CVE-2021-3972
Medium
Description
A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
SeverityMedium
CVSS6.7
Exploit probability—
ProductLenovo Ideapad 3-14ada05 Firmware
PublishedApr 22, 2022
First seenApr 22, 2022
Weakness typeCWE-489CWE-489
How to fix
Update
- lenovo ideapad_3-14ada05_firmwaree8cn33ww or later
- lenovo ideapad_3-14ada6_firmwarehbcn21ww or later
- lenovo ideapad_3-14alc6_firmwareglcn43ww or later
- lenovo ideapad_3-14are05_firmwaredzcn42ww or later
- lenovo ideapad_3-15ada6_firmwarehbcn21ww or later
- lenovo ideapad_3-15alc6_firmwareglcn43ww or later
- lenovo ideapad_3-15are05_firmwaredzcn42ww or later
- lenovo ideapad_3-15igl05_firmwaredvcn23ww or later
- lenovo ideapad_3-17ada05_firmwaree8cn33ww or later
- lenovo ideapad_3-17ada6_firmwarehbcn21ww or later
- lenovo ideapad_3-17alc6_firmwareglcn43ww or later
- lenovo ideapad_3-17are05_firmwaredzcn42ww or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo ideapad_3-14ada05_firmware | v < e8cn33ww | e8cn33ww |
| lenovo ideapad_3-14ada6_firmware | v < hbcn21ww | hbcn21ww |
| lenovo ideapad_3-14alc6_firmware | v < glcn43ww | glcn43ww |
| lenovo ideapad_3-14are05_firmware | v < dzcn42ww | dzcn42ww |
| lenovo ideapad_3-15ada6_firmware | v < hbcn21ww | hbcn21ww |
| lenovo ideapad_3-15alc6_firmware | v < glcn43ww | glcn43ww |
| lenovo ideapad_3-15are05_firmware | v < dzcn42ww | dzcn42ww |
| lenovo ideapad_3-15igl05_firmware | v < dvcn23ww | dvcn23ww |
| lenovo ideapad_3-17ada05_firmware | v < e8cn33ww | e8cn33ww |
| lenovo ideapad_3-17ada6_firmware | v < hbcn21ww | hbcn21ww |
| lenovo ideapad_3-17alc6_firmware | v < glcn43ww | glcn43ww |
| lenovo ideapad_3-17are05_firmware | v < dzcn42ww | dzcn42ww |
| lenovo ideapad_3-17iil05_firmware | v < emcn52ww | emcn52ww |
| lenovo ideapad_3-17itl6_firmware | v < ggcn33ww | ggcn33ww |
| lenovo ideapad_3-15ada05_firmware | v < e8cn33ww | e8cn33ww |
| lenovo l3_15iml05_firmware | v < ejcn27ww | ejcn27ww |
| lenovo l3-15itl6_firmware | v < gfcn23ww | gfcn23ww |
| lenovo l340-15irh_firmware | v < bgcn35ww | bgcn35ww |
| lenovo l340-15iwl_firmware | v < atcn46ww | atcn46ww |
| lenovo l340-15iwl_touch_firmware | v < atcn46ww | atcn46ww |
| lenovo l340-17irh_firmware | v < bgcn35ww | bgcn35ww |
| lenovo l340-17iwl_firmware | v < atcn46ww | atcn46ww |
| lenovo legion_5_pro-16ach6_firmware | v < hhcn25ww | hhcn25ww |
| lenovo legion_5_pro-16ach6h_firmware | v < gkcn51ww | gkcn51ww |
| lenovo legion_5_pro-16ith6_firmware | v < h1cn46ww | h1cn46ww |
| lenovo legion_5_pro-16ith6h_firmware | v < h1cn46ww | h1cn46ww |
| lenovo legion_5-15ach6_firmware | v < hhcn25ww | hhcn25ww |
| lenovo legion_5-15ach6a_firmware | v < g9cn28ww | g9cn28ww |
| lenovo legion_5-15ach6h_firmware | v < gkcn51ww | gkcn51ww |
| lenovo legion_5-15imh6_firmware | v < g8cn19ww | g8cn19ww |
| lenovo legion_5-15ith6_firmware | v < h1cn46ww | h1cn46ww |
| lenovo legion_5-15ith6h_firmware | v < h1cn46ww | h1cn46ww |
| lenovo legion_5-17ach6_firmware | v < hhcn25ww | hhcn25ww |
| lenovo legion_5-17ach6h_firmware | v < gkcn51ww | gkcn51ww |
| lenovo legion_5-17ith6_firmware | v < h1cn46ww | h1cn46ww |
| lenovo legion_5-17ith6h_firmware | v < h1cn46ww | h1cn46ww |
| lenovo legion_7-16achg6_firmware | v < gkcn51ww | gkcn51ww |
| lenovo legion_7-16ithg6_firmware | v < gkcn51ww | gkcn51ww |
| lenovo legion_s7-15ach6_firmware | v < hacn35ww | hacn35ww |
| lenovo legion_y540-15irh_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y540-15irh-pg0_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y540-17irh_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y540-17irh-pg0_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y545_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y545-pg0_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y7000-2019_firmware | v < bhcn44ww | bhcn44ww |
| lenovo legion_y7000-2019-pg0_firmware | v < bhcn44ww | bhcn44ww |
| lenovo s14_g2_itl_firmware | v < ggcn33ww | ggcn33ww |
| lenovo s145-14api_firmware | v < bucn31ww | bucn31ww |
| lenovo s145-14ast_firmware | v < aycn26ww | aycn26ww |
| lenovo s145-14igm_firmware | v < awcn28ww | awcn28ww |
| lenovo s145-14iil_firmware | v < dkcn54ww | dkcn54ww |
| lenovo s145-15api_firmware | v < bucn31ww | bucn31ww |
| lenovo s145-15ast_firmware | v < aycn26ww | aycn26ww |
| lenovo s145-15igm_firmware | v < awcn28ww | awcn28ww |
| lenovo s145-15iil_firmware | v < dkcn54ww | dkcn54ww |
| lenovo s540-13api_firmware | v < cxcn34ww | cxcn34ww |
| lenovo s540-13iml_firmware | No range specified | — |
| lenovo slim_7_pro-14ihu5_firmware | No range specified | — |
| lenovo slim_9-14itl05_firmware | No range specified | — |
| lenovo v14_g1-iml_firmware | v < dxcn41ww | dxcn41ww |
| lenovo v14_g2-acl_firmware | v < glcn43ww | glcn43ww |
| lenovo v14_g2-itl_firmware | v < ggcn33ww | ggcn33ww |
| lenovo v14-ada_firmware | v < e8cn33ww | e8cn33ww |
| lenovo v14-are_firmware | v < dzcn42ww | dzcn42ww |
| lenovo v14-igl_firmware | v < dvcn23ww | dvcn23ww |
| lenovo v14-iil_firmware | v < dkcn54ww | dkcn54ww |
| lenovo v140-15iwl_firmware | v < atcn46ww | atcn46ww |
| lenovo v15_g1-iml_firmware | v < dxcn41ww | dxcn41ww |
| lenovo v15_g2-alc_firmware | v < glcn43ww | glcn43ww |
| lenovo v15_g2-itl_firmware | v < ggcn33ww | ggcn33ww |
| lenovo v15-ada_firmware | v < e8cn33ww | e8cn33ww |
| lenovo v15-igl_firmware | v < dvcn23ww | dvcn23ww |
| lenovo v15-iil_firmware | v < dkcn54ww | dkcn54ww |
| lenovo v17_g2-itl_firmware | v < ggcn33ww | ggcn33ww |
| lenovo v17-iil_firmware | v < emcn52ww | emcn52ww |
| lenovo v340-17iwl_firmware | v < atcn46ww | atcn46ww |
| lenovo yoga_7-14acn6_firmware | v < h9cn26ww | h9cn26ww |
| lenovo yoga_c740-14iml_firmware | v < bncn44ww | bncn44ww |
| lenovo yoga_c740-15iml_firmware | v < bncn44ww | bncn44ww |
| lenovo yoga_c940-14iil_firmware | No range specified | — |
| lenovo yoga_slim_7_pro-14ach5_d_firmware | v < hecn24ww | hecn24ww |
| lenovo yoga_slim_7_pro-14ach5_firmware | v < gzcn27ww | gzcn27ww |
| lenovo yoga_slim_7_pro-14ach5_o_firmware | v < gzcn27ww | gzcn27ww |
| lenovo yoga_slim_7_pro-14ach5_od_firmware | v < hecn24ww | hecn24ww |
| lenovo yoga_slim_7_pro-14arh5_firmware | v < g7cn21ww | g7cn21ww |
| lenovo yoga_slim_7_pro-14ihu5_firmware | No range specified | — |
| lenovo yoga_slim_7_pro-14ihu5_o_firmware | No range specified | — |
| lenovo yoga_slim_7_pro-14itl5_firmware | No range specified | — |
| lenovo yoga_slim_9-14itl05_firmware | No range specified | — |
| lenovo ideapad_3-14iil05_firmware | v < dvcn23ww | dvcn23ww |
| lenovo ideapad_3-14igl05_firmware | v < emcn52ww | emcn52ww |
| lenovo ideapad_3-14iml05_firmware | v < dxcn41ww | dxcn41ww |
| lenovo ideapad_3-14itl05_firmware | v < gccn26ww | gccn26ww |
| lenovo ideapad_3-14itl6_firmware | v < ggcn33ww | ggcn33ww |
| lenovo ideapad_3-15iil05_firmware | v < emcn52ww | emcn52ww |
| lenovo ideapad_3-15iml05_firmware | v < dxcn41ww | dxcn41ww |
| lenovo ideapad_3-15itl05_firmware | v < gccn26ww | gccn26ww |
| lenovo ideapad_3-15itl6_firmware | v < ggcn33ww | ggcn33ww |
| lenovo ideapad_3-17iml05_firmware | v < dxcn41ww | dxcn41ww |
| lenovo ideapad_5-15are05_firmware | v < e7cn44ww | e7cn44ww |
| lenovo ideapad_5-15iil05_firmware | v < dpcn54ww | dpcn54ww |
| lenovo ideapad_creator_5-15imh05_firmware | v < egcn36ww | egcn36ww |
| lenovo ideapad_gaming_3-15arh05_firmware | v < fccn17ww | fccn17ww |
| lenovo ideapad_gaming_3-15imh05_firmware | v < egcn36ww | egcn36ww |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.