CVE-2021-3614: Medium severity Lenovo Ideapad 1-11ada05 Firmware vulnerability
Published Jul 16, 2021
·Updated
A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.
Affected Software
84 affected components
Lenovo Ideapad 1-11ada05 Firmware=fqcn19ww
Lenovo Ideapad 1-11ada05
Lenovo Ideapad 1-14ada05 Firmware=fqcn19ww
Lenovo Ideapad 1-14ada05
Lenovo V130-15ikb Firmware
Lenovo V130-15ikb
Lenovo 100e 2nd Gen Firmware
Lenovo 100e 2nd Gen
Lenovo 300e 2nd Gen Firmware
Lenovo 300e 2nd Gen
Lenovo Ideapad 730-13iml Firmware
Lenovo Ideapad 730-13iml
Lenovo Ideapad Flex 5-14alc05 Firmware
Lenovo Ideapad Flex 5-14alc05
Lenovo Ideapad Flex 5-15alc05 Firmware
Lenovo Ideapad Flex 5-15alc05
Lenovo Ideapad 1-11igl05 Firmware
Lenovo Ideapad 1-11igl05
Lenovo Ideapad 1-14igl05 Firmware
Lenovo Ideapad 1-14igl05
Lenovo Ideapad S940-14iil Firmware
Lenovo Ideapad S940-14iil
Lenovo Ideapad S940-14iwl Firmware
Lenovo Ideapad S940-14iwl
Lenovo Ideapad Slim 1-11ast-05 Firmware
Lenovo Ideapad Slim 1-11ast-05
Lenovo Ideapad Slim 1-14ast-05 Firmware
Lenovo Ideapad Slim 1-14ast-05
Lenovo V130-15igm Firmware
Lenovo V130-15igm
Lenovo V330-15ikb Firmware
Lenovo V330-15ikb
Lenovo V330-15isk Firmware
Lenovo V330-15isk
Lenovo Ideapad Yoga C940-15irh Firmware
Lenovo Ideapad Yoga C940-15irh
Lenovo Ideapad Yoga S730-13iml Firmware
Lenovo Ideapad Yoga S730-13iml
Lenovo Ideapad Yoga S940-14iil Firmware
Lenovo Ideapad Yoga S940-14iil
Lenovo Ideapad Yoga S940-14iwl Firmware
Lenovo Ideapad Yoga S940-14iwl
All of the following
Lenovo Ideapad 1-11ada05 Firmware=fqcn19ww
Lenovo Ideapad 1-11ada05
All of the following
Lenovo Ideapad 1-14ada05 Firmware=fqcn19ww
Lenovo Ideapad 1-14ada05
All of the following
Lenovo V130-15ikb Firmware
Lenovo V130-15ikb
All of the following
Lenovo 100e 2nd Gen Firmware
Lenovo 100e 2nd Gen
All of the following
Lenovo 300e 2nd Gen Firmware
Lenovo 300e 2nd Gen
All of the following
Lenovo Ideapad 730-13iml Firmware
Lenovo Ideapad 730-13iml
All of the following
Lenovo Ideapad Flex 5-14alc05 Firmware
Lenovo Ideapad Flex 5-14alc05
All of the following
Lenovo Ideapad Flex 5-15alc05 Firmware
Lenovo Ideapad Flex 5-15alc05
All of the following
Lenovo Ideapad 1-11igl05 Firmware
Lenovo Ideapad 1-11igl05
All of the following
Lenovo Ideapad 1-14igl05 Firmware
Lenovo Ideapad 1-14igl05
All of the following
Lenovo Ideapad S940-14iil Firmware
Lenovo Ideapad S940-14iil
All of the following
Lenovo Ideapad S940-14iwl Firmware
Lenovo Ideapad S940-14iwl
All of the following
Lenovo Ideapad Slim 1-11ast-05 Firmware
Lenovo Ideapad Slim 1-11ast-05
All of the following
Lenovo Ideapad Slim 1-14ast-05 Firmware
Lenovo Ideapad Slim 1-14ast-05
All of the following
Lenovo V130-15igm Firmware
Lenovo V130-15igm
All of the following
Lenovo V330-15ikb Firmware
Lenovo V330-15ikb
All of the following
Lenovo V330-15isk Firmware
Lenovo V330-15isk
All of the following
Lenovo Ideapad Yoga C940-15irh Firmware
Lenovo Ideapad Yoga C940-15irh
All of the following
Lenovo Ideapad Yoga S730-13iml Firmware
Lenovo Ideapad Yoga S730-13iml
All of the following
Lenovo Ideapad Yoga S940-14iil Firmware
Lenovo Ideapad Yoga S940-14iil
All of the following
Lenovo Ideapad Yoga S940-14iwl Firmware
Lenovo Ideapad Yoga S940-14iwl
Event History
Jul 16, 2021
CVE Published
via MITRE·08:30 PM
Data Sourced
via MITRE·08:30 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-3614?
CVE-2021-3614 is a vulnerability that allows an attacker with physical access to Lenovo Notebook systems to elevate privileges during a BIOS update.
2
How severe is CVE-2021-3614?
CVE-2021-3614 has a severity value of 6.8, which is considered medium.
3
Which Lenovo Notebook systems are affected by CVE-2021-3614?
Lenovo Ideapad 1-11ada05 Firmware (version fqcn19ww) and Lenovo Ideapad 1-14ada05 Firmware (version fqcn19ww) are affected by CVE-2021-3614.
4
How can an attacker exploit CVE-2021-3614?
An attacker with physical access can exploit CVE-2021-3614 during a BIOS update performed by Lenovo Vantage.
5
Where can I find more information about CVE-2021-3614?
You can find more information about CVE-2021-3614 on the Lenovo Product Security website.