CVE-2021-3718

VendorlenovoProductthinkpad 11e yoga gen 6 firmware, thinkpad e490 firmware, thinkpad e490s firmware, thinkpad e590 firmware, thinkpad l390 yoga firmware, thinkpad l490 firmware, thinkpad l590 firmware, thinkpad p43s firmware, thinkpad 11e 3rd gen firmware, thinkpad 11e 4th gen celeron firmware, thinkpad 11e 4th gen i3 firmware, thinkpad 11e 4th gen i5 firmware, thinkpad 11e 4th gen i7 firmware, thinkpad 13 gen 2 firmware, thinkpad l13 firmware, thinkpad l13 gen 2 firmware, thinkpad l13 yoga firmware, thinkpad l13 yoga gen 2 firmware, thinkpad l14 firmware, thinkpad l14 gen 1 firmware, thinkpad l15 firmware, thinkpad l15 gen 1 firmware, thinkpad l380 firmware, thinkpad l380 yoga firmware, thinkpad l390 firmwareDiscoveredNov 12, 2021UpdatedNov 21, 2024

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.

View graph Watch Export

CVSS v3.1

4.3 MEDIUM

EPSS

0.22%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Sep 6, 2026

● 0.01pp

0.21% → 0.22% over 2 tracked changes

CVSS v3.1 Detail

Attack VectorPHYSICAL

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

ScopeUNCHANGED

ConfidentialityNONE

IntegrityNONE

AvailabilityHIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Connections

26 relationships

Timeline

disclosure → media coverage

Nov 12, 2021

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024