CVE-2021-3614

Published: Jul 16, 2021Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.

Affected (21)

Products: Lenovo: Ideapad 1 11ada05 Firmware, Ideapad 1 14ada05 Firmware, 100e 2nd Gen Firmware, 300e 2nd Gen Firmware, Ideapad 730 13iml Firmware, Ideapad Flex 5 14alc05 Firmware, Ideapad Flex 5 15alc05 Firmware, Ideapad 1 11igl05 Firmware, Ideapad 1 14igl05 Firmware, Ideapad S940 14iil Firmware, Ideapad S940 14iwl Firmware, Ideapad Slim 1 11ast 05 Firmware, Ideapad Slim 1 14ast 05 Firmware, V130 15igm Firmware, V130 15ikb Firmware, V330 15ikb Firmware, V330 15isk Firmware, Ideapad Yoga C940 15irh Firmware, Ideapad Yoga S730 13iml Firmware, Ideapad Yoga S940 14iil Firmware, Ideapad Yoga S940 14iwl Firmware

Lenovo

21 products

Ideapad 1 11ada05 Firmware

Ideapad 1 14ada05 Firmware

100e 2nd Gen Firmware

300e 2nd Gen Firmware

Ideapad 730 13iml Firmware

Ideapad Flex 5 14alc05 Firmware

Ideapad Flex 5 15alc05 Firmware

Ideapad 1 11igl05 Firmware

Ideapad 1 14igl05 Firmware

Ideapad S940 14iil Firmware

Ideapad S940 14iwl Firmware

Ideapad Slim 1 11ast 05 Firmware

Ideapad Slim 1 14ast 05 Firmware

Ideapad Yoga C940 15irh Firmware

Ideapad Yoga S730 13iml Firmware

Ideapad Yoga S940 14iil Firmware

Ideapad Yoga S940 14iwl Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad 1 11ada05 Firmware	Version fqcn19ww

Running on/with	Platform Versions
Lenovo Ideapad 1 11ada05	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad 1 14ada05 Firmware	Version fqcn19ww

Running on/with	Platform Versions
Lenovo Ideapad 1 14ada05	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo 100e 2nd Gen Firmware	All versions

Running on/with	Platform Versions
Lenovo 100e 2nd Gen	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo 300e 2nd Gen Firmware	All versions

Running on/with	Platform Versions
Lenovo 300e 2nd Gen	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad 730 13iml Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad 730 13iml	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad Flex 5 14alc05 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad Flex 5 14alc05	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad Flex 5 15alc05 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad Flex 5 15alc05	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad 1 11igl05 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad 1 11igl05	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad 1 14igl05 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad 1 14igl05	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad S940 14iil Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad S940 14iil	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad S940 14iwl Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad S940 14iwl	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad Slim 1 11ast 05 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad Slim 1 11ast 05	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad Slim 1 14ast 05 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad Slim 1 14ast 05	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V130 15igm Firmware	All versions

Running on/with	Platform Versions
Lenovo V130 15igm	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V130 15ikb Firmware	All versions

Running on/with	Platform Versions
Lenovo V130 15ikb	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V330 15ikb Firmware	All versions

Running on/with	Platform Versions
Lenovo V330 15ikb	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V330 15isk Firmware	All versions

Running on/with	Platform Versions
Lenovo V330 15isk	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad Yoga C940 15irh Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad Yoga C940 15irh	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad Yoga S730 13iml Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad Yoga S730 13iml	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad Yoga S940 14iil Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad Yoga S940 14iil	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideapad Yoga S940 14iwl Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideapad Yoga S940 14iwl	All versions

Related CWEs

CWE-636

Not Failing Securely ('Failing Open')

When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.

References (2)

https://support.lenovo.com/us/en/product_security/LEN-65529

Source: psirt@lenovo.com

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-65529

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.