A potential vulnerability by a driver used during older manufacturing processes on some…
Priority LOW 32CWE-489Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable.
Why it matters now
EPSS 0.01239 69th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | Notebook BIOS | various | — | No fix listed | CNA |
- Notebook BIOS VendorLenovo Affected various Fixed in — No fix listed CNA
CPE configurations NVD · 146
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:ideapad_3-14ada05_firmware:*:*:*:*:*:*:*:* | before e8cn33ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-14ada05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-14ada6_firmware:*:*:*:*:*:*:*:* | before hbcn21ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-14ada6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:*:*:*:*:*:*:*:* | before glcn43ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-14alc6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-14are05_firmware:*:*:*:*:*:*:*:* | before dzcn42ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-14are05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-15ada6_firmware:*:*:*:*:*:*:*:* | before hbcn21ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-15ada6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:ideapad_3-14ada05_firmware:*:*:*:*:*:*:*:* Versions before e8cn33ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-14ada05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-14ada6_firmware:*:*:*:*:*:*:*:* Versions before hbcn21ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-14ada6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:*:*:*:*:*:*:*:* Versions before glcn43ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-14alc6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-14are05_firmware:*:*:*:*:*:*:*:* Versions before dzcn42ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-14are05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-15ada6_firmware:*:*:*:*:*:*:*:* Versions before hbcn21ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-15ada6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Show 136 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:*:*:*:*:*:*:*:* | before glcn43ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-15alc6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-15are05_firmware:*:*:*:*:*:*:*:* | before dzcn42ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-15are05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-15igl05_firmware:*:*:*:*:*:*:*:* | before dvcn23ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-15igl05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-17ada05_firmware:*:*:*:*:*:*:*:* | before e8cn33ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-17ada05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-17ada6_firmware:*:*:*:*:*:*:*:* | before hbcn21ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-17ada6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware:*:*:*:*:*:*:*:* | before glcn43ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-17alc6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-17are05_firmware:*:*:*:*:*:*:*:* | before dzcn42ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-17are05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-17iil05_firmware:*:*:*:*:*:*:*:* | before emcn52ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-17iil05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-15ada05_firmware:*:*:*:*:*:*:*:* | before e8cn33ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-15ada05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:l3-15itl6_firmware:*:*:*:*:*:*:*:* | before gfcn23ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:l3-15itl6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:l340-15irh_firmware:*:*:*:*:*:*:*:* | before bgcn35ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:l340-15irh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:l340-15iwl_firmware:*:*:*:*:*:*:*:* | before atcn46ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:l340-15iwl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:l340-15iwl_touch_firmware:*:*:*:*:*:*:*:* | before atcn46ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:l340-15iwl_touch:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:l340-17irh_firmware:*:*:*:*:*:*:*:* | before bgcn35ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:l340-17irh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:l340-17iwl_firmware:*:*:*:*:*:*:*:* | before atcn46ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:l340-17iwl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_5_pro-16ach6_firmware:*:*:*:*:*:*:*:* | before hhcn25ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_5_pro-16ach6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_5_pro-16ach6h_firmware:*:*:*:*:*:*:*:* | before gkcn51ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_5_pro-16ach6h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_5_pro-16ith6_firmware:*:*:*:*:*:*:*:* | before h1cn46ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_5_pro-16ith6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_5_pro-16ith6h_firmware:*:*:*:*:*:*:*:* | before h1cn46ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_5_pro-16ith6h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_5-15ach6_firmware:*:*:*:*:*:*:*:* | before hhcn25ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_5-15ach6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_5-15ach6a_firmware:*:*:*:*:*:*:*:* | before g9cn28ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_5-15ach6a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_5-15ach6h_firmware:*:*:*:*:*:*:*:* | before gkcn51ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_5-15ach6h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_5-15ith6_firmware:*:*:*:*:*:*:*:* | before h1cn46ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_5-15ith6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_5-15ith6h_firmware:*:*:*:*:*:*:*:* | before h1cn46ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_5-15ith6h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_5-17ach6_firmware:*:*:*:*:*:*:*:* | before hhcn25ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_5-17ach6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_5-17ach6h_firmware:*:*:*:*:*:*:*:* | before gkcn51ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_5-17ach6h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_5-17ith6_firmware:*:*:*:*:*:*:*:* | before