CVE-2021-3614
First published: Fri Jul 16 2021(Updated: )
A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.
Credit: psirt@lenovo.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Lenovo Ideapad 1-11ada05 | =fqcn19ww | |
| Lenovo Ideapad 1-11ADA05 Firmware | ||
| Lenovo Ideapad 1-14ada05 | =fqcn19ww | |
| Lenovo Ideapad 1-14ADA05 Firmware | ||
| Lenovo v130-15ikb firmware | ||
| Lenovo v130-15ikb | ||
| Lenovo 100E 2nd Gen Firmware | ||
| Lenovo 100E 2nd Gen Firmware | ||
| Lenovo 300e 2nd Gen Firmware | ||
| Lenovo 300e 2nd Gen Firmware | ||
| Lenovo Ideapad 730-13IML | ||
| Lenovo Ideapad 730-13IML | ||
| Lenovo Ideapad Flex 5 14ALC05 | ||
| Lenovo Ideapad Flex 5 14ALC05 | ||
| Lenovo Ideapad Flex 5-15ALC05 | ||
| Lenovo Ideapad Flex 5-15ALC05 Firmware | ||
| Lenovo Ideapad 1-14igl05 | ||
| Lenovo Ideapad 1-11IGL05 | ||
| Lenovo Ideapad 1-14igl05 | ||
| Lenovo Ideapad 1-11IGL05 | ||
| Lenovo Ideapad S940-14IIL | ||
| Lenovo Ideapad S940-14IIL | ||
| Lenovo Ideapad Yoga S940-14iwl Firmware | ||
| Lenovo Ideapad Yoga S940-14iwl | ||
| Lenovo Ideapad Slim 1-11ast-05 | ||
| Lenovo Ideapad Slim 1-11ast-05 | ||
| Lenovo Ideapad Slim 1-14ast-05 | ||
| Lenovo Ideapad Slim 1-14ast-05 | ||
| Lenovo v130-15igm firmware | ||
| Lenovo v130-15igm firmware | ||
| Lenovo V330 Firmware | ||
| Lenovo v330-15ast | ||
| Lenovo V330 Firmware | ||
| Lenovo v330-15isk firmware | ||
| Lenovo Yoga C940 Firmware | ||
| Lenovo Yoga C940-15IRH | ||
| Lenovo IdeaPad Yoga S730-13IML | ||
| Lenovo Yoga S730-13IML Firmware | ||
| Lenovo Ideapad S940-14IIL Firmware | ||
| Lenovo Ideapad S940-14IIL | ||
| Lenovo Ideapad Yoga S940-14iwl | ||
| Lenovo Ideapad Yoga S940-14iwl Firmware |
Remedy
Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-65529.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-3614?
CVE-2021-3614 is a vulnerability that allows an attacker with physical access to Lenovo Notebook systems to elevate privileges during a BIOS update.
How severe is CVE-2021-3614?
CVE-2021-3614 has a severity value of 6.8, which is considered medium.
Which Lenovo Notebook systems are affected by CVE-2021-3614?
Lenovo Ideapad 1-11ada05 Firmware (version fqcn19ww) and Lenovo Ideapad 1-14ada05 Firmware (version fqcn19ww) are affected by CVE-2021-3614.
How can an attacker exploit CVE-2021-3614?
An attacker with physical access can exploit CVE-2021-3614 during a BIOS update performed by Lenovo Vantage.
Where can I find more information about CVE-2021-3614?
You can find more information about CVE-2021-3614 on the Lenovo Product Security website.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/remedy
- agent/last-modified-date
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/lenovo
- canonical/lenovo ideapad 1-11ada05
- version/lenovo ideapad 1-11ada05/fqcn19ww
- canonical/lenovo ideapad 1-11ada05 firmware
- canonical/lenovo ideapad 1-14ada05
- version/lenovo ideapad 1-14ada05/fqcn19ww
- canonical/lenovo ideapad 1-14ada05 firmware
- canonical/lenovo v130-15ikb firmware
- canonical/lenovo v130-15ikb
- canonical/lenovo 100e 2nd gen firmware
- canonical/lenovo 300e 2nd gen firmware
- canonical/lenovo ideapad 730-13iml
- canonical/lenovo ideapad flex 5 14alc05
- canonical/lenovo ideapad flex 5-15alc05
- canonical/lenovo ideapad flex 5-15alc05 firmware
- canonical/lenovo ideapad 1-14igl05
- canonical/lenovo ideapad 1-11igl05
- canonical/lenovo ideapad s940-14iil
- canonical/lenovo ideapad yoga s940-14iwl firmware
- canonical/lenovo ideapad yoga s940-14iwl
- canonical/lenovo ideapad slim 1-11ast-05
- canonical/lenovo ideapad slim 1-14ast-05
- canonical/lenovo v130-15igm firmware
- canonical/lenovo v330 firmware
- canonical/lenovo v330-15ast
- canonical/lenovo v330-15isk firmware
- canonical/lenovo yoga c940 firmware
- canonical/lenovo yoga c940-15irh
- canonical/lenovo ideapad yoga s730-13iml
- canonical/lenovo yoga s730-13iml firmware
- canonical/lenovo ideapad s940-14iil firmware