CVE-2021-3453

Published: Jul 16, 2021Modified: Jun 17, 2026

4.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 0.9 / Impact: 3.6

Source: NVD

Description

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.

Affected (21)

Products: Lenovo: Thinkpad Helix Firmware, Thinkpad T550 Firmware, Thinkpad W550s Firmware, Thinkpad X1 Carbon 3rd Gen Firmware, Thinkpad X250 Firmware, Thinkpad Yoga 15 Firmware, 730s 13iml Firmware, Ideapad 1 11igl05 Firmware, Ideapad 1 14igl05 Firmware, Ideapad S940 14iil Firmware, Ideapad S940 14iwl Firmware, Ideapad Slim 1 11ast 05 Firmware, Ideapad Slim 1 14ast 05 Firmware, V130 15igm Firmware, V330 15ikb Firmware, V330 15isk Firmware, Yoga S730 13iml Firmware, Yoga S940 14iil Firmware, Yoga S940 14iwl Firmware, Ideacentre Aio 5 24imb05 Firmware, Ideacentre Aio 5 74imb05 Firmware

Lenovo

21 products

Thinkpad Helix Firmware

Thinkpad T550 Firmware

Thinkpad W550s Firmware

Thinkpad X1 Carbon 3rd Gen Firmware

Thinkpad X250 Firmware

Thinkpad Yoga 15 Firmware

730s 13iml Firmware

Ideapad 1 11igl05 Firmware

Ideapad 1 14igl05 Firmware

Ideapad S940 14iil Firmware

Ideapad S940 14iwl Firmware

Ideapad Slim 1 11ast 05 Firmware

Ideapad Slim 1 14ast 05 Firmware

V130 15igm Firmware

V330 15ikb Firmware

V330 15isk Firmware

Yoga S730 13iml Firmware

Yoga S940 14iil Firmware

Yoga S940 14iwl Firmware

Ideacentre Aio 5 24imb05 Firmware

Ideacentre Aio 5 74imb05 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad Helix Firmware	Version n17etb4w

Running on/with	Platform Versions
Lenovo Thinkpad Helix	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T550 Firmware	Version n11et53w

Running on/with	Platform Versions
Lenovo Thinkpad T550	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad W550s Firmware	Version n11et53w

Running on/with	Platform Versions
Lenovo Thinkpad W550s	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Carbon 3rd Gen Firmware	Version n14et55w

Running on/with	Platform Versions
Lenovo Thinkpad X1 Carbon 3rd Gen	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X250 Firmware	Version n10et62w

Running on/with	Platform Versions
Lenovo Thinkpad X250	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad Yoga 15 Firmware	Version n19et65w

Running on/with	Platform Versions
Lenovo Thinkpad Yoga 15	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo 730s 13iml Firmware	All versions

Running on/with	Platform Versions
Lenovo 730s 13iml	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad 1 11igl05 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad 1 11igl05	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad 1 14igl05 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad 1 14igl05	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad S940 14iil Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad S940 14iil	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad S940 14iwl Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad S940 14iwl	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad Slim 1 11ast 05 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad Slim 1 11ast 05	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad Slim 1 14ast 05 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad Slim 1 14ast 05	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V130 15igm Firmware	All versions

Running on/with	Platform Versions
Lenovo V130 15igm	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V330 15ikb Firmware	All versions

Running on/with	Platform Versions
Lenovo V330 15ikb	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V330 15isk Firmware	All versions

Running on/with	Platform Versions
Lenovo V330 15isk	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Yoga S730 13iml Firmware	All versions

Running on/with	Platform Versions
Lenovo Yoga S730 13iml	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Yoga S940 14iil Firmware	All versions

Running on/with	Platform Versions
Lenovo Yoga S940 14iil	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Yoga S940 14iwl Firmware	All versions

Running on/with	Platform Versions
Lenovo Yoga S940 14iwl	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 5 24imb05 Firmware	Before 2021-09-30

Running on/with	Platform Versions
Lenovo Ideacentre Aio 5 24imb05	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 5 74imb05 Firmware	Before 2021-09-30

Running on/with	Platform Versions
Lenovo Ideacentre Aio 5 74imb05	All versions

Related CWEs

CWE-693

Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

References (2)

https://support.lenovo.com/us/en/product_security/LEN-65529

Source: psirt@lenovo.com

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-65529

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.