What’s Vulnerable › Vulnerabilities

CVE-2021-3614

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-07-16 · updated 2026-06-17
• Weakness: CWE-636

Description

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.

Affected products

• Lenovo 100E 2Nd Gen Firmware: all versions
• Lenovo 300E 2Nd Gen Firmware: all versions
• Lenovo Ideapad 1-11Ada05 Firmware: fqcn19ww
• Lenovo Ideapad 1-11Igl05 Firmware: all versions
• Lenovo Ideapad 1-14Ada05 Firmware: fqcn19ww
• Lenovo Ideapad 1-14Igl05 Firmware: all versions
• Lenovo Ideapad 730-13Iml Firmware: all versions
• Lenovo Ideapad Flex 5-14Alc05 Firmware: all versions
• Lenovo Ideapad Flex 5-15Alc05 Firmware: all versions
• Lenovo Ideapad S940-14Iil Firmware: all versions
• Lenovo Ideapad S940-14Iwl Firmware: all versions
• Lenovo Ideapad Slim 1-11Ast-05 Firmware: all versions
• Lenovo Ideapad Slim 1-14Ast-05 Firmware: all versions
• Lenovo Ideapad Yoga C940-15Irh Firmware: all versions
• Lenovo Ideapad Yoga S730-13Iml Firmware: all versions
• Lenovo Ideapad Yoga S940-14Iil Firmware: all versions
• Lenovo Ideapad Yoga S940-14Iwl Firmware: all versions
• Lenovo V130-15Igm Firmware: all versions
• Lenovo V130-15Ikb Firmware: all versions
• Lenovo V330-15Ikb Firmware: all versions
• Lenovo V330-15Isk Firmware: all versions

References

• https://support.lenovo.com/us/en/product_security/LEN-65529
• https://support.lenovo.com/us/en/product_security/LEN-65529

Get alerted when CVE-2021-3614 or the next vulnerability affects your stack