PT-2021-20534 · Lenovo · Lenovo Notebook+2

Published 2021-07-16 · Updated 2021-07-30 · CVE-2021-3453

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Lenovo Notebook, ThinkPad, and Lenovo Desktop systems (affected versions not specified)

Description: The issue affects certain Lenovo systems, including Notebooks, ThinkPads, and Desktops, where BIOS modules are not protected by Intel Boot Guard. This could allow an attacker with physical access to write to the SPI flash storage.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2021-3453

Affected Products

Lenovo Desktop

Lenovo Notebook

Thinkpad

References · 4

• https://osv.dev/vulnerability/CVE-2021-3453 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3453 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-65529 · Vendor Advisory
• https://t.me/cvenotify/18343 · Telegram Post