● CVE — Medium
CVE-2021-3614
VendorlenovoProduct100e 2nd gen firmware, 300e 2nd gen firmware, ideapad 1-11igl05 firmware, ideapad 1-14igl05 firmware, ideapad s940-14iil firmware, ideapad s940-14iwl firmware, ideapad slim 1-11ast-05 firmware, ideapad slim 1-14ast-05 firmware, v130-15igm firmware, v330-15ikb firmware, v330-15isk firmware, ideapad 1-11ada05 firmware, ideapad 1-14ada05 firmware, ideapad 730-13iml firmware, ideapad flex 5-14alc05 firmware, ideapad flex 5-15alc05 firmware, ideapad yoga c940-15irh firmware, ideapad yoga s730-13iml firmware, ideapad yoga s940-14iil firmware, ideapad yoga s940-14iwl firmware, v130-15ikb firmwareDiscoveredJul 16, 2021UpdatedNov 21, 2024
A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.