4.6

CVE-2021-3453

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Thinkpad Helix Firmware Version n17etb4w
   Lenovo ≫ Thinkpad Helix Version -
Lenovo ≫ Thinkpad T550 Firmware Version n11et53w
   Lenovo ≫ Thinkpad T550 Version -
Lenovo ≫ Thinkpad W550s Firmware Version n11et53w
   Lenovo ≫ Thinkpad W550s Version -
Lenovo ≫ Thinkpad X250 Firmware Version n10et62w
   Lenovo ≫ Thinkpad X250 Version -
Lenovo ≫ Thinkpad Yoga 15 Firmware Version n19et65w
   Lenovo ≫ Thinkpad Yoga 15 Version -
Lenovo ≫ 730s-13iml Firmware Version -
   Lenovo ≫ 730s-13iml Version -
Lenovo ≫ Ideapad 1-11igl05 Firmware Version -
   Lenovo ≫ Ideapad 1-11igl05 Version -
Lenovo ≫ Ideapad 1-14igl05 Firmware Version -
   Lenovo ≫ Ideapad 1-14igl05 Version -
Lenovo ≫ Ideapad S940-14iil Firmware Version -
   Lenovo ≫ Ideapad S940-14iil Version -
Lenovo ≫ Ideapad S940-14iwl Firmware Version -
   Lenovo ≫ Ideapad S940-14iwl Version -
Lenovo ≫ V130-15igm Firmware Version -
   Lenovo ≫ V130-15igm Version -
Lenovo ≫ V330-15ikb Firmware Version -
   Lenovo ≫ V330-15ikb Version -
Lenovo ≫ V330-15isk Firmware Version -
   Lenovo ≫ V330-15isk Version -
Lenovo ≫ Yoga S730-13iml Firmware Version -
   Lenovo ≫ Yoga S730-13iml Version -
Lenovo ≫ Yoga S940-14iil Firmware Version -
   Lenovo ≫ Yoga S940-14iil Version -
Lenovo ≫ Yoga S940-14iwl Firmware Version -
   Lenovo ≫ Yoga S940-14iwl Version -
Lenovo ≫ Ideacentre Aio 5-24imb05 Firmware Version < 2021-09-30
   Lenovo ≫ Ideacentre Aio 5-24imb05 Version -
Lenovo ≫ Ideacentre Aio 5-74imb05 Firmware Version < 2021-09-30
   Lenovo ≫ Ideacentre Aio 5-74imb05 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.143
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
Lenovo 6.8 0.9 5.9
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-693 Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

https://support.lenovo.com/us/en/product_security/LEN-65529
Vendor Advisory