Skip to content
Sign in
6.7 Medium

CVE-2021-3972 A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS…

Description

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Affected products and versions

Product Affected versions Fixed in
Notebook BIOS Versions not published

Other CVEs of Notebook BIOS

The 5 CVEs of Notebook BIOS →
CVE-2023-5912 A potential memory leakage vulnerability was reported in some Lenovo Notebook products that may allow a local attacker… 6.7 Medium CVE-2021-3971 A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices… 6.7 Medium CVE-2021-3970 A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models… 6.7 Medium CVE-2021-3614 A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to… 6.4 Medium
Track this CVE