4.7

CVE-2021-3718

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Thinkpad 11e 3rd Gen Firmware SwEdition braswell Version <= 1.22
   Lenovo ≫ Thinkpad 11e 3rd Gen Version -
   Microsoft ≫ Windows 10 Version -
   Microsoft ≫ Windows 7 Version - HwPlatform x64
   Microsoft ≫ Windows 8.1 Version -
Lenovo ≫ Thinkpad 11e 3rd Gen Firmware SwEdition skylate Version <= 1.29
   Lenovo ≫ Thinkpad 11e 3rd Gen Version -
   Microsoft ≫ Windows 10 Version -
   Microsoft ≫ Windows 7 Version - HwPlatform x64
   Microsoft ≫ Windows 8.1 Version -
Lenovo ≫ Thinkpad 11e 4th Gen I3 Firmware Version <= 1.22
   Lenovo ≫ Thinkpad 11e 4th Gen I3 Version -
   Microsoft ≫ Windows 10 Version -
Lenovo ≫ Thinkpad 11e 4th Gen I7 Firmware Version <= 1.22
   Lenovo ≫ Thinkpad 11e 4th Gen I7 Version -
   Microsoft ≫ Windows 10 Version -
Lenovo ≫ Thinkpad 11e 4th Gen I5 Firmware Version <= 1.22
   Lenovo ≫ Thinkpad 11e 4th Gen I5 Version -
   Microsoft ≫ Windows 10 Version -
Lenovo ≫ Thinkpad 11e 4th Gen Celeron Firmware Version <= 1.27
   Lenovo ≫ Thinkpad 11e 4th Gen Celeron Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad 11e Yoga Gen 6 Firmware Version <= 1.12
   Lenovo ≫ Thinkpad 11e Yoga Gen 6 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad 13 Gen 2 Firmware Version <= 1.29
   Lenovo ≫ Thinkpad 13 Gen 2 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad E490 Firmware Version <= 1.30
   Lenovo ≫ Thinkpad E490 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad E490s Firmware Version <= 1.30
   Lenovo ≫ Thinkpad E490s Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad E590 Firmware Version <= 1.30
   Lenovo ≫ Thinkpad E590 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L13 Firmware Version <= 1.31
   Lenovo ≫ Thinkpad L13 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L13 Gen 2 Firmware SwEdition non-vpro Version <= 1.11
   Lenovo ≫ Thinkpad L13 Gen 2 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L13 Gen 2 Firmware SwEdition vpro Version <= 1.08
   Lenovo ≫ Thinkpad L13 Gen 2 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L13 Yoga Firmware Version <= 1.31
   Lenovo ≫ Thinkpad L13 Yoga Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L13 Yoga Gen 2 Firmware SwEdition non-vpro Version <= 1.11
   Lenovo ≫ Thinkpad L13 Yoga Gen 2 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L13 Yoga Gen 2 Firmware SwEdition vpro Version <= 1.08
   Lenovo ≫ Thinkpad L13 Yoga Gen 2 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L14 Gen 1 Firmware Version < 1.15
   Lenovo ≫ Thinkpad L14 Gen 1 Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L14 Firmware Version < 1.20.1.17
   Lenovo ≫ Thinkpad L14 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L15 Gen 1 Firmware Version < 1.15
   Lenovo ≫ Thinkpad L15 Gen 1 Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L15 Firmware Version < 1.20.1.17
   Lenovo ≫ Thinkpad L15 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L380 Firmware Version <= 1.26
   Lenovo ≫ Thinkpad L380 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L380 Yoga Firmware Version <= 1.26
   Lenovo ≫ Thinkpad L380 Yoga Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L390 Yoga Firmware Version <= 1.35
   Lenovo ≫ Thinkpad L390 Yoga Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L390 Firmware Version <= 1.35
   Lenovo ≫ Thinkpad L390 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L490 Firmware Version < 1.26
   Lenovo ≫ Thinkpad L490 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad L590 Firmware Version < 1.26
   Lenovo ≫ Thinkpad L590 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad P43s Firmware Version < n2iet96w
   Lenovo ≫ Thinkpad P43s Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad P52 Firmware Version < n2cet60w
   Lenovo ≫ Thinkpad P52 Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad P53s Firmware Version < n2iet96w
   Lenovo ≫ Thinkpad P53s Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad P72 Firmware Version < n2cet60w
   Lenovo ≫ Thinkpad P72 Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad S5 2nd Gen Firmware Version <= 1.28
   Lenovo ≫ Thinkpad S5 2nd Gen Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad T460 Firmware Version <= 1.43.1.11
   Lenovo ≫ Thinkpad T460 Version -
   Microsoft ≫ Windows 10 Version -
   Microsoft ≫ Windows 7 Version - HwPlatform x64
   Microsoft ≫ Windows 7 Version - HwPlatform x86
   Microsoft ≫ Windows 8.1 Version -
Lenovo ≫ Thinkpad T490 Firmware Version < n2iet96w
   Lenovo ≫ Thinkpad T490 Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad T590 Firmware Version < n2iet96w
   Lenovo ≫ Thinkpad T590 Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad S2 Gen 6 Firmware Version <= 2021-09-30
   Lenovo ≫ Thinkpad S2 Gen 6 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad S2 Yoga Gen 6 Firmware Version <= 2021-09-30
   Lenovo ≫ Thinkpad S2 Yoga Gen 6 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad X12 Detachable Gen 1 Firmware Version < 1.16
   Lenovo ≫ Thinkpad X12 Detachable Gen 1 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad X260 Firmware Version <= 1.47\/1.15
   Lenovo ≫ Thinkpad X260 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
   Microsoft ≫ Windows 7 Version -
Lenovo ≫ Thinkpad X380 Yoga Firmware Version <= 1.34
   Lenovo ≫ Thinkpad X380 Yoga Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad X390 Yoga Firmware Version < n2let87w
   Lenovo ≫ Thinkpad X390 Yoga Version -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad 11e 5th Gen Firmware Version <= 1.13
   Lenovo ≫ Thinkpad 11e 5th Gen Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Lenovo ≫ Thinkpad 11e 5th Gen Firmware Version <= 1.13
   Lenovo ≫ Thinkpad Yoga 370 Version -
   Microsoft ≫ Windows 10 Version - HwPlatform x64
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.111
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.7 3.4 6.9
AV:L/AC:M/Au:N/C:N/I:N/A:C
Lenovo 4.3 0.7 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-232 Improper Handling of Undefined Values

The product does not handle or incorrectly handles when a value is not defined or supported for the associated parameter, field, or argument name.

https://support.lenovo.com/us/en/product_security/LEN-72619
Vendor Advisory