h1cn46ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_5-17ith6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_5-17ith6h_firmware:*:*:*:*:*:*:*:* | before h1cn46ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_5-17ith6h:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_7-16achg6_firmware:*:*:*:*:*:*:*:* | before gkcn51ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_7-16achg6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_7-16ithg6_firmware:*:*:*:*:*:*:*:* | before gkcn51ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_7-16ithg6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_y540-15irh_firmware:*:*:*:*:*:*:*:* | before bhcn44ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_y540-15irh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_y540-15irh-pg0_firmware:*:*:*:*:*:*:*:* | before bhcn44ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_y540-15irh-pg0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_y540-17irh_firmware:*:*:*:*:*:*:*:* | before bhcn44ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_y540-17irh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_y540-17irh-pg0_firmware:*:*:*:*:*:*:*:* | before bhcn44ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_y540-17irh-pg0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_y545_firmware:*:*:*:*:*:*:*:* | before bhcn44ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_y545:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_y545-pg0_firmware:*:*:*:*:*:*:*:* | before bhcn44ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_y545-pg0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_y7000-2019_firmware:*:*:*:*:*:*:*:* | before bhcn44ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_y7000-2019:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_y7000-2019-pg0_firmware:*:*:*:*:*:*:*:* | before bhcn44ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_y7000-2019-pg0:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s145-14api_firmware:*:*:*:*:*:*:*:* | before bucn31ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s145-14api:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s145-14ast_firmware:*:*:*:*:*:*:*:* | before aycn26ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s145-14ast:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s145-14igm_firmware:*:*:*:*:*:*:*:* | before awcn28ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s145-14igm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s145-14iil_firmware:*:*:*:*:*:*:*:* | before dkcn54ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s145-14iil:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s145-15api_firmware:*:*:*:*:*:*:*:* | before bucn31ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s145-15api:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s145-15ast_firmware:*:*:*:*:*:*:*:* | before aycn26ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s145-15ast:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s145-15igm_firmware:*:*:*:*:*:*:*:* | before awcn28ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s145-15igm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s145-15iil_firmware:*:*:*:*:*:*:*:* | before dkcn54ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s145-15iil:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:s540-13api_firmware:*:*:*:*:*:*:*:* | before cxcn34ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:s540-13api:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v14_g2-acl_firmware:*:*:*:*:*:*:*:* | before glcn43ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v14_g2-acl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v14-ada_firmware:*:*:*:*:*:*:*:* | before e8cn33ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v14-ada:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v14-are_firmware:*:*:*:*:*:*:*:* | before dzcn42ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v14-are:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v14-igl_firmware:*:*:*:*:*:*:*:* | before dvcn23ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v14-igl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v14-iil_firmware:*:*:*:*:*:*:*:* | before dkcn54ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v14-iil:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v140-15iwl_firmware:*:*:*:*:*:*:*:* | before atcn46ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v140-15iwl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v15_g2-alc_firmware:*:*:*:*:*:*:*:* | before glcn43ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v15_g2-alc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v15-ada_firmware:*:*:*:*:*:*:*:* | before e8cn33ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v15-ada:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v15-igl_firmware:*:*:*:*:*:*:*:* | before dvcn23ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v15-igl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v15-iil_firmware:*:*:*:*:*:*:*:* | before dkcn54ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v15-iil:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v17-iil_firmware:*:*:*:*:*:*:*:* | before emcn52ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v17-iil:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v340-17iwl_firmware:*:*:*:*:*:*:*:* | before atcn46ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v340-17iwl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_d_firmware:*:*:*:*:*:*:*:* | before hecn24ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7_pro-14ach5_d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_od_firmware:*:*:*:*:*:*:*:* | before hecn24ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:yoga_slim_7_pro-14ach5_od:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-14iil05_firmware:*:*:*:*:*:*:*:* | before dvcn23ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-14iil05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-14igl05_firmware:*:*:*:*:*:*:*:* | before emcn52ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-14igl05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-15iil05_firmware:*:*:*:*:*:*:*:* | before emcn52ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_3-15iil05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_5-15are05_firmware:*:*:*:*:*:*:*:* | before e7cn44ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_5-15are05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_creator_5-15imh05_firmware:*:*:*:*:*:*:*:* | before