Improper authentication in Lenovo Desktop BIOS
Priority LOW 30CWE-287Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.
Summary
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.
Why it matters now
EPSS 0.00238 14th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | Desktop BIOS | various | — | No fix listed | CNA |
- Desktop BIOS VendorLenovo Affected various Fixed in — No fix listed CNA
CPE configurations NVD · 122
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:ideacentre_c5-14mb05_firmware:*:*:*:*:*:*:*:* | before o4hkt33a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_c5-14mb05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_3-07imb05_firmware:*:*:*:*:*:*:*:* | before m2vkt18a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_3-07imb05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_5-14imb05_firmware:*:*:*:*:*:*:*:* | before o4hkt33a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_5-14imb05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_5-14iob6_firmware:*:*:*:*:*:*:*:* | before m3gkt29a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_5-14iob6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_creator_5-14iob6_firmware:*:*:*:*:*:*:*:* | before m3gkt29a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_creator_5-14iob6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:ideacentre_c5-14mb05_firmware:*:*:*:*:*:*:*:* Versions before o4hkt33a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_c5-14mb05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_3-07imb05_firmware:*:*:*:*:*:*:*:* Versions before m2vkt18a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_3-07imb05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_5-14imb05_firmware:*:*:*:*:*:*:*:* Versions before o4hkt33a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_5-14imb05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_5-14iob6_firmware:*:*:*:*:*:*:*:* Versions before m3gkt29a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_5-14iob6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_creator_5-14iob6_firmware:*:*:*:*:*:*:*:* Versions before m3gkt29a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_creator_5-14iob6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Show 112 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:ideacentre_g5-14imb05_firmware:*:*:*:*:*:*:*:* | before o4hkt33a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_g5-14imb05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_gaming_5-14iob6_firmware:*:*:*:*:*:*:*:* | before m3gkt29a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_gaming_5-14iob6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m60e_tiny_firmware:*:*:*:*:*:*:*:* | before m3skt1ea | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m60e_tiny:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m630e_firmware:*:*:*:*:*:*:*:* | before m28kt36a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m630e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m70a_firmware:*:*:*:*:*:*:*:* | up to m2skt21a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m70a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m70s_firmware:*:*:*:*:*:*:*:* | before m2tkt3ca | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m70s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m70t_firmware:*:*:*:*:*:*:*:* | before m2tkt3ca | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m70t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m710e_firmware:*:*:*:*:*:*:*:* | before m1zkt37a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m710e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m710s_firmware:*:*:*:*:*:*:*:* | before m16kt67a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m710s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m710t_firmware:*:*:*:*:*:*:*:* | before m16kt67a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m710t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m720e_firmware:*:*:*:*:*:*:*:* | before m30kt23a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m720e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m75n_firmware:*:*:*:*:*:*:*:* | before m33kt21a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m75n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m75s_gen_2_firmware:*:*:*:*:matisse:*:*:* | before m3bkt24a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m75s_gen_2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m70a_gen_2_firmware:*:*:*:*:*:*:*:* | before m3nkt17a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m70a_gen_2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m70c_firmware:*:*:*:*:*:*:*:* | before m2vkt18a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m70c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m70q_firmware:*:*:*:*:*:*:*:* | before m2wkt49a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m70q:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m75s_gen_2_firmware:*:*:*:*:picasso\/renoir:*:*:* | before m3akt35a | Vulnerable | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m75t_gen_2_firmware:*:*:*:*:matisse:*:*:* | before m3bkt24a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m75t_gen_2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m75t_gen_2_firmware:*:*:*:*:picasso\/renoir:*:*:* | before m3akt35a | Vulnerable | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m80q_firmware:*:*:*:*:*:*:*:* | before m2wkt49a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m80q:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m80s_firmware:*:*:*:*:*:*:*:* | before m2tkt3ca | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m80s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m80t_firmware:*:*:*:*:*:*:*:* | before m2tkt3ca | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m80t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m810z_firmware:*:*:*:*:*:*:*:* | before m1ckt47a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m810z:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m820z_firmware:*:*:*:*:*:*:*:* | before m1nkt57a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m820z:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m90a_firmware:*:*:*:*:*:*:*:* | before m2rkt47a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m90a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m90q_tiny_firmware:*:*:*:*:*:*:*:* | before m2wkt49a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m90a_tiny:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m90s_firmware:*:*:*:*:*:*:*:* | before m2tkt3ca | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m90s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m90t_firmware:*:*:*:*:*:*:*:* | before m2tkt3ca | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m90t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_qt_m410_firmware:*:*:*:*:*:*:*:* | before m16kt67a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_qt_m410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_qt_b415_firmware:*:*:*:*:*:*:*:* | before m16kt67a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_qt_b415:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_qt_m415_firmware:*:*:*:*:*:*:*:* | before m16kt67a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_qt_m415:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_e75_t\/s_firmware:*:*:*:*:*:*:*:* | before m16kt67a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_e75_t\/s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_310s-08igm_firmware:*:*:*:*:*:*:*:* | up to m1tkt31a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_310s-08igm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:o:lenovo:ideacentre_510a-15arr_firmware:*:*:*:*:*:*:*:* | up to o4dkt41a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_510a-15arr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_510s-07icb_firmware:*:*:*:*:*:*:*:* | before m22kt46a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_510s-07icb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_510s-07ick_firmware:*:*:*:*:*:*:*:* | before m30kt24a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_510s-07ick:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_510s-07ick_firmware:*:*:*:*:*:*:*:* | before m30kt23a | Vulnerable | Lenovo |
| cpe:2.3:o:lenovo:v30a-22iml_firmware:*:*:*:*:*:*:*:* | before m37kt26a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v30a-22iml:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v330_firmware:*:*:*:*:*:*:*:* | up to m1tkt32a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v330:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v50a-24imb_firmware:*:*:*:*:*:*:*:* | before m36kt27a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v50a-24imb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v50s-07imb_firmware:*:*:*:*:*:*:*:* | before m2vkt18a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v50s-07imb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v50a-22imb_firmware:*:*:*:*:*:*:*:* | before m36kt27a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v50a-22imb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v50t-13imb_firmware:*:*:*:*:*:*:*:* | before o4hkt33a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v50t-13imb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v50t-13imb_g2_firmware:*:*:*:*:*:*:*:* | before m3gkt29a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v50t-13imb_g2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v520_firmware:*:*:*:*:*:*:*:* | before m16kt67a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v520s_firmware:*:*:*:*:*:*:*:* | before m16kt67a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v520s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v530-15arr_firmware:*:*:*:*:*:*:*:* | up to o4dkt41a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v530-15arr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v530-15icr_firmware:*:*:*:*:*:*:*:* | before m2ykt29a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v530-15icr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v530s-07icb_firmware:*:*:*:*:*:*:*:* | before m30kt23a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v530s-07icb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v530s-07icr_firmware:*:*:*:*:*:*:*:* | before m30kt23a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v530s-07icr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v55t-15api_firmware:*:*:*:*:*:*:*:* | up to o4dkt41a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v55t-15api:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p340_tiny_firmware:*:*:*:*:*:*:*:* | before m2wkt49a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p340_tiny:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p340_firmware:*:*:*:*:*:*:*:* | before s08kt3fa | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p340:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p520_firmware:*:*:*:*:*:*:*:* | up to s03kt49a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p520:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p520c_firmware:*:*:*:*:*:*:*:* | up to s03kt49a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p520c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p720_firmware:*:*:*:*:*:*:*:* | before s04kt54a\/s04kt54p | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p720:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p920_firmware:*:*:*:*:*:*:*:* | before s04kt54a\/s04kt54p | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p920:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:ideacentre_g5-14imb05_firmware:*:*:*:*:*:*:*:* Versions before o4hkt33a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_g5-14imb05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_gaming_5-14iob6_firmware:*:*:*:*:*:*:*:* Versions before m3gkt29a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_gaming_5-14iob6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m60e_tiny_firmware:*:*:*:*:*:*:*:* Versions before m3skt1ea Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m60e_tiny:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m630e_firmware:*:*:*:*:*:*:*:* Versions before m28kt36a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m630e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m70a_firmware:*:*:*:*:*:*:*:* Versions up to m2skt21a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m70a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m70s_firmware:*:*:*:*:*:*:*:* Versions before m2tkt3ca Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m70s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m70t_firmware:*:*:*:*:*:*:*:* Versions before m2tkt3ca Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m70t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m710e_firmware:*:*:*:*:*:*:*:* Versions before m1zkt37a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m710e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m710s_firmware:*:*:*:*:*:*:*:* Versions before m16kt67a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m710s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m710t_firmware:*:*:*:*:*:*:*:* Versions before m16kt67a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m710t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m720e_firmware:*:*:*:*:*:*:*:* Versions before m30kt23a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m720e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m75n_firmware:*:*:*:*:*:*:*:* Versions before m33kt21a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m75n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m75s_gen_2_firmware:*:*:*:*:matisse:*:*:* Versions before m3bkt24a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m75s_gen_2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m70a_gen_2_firmware:*:*:*:*:*:*:*:* Versions before m3nkt17a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m70a_gen_2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m70c_firmware:*:*:*:*:*:*:*:* Versions before m2vkt18a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m70c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m70q_firmware:*:*:*:*:*:*:*:* Versions before m2wkt49a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m70q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m75s_gen_2_firmware:*:*:*:*:picasso\/renoir:*:*:* Versions before m3akt35a Vulnerable ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m75t_gen_2_firmware:*:*:*:*:matisse:*:*:* Versions before m3bkt24a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m75t_gen_2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m75t_gen_2_firmware:*:*:*:*:picasso\/renoir:*:*:* Versions before m3akt35a Vulnerable ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m80q_firmware:*:*:*:*:*:*:*:* Versions before m2wkt49a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m80q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m80s_firmware:*:*:*:*:*:*:*:* Versions before m2tkt3ca Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m80s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m80t_firmware:*:*:*:*:*:*:*:* Versions before m2tkt3ca Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m80t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m810z_firmware:*:*:*:*:*:*:*:* Versions before m1ckt47a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m810z:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m820z_firmware:*:*:*:*:*:*:*:* Versions before m1nkt57a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m820z:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m90a_firmware:*:*:*:*:*:*:*:* Versions before m2rkt47a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m90a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m90q_tiny_firmware:*:*:*:*:*:*:*:* Versions before m2wkt49a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m90a_tiny:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m90s_firmware:*:*:*:*:*:*:*:* Versions before m2tkt3ca Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m90s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m90t_firmware:*:*:*:*:*:*:*:* Versions before m2tkt3ca Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m90t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_qt_m410_firmware:*:*:*:*:*:*:*:* Versions before m16kt67a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_qt_m410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_qt_b415_firmware:*:*:*:*:*:*:*:* Versions before m16kt67a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_qt_b415:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_qt_m415_firmware:*:*:*:*:*:*:*:* Versions before m16kt67a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_qt_m415:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_e75_t\/s_firmware:*:*:*:*:*:*:*:* Versions before m16kt67a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_e75_t\/s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_310s-08igm_firmware:*:*:*:*:*:*:*:* Versions up to m1tkt31a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_310s-08igm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:o:lenovo:ideacentre_510a-15arr_firmware:*:*:*:*:*:*:*:* Versions up to o4dkt41a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_510a-15arr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_510s-07icb_firmware:*:*:*:*:*:*:*:* Versions before m22kt46a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_510s-07icb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_510s-07ick_firmware:*:*:*:*:*:*:*:* Versions before m30kt24a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_510s-07ick:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_510s-07ick_firmware:*:*:*:*:*:*:*:* Versions before m30kt23a Vulnerable ·Lenovo
- cpe:2.3:o:lenovo:v30a-22iml_firmware:*:*:*:*:*:*:*:* Versions before m37kt26a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v30a-22iml:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v330_firmware:*:*:*:*:*:*:*:* Versions up to m1tkt32a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v50a-24imb_firmware:*:*:*:*:*:*:*:* Versions before m36kt27a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v50a-24imb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v50s-07imb_firmware:*:*:*:*:*:*:*:* Versions before m2vkt18a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v50s-07imb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v50a-22imb_firmware:*:*:*:*:*:*:*:* Versions before m36kt27a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v50a-22imb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v50t-13imb_firmware:*:*:*:*:*:*:*:* Versions before o4hkt33a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v50t-13imb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v50t-13imb_g2_firmware:*:*:*:*:*:*:*:* Versions before m3gkt29a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v50t-13imb_g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v520_firmware:*:*:*:*:*:*:*:* Versions before m16kt67a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v520s_firmware:*:*:*:*:*:*:*:* Versions before m16kt67a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v520s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v530-15arr_firmware:*:*:*:*:*:*:*:* Versions up to o4dkt41a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v530-15arr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v530-15icr_firmware:*:*:*:*:*:*:*:* Versions before m2ykt29a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v530-15icr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v530s-07icb_firmware:*:*:*:*:*:*:*:* Versions before m30kt23a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v530s-07icb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v530s-07icr_firmware:*:*:*:*:*:*:*:* Versions before m30kt23a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v530s-07icr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v55t-15api_firmware:*:*:*:*:*:*:*:* Versions up to o4dkt41a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v55t-15api:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p340_tiny_firmware:*:*:*:*:*:*:*:* Versions before m2wkt49a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p340_tiny:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p340_firmware:*:*:*:*:*:*:*:* Versions before s08kt3fa Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p340:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p520_firmware:*:*:*:*:*:*:*:* Versions up to s03kt49a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p520c_firmware:*:*:*:*:*:*:*:* Versions up to s03kt49a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p520c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p720_firmware:*:*:*:*:*:*:*:* Versions before s04kt54a\/s04kt54p Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p720:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p920_firmware:*:*:*:*:*:*:*:* Versions before s04kt54a\/s04kt54p Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p920:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-3519
- 2026-10-03 Alias added: GHSA-jxph-jj63-5vcv
References
More Lenovo Ideacentre 3-07imb05 Firmware vulnerabilities
- TI-2022-23838 Out-of-bounds write in Lenovo ThinkStation BIOS CVSS 3.1HIGH 7.8
- TI-2023-24127 Out-of-bounds read in Lenovo BIOS CVSS 3.1MEDIUM 6.7
- TI-2023-24126 Out-of-bounds read in Lenovo BIOS CVSS 3.1MEDIUM 6.7
- TI-2023-24125 Out-of-bounds read in Lenovo BIOS CVSS 3.1MEDIUM 6.7
- TI-2023-24124 Out-of-bounds read in Lenovo BIOS CVSS 3.1MEDIUM 6.7
- TI-2023-24123 Out-of-bounds read in Lenovo BIOS CVSS 3.1MEDIUM 6.7
Sources
- CVE-2021-3519 · CVE Program
- CVE-2021-3519 · NVD
- FIRST EPSS
- GHSA-jxph-jj63-5vcv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences