CVE-2021-3971
Medium
Description
A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable.
SeverityMedium
CVSS6.7
Exploit probability—
ProductLenovo Ideapad 3-14ada05 Firmware
PublishedApr 22, 2022
First seenApr 22, 2022
Weakness typeCWE-489CWE-489
How to fix
Update
- lenovo ideapad_3-14ada05_firmwaree8cn33ww or later
- lenovo ideapad_3-14ada6_firmwarehbcn21ww or later
- lenovo ideapad_3-14alc6_firmwareglcn43ww or later
- lenovo ideapad_3-14are05_firmwaredzcn42ww or later
- lenovo ideapad_3-15ada6_firmwarehbcn21ww or later
- lenovo ideapad_3-15alc6_firmwareglcn43ww or later
- lenovo ideapad_3-15are05_firmwaredzcn42ww or later
- lenovo ideapad_3-15igl05_firmwaredvcn23ww or later
- lenovo ideapad_3-17ada05_firmwaree8cn33ww or later
- lenovo ideapad_3-17ada6_firmwarehbcn21ww or later
- lenovo ideapad_3-17alc6_firmwareglcn43ww or later
- lenovo ideapad_3-17are05_firmwaredzcn42ww or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo ideapad_3-14ada05_firmware | v < e8cn33ww | e8cn33ww |
| lenovo ideapad_3-14ada6_firmware | v < hbcn21ww | hbcn21ww |
| lenovo ideapad_3-14alc6_firmware | v < glcn43ww | glcn43ww |
| lenovo ideapad_3-14are05_firmware | v < dzcn42ww | dzcn42ww |
| lenovo ideapad_3-15ada6_firmware | v < hbcn21ww | hbcn21ww |
| lenovo ideapad_3-15alc6_firmware | v < glcn43ww | glcn43ww |
| lenovo ideapad_3-15are05_firmware | v < dzcn42ww | dzcn42ww |
| lenovo ideapad_3-15igl05_firmware | v < dvcn23ww | dvcn23ww |
| lenovo ideapad_3-17ada05_firmware | v < e8cn33ww | e8cn33ww |
| lenovo ideapad_3-17ada6_firmware | v < hbcn21ww | hbcn21ww |
| lenovo ideapad_3-17alc6_firmware | v < glcn43ww | glcn43ww |
| lenovo ideapad_3-17are05_firmware | v < dzcn42ww | dzcn42ww |
| lenovo ideapad_3-17iil05_firmware | v < emcn52ww | emcn52ww |
| lenovo ideapad_3-15ada05_firmware | v < e8cn33ww | e8cn33ww |
| lenovo l3-15itl6_firmware | v < gfcn23ww | gfcn23ww |
| lenovo l340-15irh_firmware | v < bgcn35ww | bgcn35ww |
| lenovo l340-15iwl_firmware | v < atcn46ww | atcn46ww |
| lenovo l340-15iwl_touch_firmware | v < atcn46ww | atcn46ww |
| lenovo l340-17irh_firmware | v < bgcn35ww | bgcn35ww |
| lenovo l340-17iwl_firmware | v < atcn46ww | atcn46ww |
| lenovo legion_5_pro-16ach6_firmware | v < hhcn25ww | hhcn25ww |
| lenovo legion_5_pro-16ach6h_firmware | v < gkcn51ww | gkcn51ww |
| lenovo legion_5_pro-16ith6_firmware | v < h1cn46ww | h1cn46ww |
| lenovo legion_5_pro-16ith6h_firmware | v < h1cn46ww | h1cn46ww |
| lenovo legion_5-15ach6_firmware | v < hhcn25ww | hhcn25ww |
| lenovo legion_5-15ach6a_firmware | v < g9cn28ww | g9cn28ww |
| lenovo legion_5-15ach6h_firmware | v < gkcn51ww | gkcn51ww |
| lenovo legion_5-15ith6_firmware | v < h1cn46ww | h1cn46ww |
| lenovo legion_5-15ith6h_firmware | v < h1cn46ww | h1cn46ww |
| lenovo legion_5-17ach6_firmware | v < hhcn25ww | hhcn25ww |
| lenovo legion_5-17ach6h_firmware | v < gkcn51ww | gkcn51ww |
| lenovo legion_5-17ith6_firmware | v < h1cn46ww | h1cn46ww |
| lenovo legion_5-17ith6h_firmware | v < h1cn46ww | h1cn46ww |
| lenovo legion_7-16achg6_firmware | v < gkcn51ww | gkcn51ww |
| lenovo legion_7-16ithg6_firmware | v < gkcn51ww | gkcn51ww |
| lenovo legion_y540-15irh_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y540-15irh-pg0_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y540-17irh_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y540-17irh-pg0_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y545_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y545-pg0_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y7000-2019_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y7000-2019-pg0_firmware | v < bhcn44ww | bhcn44ww |
| lenovo s145-14api_firmware | v < bucn31ww | bucn31ww |
| lenovo s145-14ast_firmware | v < aycn26ww | aycn26ww |
| lenovo s145-14igm_firmware | v < awcn28ww | awcn28ww |
| lenovo s145-14iil_firmware | v < dkcn54ww | dkcn54ww |
| lenovo s145-15api_firmware | v < bucn31ww | bucn31ww |
| lenovo s145-15ast_firmware | v < aycn26ww | aycn26ww |
| lenovo s145-15igm_firmware | v < awcn28ww | awcn28ww |
| lenovo s145-15iil_firmware | v < dkcn54ww | dkcn54ww |
| lenovo s540-13api_firmware | v < cxcn34ww | cxcn34ww |
| lenovo v14_g2-acl_firmware | v < glcn43ww | glcn43ww |
| lenovo v14-ada_firmware | v < e8cn33ww | e8cn33ww |
| lenovo v14-are_firmware | v < dzcn42ww | dzcn42ww |
| lenovo v14-igl_firmware | v < dvcn23ww | dvcn23ww |
| lenovo v14-iil_firmware | v < dkcn54ww | dkcn54ww |
| lenovo v140-15iwl_firmware | v < atcn46ww | atcn46ww |
| lenovo v15_g2-alc_firmware | v < glcn43ww | glcn43ww |
| lenovo v15-ada_firmware | v < e8cn33ww | e8cn33ww |
| lenovo v15-igl_firmware | v < dvcn23ww | dvcn23ww |
| lenovo v15-iil_firmware | v < dkcn54ww | dkcn54ww |
| lenovo v17-iil_firmware | v < emcn52ww | emcn52ww |
| lenovo v340-17iwl_firmware | v < atcn46ww | atcn46ww |
| lenovo yoga_slim_7_pro-14ach5_d_firmware | v < hecn24ww | hecn24ww |
| lenovo yoga_slim_7_pro-14ach5_od_firmware | v < hecn24ww | hecn24ww |
| lenovo ideapad_3-14iil05_firmware | v < dvcn23ww | dvcn23ww |
| lenovo ideapad_3-14igl05_firmware | v < emcn52ww | emcn52ww |
| lenovo ideapad_3-15iil05_firmware | v < emcn52ww | emcn52ww |
| lenovo ideapad_5-15are05_firmware | v < e7cn44ww | e7cn44ww |
| lenovo ideapad_creator_5-15imh05_firmware | v < egcn36ww | egcn36ww |
| lenovo ideapad_gaming_3-15arh05_firmware | v < fccn17ww | fccn17ww |
| lenovo ideapad_gaming_3-15imh05_firmware | v < egcn36ww | egcn36ww |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.