V50t-13imb G2
Lenovo V520 Firmware<m16kt67a
Lenovo V520
Lenovo V520s Firmware<m16kt67a
Lenovo V520s
Lenovo V530-15arr Firmware<=o4dkt41a
Lenovo V530-15arr
Lenovo V530-15icr Firmware<m2ykt29a
Lenovo V530-15icr
Lenovo V530s-07icb Firmware<m30kt23a
Lenovo V530s-07icb
Lenovo V530s-07icr Firmware<m30kt23a
Lenovo V530s-07icr
Lenovo V55t-15api Firmware<=o4dkt41a
Lenovo V55t-15api
Lenovo Thinkstation P340 Tiny Firmware<m2wkt49a
Lenovo Thinkstation P340 Tiny
Lenovo Thinkstation P340 Firmware<s08kt3fa
Lenovo Thinkstation P340
Lenovo Thinkstation P520 Firmware<=s03kt49a
Lenovo Thinkstation P520
Lenovo Thinkstation P520c Firmware<=s03kt49a
Lenovo Thinkstation P520c
Lenovo Thinkstation P720 Firmware<s04kt54a\/s04kt54p
Lenovo Thinkstation P720
Lenovo Thinkstation P920 Firmware<s04kt54a\/s04kt54p
Lenovo Thinkstation P920

Remedy

Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-67440.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203