egcn36ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_creator_5-15imh05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_gaming_3-15arh05_firmware:*:*:*:*:*:*:*:* | before fccn17ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_gaming_3-15arh05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideapad_gaming_3-15imh05_firmware:*:*:*:*:*:*:*:* | before egcn36ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideapad_gaming_3-15imh05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:*:*:*:*:*:*:*:* Versions before glcn43ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-15alc6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-15are05_firmware:*:*:*:*:*:*:*:* Versions before dzcn42ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-15are05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-15igl05_firmware:*:*:*:*:*:*:*:* Versions before dvcn23ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-15igl05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-17ada05_firmware:*:*:*:*:*:*:*:* Versions before e8cn33ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-17ada05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-17ada6_firmware:*:*:*:*:*:*:*:* Versions before hbcn21ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-17ada6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware:*:*:*:*:*:*:*:* Versions before glcn43ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-17alc6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-17are05_firmware:*:*:*:*:*:*:*:* Versions before dzcn42ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-17are05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-17iil05_firmware:*:*:*:*:*:*:*:* Versions before emcn52ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-17iil05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-15ada05_firmware:*:*:*:*:*:*:*:* Versions before e8cn33ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-15ada05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:l3-15itl6_firmware:*:*:*:*:*:*:*:* Versions before gfcn23ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:l3-15itl6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:l340-15irh_firmware:*:*:*:*:*:*:*:* Versions before bgcn35ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:l340-15irh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:l340-15iwl_firmware:*:*:*:*:*:*:*:* Versions before atcn46ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:l340-15iwl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:l340-15iwl_touch_firmware:*:*:*:*:*:*:*:* Versions before atcn46ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:l340-15iwl_touch:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:l340-17irh_firmware:*:*:*:*:*:*:*:* Versions before bgcn35ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:l340-17irh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:l340-17iwl_firmware:*:*:*:*:*:*:*:* Versions before atcn46ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:l340-17iwl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_5_pro-16ach6_firmware:*:*:*:*:*:*:*:* Versions before hhcn25ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_5_pro-16ach6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_5_pro-16ach6h_firmware:*:*:*:*:*:*:*:* Versions before gkcn51ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_5_pro-16ach6h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_5_pro-16ith6_firmware:*:*:*:*:*:*:*:* Versions before h1cn46ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_5_pro-16ith6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_5_pro-16ith6h_firmware:*:*:*:*:*:*:*:* Versions before h1cn46ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_5_pro-16ith6h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_5-15ach6_firmware:*:*:*:*:*:*:*:* Versions before hhcn25ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_5-15ach6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_5-15ach6a_firmware:*:*:*:*:*:*:*:* Versions before g9cn28ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_5-15ach6a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_5-15ach6h_firmware:*:*:*:*:*:*:*:* Versions before gkcn51ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_5-15ach6h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_5-15ith6_firmware:*:*:*:*:*:*:*:* Versions before h1cn46ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_5-15ith6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_5-15ith6h_firmware:*:*:*:*:*:*:*:* Versions before h1cn46ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_5-15ith6h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_5-17ach6_firmware:*:*:*:*:*:*:*:* Versions before hhcn25ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_5-17ach6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_5-17ach6h_firmware:*:*:*:*:*:*:*:* Versions before gkcn51ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_5-17ach6h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_5-17ith6_firmware:*:*:*:*:*:*:*:* Versions before h1cn46ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_5-17ith6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_5-17ith6h_firmware:*:*:*:*:*:*:*:* Versions before h1cn46ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_5-17ith6h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_7-16achg6_firmware:*:*:*:*:*:*:*:* Versions before gkcn51ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_7-16achg6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_7-16ithg6_firmware:*:*:*:*:*:*:*:* Versions before gkcn51ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_7-16ithg6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_y540-15irh_firmware:*:*:*:*:*:*:*:* Versions before bhcn44ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_y540-15irh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_y540-15irh-pg0_firmware:*:*:*:*:*:*:*:* Versions before bhcn44ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_y540-15irh-pg0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_y540-17irh_firmware:*:*:*:*:*:*:*:* Versions before bhcn44ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_y540-17irh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_y540-17irh-pg0_firmware:*:*:*:*:*:*:*:* Versions before bhcn44ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_y540-17irh-pg0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_y545_firmware:*:*:*:*:*:*:*:* Versions before bhcn44ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_y545:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_y545-pg0_firmware:*:*:*:*:*:*:*:* Versions before bhcn44ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_y545-pg0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_y7000-2019_firmware:*:*:*:*:*:*:*:* Versions before bhcn44ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_y7000-2019:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_y7000-2019-pg0_firmware:*:*:*:*:*:*:*:* Versions before bhcn44ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_y7000-2019-pg0:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s145-14api_firmware:*:*:*:*:*:*:*:* Versions before bucn31ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s145-14api:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s145-14ast_firmware:*:*:*:*:*:*:*:* Versions before aycn26ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s145-14ast:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s145-14igm_firmware:*:*:*:*:*:*:*:* Versions before awcn28ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s145-14igm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s145-14iil_firmware:*:*:*:*:*:*:*:* Versions before dkcn54ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s145-14iil:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s145-15api_firmware:*:*:*:*:*:*:*:* Versions before bucn31ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s145-15api:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s145-15ast_firmware:*:*:*:*:*:*:*:* Versions before aycn26ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s145-15ast:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s145-15igm_firmware:*:*:*:*:*:*:*:* Versions before awcn28ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s145-15igm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s145-15iil_firmware:*:*:*:*:*:*:*:* Versions before dkcn54ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s145-15iil:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:s540-13api_firmware:*:*:*:*:*:*:*:* Versions before cxcn34ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:s540-13api:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v14_g2-acl_firmware:*:*:*:*:*:*:*:* Versions before glcn43ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v14_g2-acl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v14-ada_firmware:*:*:*:*:*:*:*:* Versions before e8cn33ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v14-ada:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v14-are_firmware:*:*:*:*:*:*:*:* Versions before dzcn42ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v14-are:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v14-igl_firmware:*:*:*:*:*:*:*:* Versions before dvcn23ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v14-igl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v14-iil_firmware:*:*:*:*:*:*:*:* Versions before dkcn54ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v14-iil:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v140-15iwl_firmware:*:*:*:*:*:*:*:* Versions before atcn46ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v140-15iwl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v15_g2-alc_firmware:*:*:*:*:*:*:*:* Versions before glcn43ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v15_g2-alc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v15-ada_firmware:*:*:*:*:*:*:*:* Versions before e8cn33ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v15-ada:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v15-igl_firmware:*:*:*:*:*:*:*:* Versions before dvcn23ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v15-igl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v15-iil_firmware:*:*:*:*:*:*:*:* Versions before dkcn54ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v15-iil:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v17-iil_firmware:*:*:*:*:*:*:*:* Versions before emcn52ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v17-iil:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v340-17iwl_firmware:*:*:*:*:*:*:*:* Versions before atcn46ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v340-17iwl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_d_firmware:*:*:*:*:*:*:*:* Versions before hecn24ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7_pro-14ach5_d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_od_firmware:*:*:*:*:*:*:*:* Versions before hecn24ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:yoga_slim_7_pro-14ach5_od:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-14iil05_firmware:*:*:*:*:*:*:*:* Versions before dvcn23ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-14iil05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-14igl05_firmware:*:*:*:*:*:*:*:* Versions before emcn52ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-14igl05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-15iil05_firmware:*:*:*:*:*:*:*:* Versions before emcn52ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_3-15iil05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_5-15are05_firmware:*:*:*:*:*:*:*:* Versions before e7cn44ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_5-15are05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_creator_5-15imh05_firmware:*:*:*:*:*:*:*:* Versions before egcn36ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_creator_5-15imh05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_gaming_3-15arh05_firmware:*:*:*:*:*:*:*:* Versions before fccn17ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_gaming_3-15arh05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideapad_gaming_3-15imh05_firmware:*:*:*:*:*:*:*:* Versions before egcn36ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideapad_gaming_3-15imh05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-3971
- 2026-10-03 Alias added: GHSA-v9mm-m35w-j8fm
References
More Lenovo Ideapad 3-14ada05 Firmware vulnerabilities
- TI-2022-01752 Heap-based buffer overflow in Lenovo BIOS CVSS 3.1HIGH 7.8
- TI-2021-02869 A potential vulnerability by a driver used during manufacturing process on some consumer… CVSS 3.1MEDIUM 6.7
- TI-2021-02867 Improper input validation in Lenovo Notebook BIOS CVSS 3.1MEDIUM 6.7
Sources
- CVE-2021-3971 · CVE Program
- CVE-2021-3971 · NVD
- FIRST EPSS
- GHSA-v9mm-m35w-j8fm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences