Stack-based buffer overflow in Lenovo 100w Gen 3 Laptop BIOS
Priority LOW 31CWE-121Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.
Summary
A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00171 6th percentileScored 2026-11-07
Fix Fixed 100w Gen 3 Laptop (Lenovo) BIOS (Lenovo): GACN48WW100w Gen 4 Laptop (Lenovo) BIOS (Lenovo): L2CN34WW/L3CN34WW+44 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | 100w Gen 3 Laptop (Lenovo) BIOS | before GACN48WW | GACN48WW | Patch available | CNA |
| Lenovo | 100w Gen 4 Laptop (Lenovo) BIOS | before L2CN34WW/L3CN34WW | L2CN34WW/L3CN34WW | Patch available | CNA |
| Lenovo | 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS | before JACN41WW | JACN41WW | Patch available | CNA |
| Lenovo | 13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS | before KBCN29WW | KBCN29WW | Patch available | CNA |
| Lenovo | 14W Gen 2 Laptop (Lenovo) BIOS | before H0CN29WW | H0CN29WW | Patch available | CNA |
| Lenovo | 300w Gen 3 Laptop (Lenovo) BIOS | before GACN48WW | GACN48WW | Patch available | CNA |
| Lenovo | 300w Yoga Gen 4 Laptop (Lenovo) BIOS | before L2CN34WW/L3CN34WW | L2CN34WW/L3CN34WW | Patch available | CNA |
| Lenovo | 500w Yoga Gen 4 Laptop (Lenovo) BIOS | before L2CN34WW/L3CN34WW | L2CN34WW/L3CN34WW | Patch available | CNA |
| Lenovo | Flex 5-14ITL05 Laptop (ideapad) BIOS | before FXCN47WW | FXCN47WW | Patch available | CNA |
| Lenovo | Flex 5-15ITL05 Laptop (ideapad) BIOS | before FXCN47WW | FXCN47WW | Patch available | CNA |
| Lenovo | IdeaPad 1 14ALC7 Laptop BIOS | before JTCN54WW | JTCN54WW | Patch available | CNA |
| Lenovo | IdeaPad 1 15ALC7 Laptop BIOS | before JTCN54WW | JTCN54WW | Patch available | CNA |
| Lenovo | IdeaPad 1-11IGL05 Laptop BIOS | before DWCN31WW | DWCN31WW | Patch available | CNA |
| Lenovo | IdeaPad 1-14IGL05 Laptop BIOS | before DWCN31WW | DWCN31WW | Patch available | CNA |
| Lenovo | IdeaPad 3 14ABA7 Laptop BIOS | before JTCN54WW | JTCN54WW | Patch available | CNA |
| Lenovo | IdeaPad 3 15ABA7 Laptop BIOS | before JTCN54WW | JTCN54WW | Patch available | CNA |
| Lenovo | IdeaPad 3 17ABA7 Laptop BIOS | before JTCN54WW | JTCN54WW | Patch available | CNA |
| Lenovo | IdeaPad 3-14ALC6 Laptop BIOS | up to GLCN63WW | — | No fix listed | CNA |
| Lenovo | IdeaPad 3-15ALC6 Laptop BIOS | up to GLCN63WW | — | No fix listed | CNA |
| Lenovo | IdeaPad 3-17ALC6 Laptop BIOS | up to GLCN63WW | — | No fix listed | CNA |
| Lenovo | ideapad 5-15ALC05 Laptop BIOS | before H2CN35WW | H2CN35WW | Patch available | CNA |
| Lenovo | IdeaPad Flex 5 14ABR8 BIOS | before L7CN21WW | L7CN21WW | Patch available | CNA |
| Lenovo | IdeaPad Flex 5 14ALC7 Laptop BIOS | before JCCN40WW | JCCN40WW | Patch available | CNA |
| Lenovo | IdeaPad Flex 5 14IAU7 Laptop BIOS | before J7CN48WW | J7CN48WW | Patch available | CNA |
| Lenovo | IdeaPad Flex 5 14IRU8 BIOS | before L6CN24WW | L6CN24WW | Patch available | CNA |
| Lenovo | IdeaPad Flex 5 16ABR8 BIOS | before L7CN21WW | L7CN21WW | Patch available | CNA |
| Lenovo | IdeaPad Flex 5 16ALC7 BIOS | before JCCN40WW | JCCN40WW | Patch available | CNA |
| Lenovo | IdeaPad Flex 5 16IAU7 BIOS | before J7CN48WW | J7CN48WW | Patch available | CNA |
| Lenovo | IdeaPad Flex 5 16IRU8 BIOS | before L6CN24WW | L6CN24WW | Patch available | CNA |
| Lenovo | IdeaPad Slim 3 14ABR8 BIOS | up to KYCN32WW | — | No fix listed | CNA |
| Lenovo | IdeaPad Slim 3 14AMN8 BIOS | before L1CN41WW | L1CN41WW | Patch available | CNA |
| Lenovo | IdeaPad Slim 3 15ABR8 BIOS | up to KYCN32WW | — | No fix listed | CNA |
| Lenovo | IdeaPad Slim 3 15AMN8 BIOS | before L1CN41WW | L1CN41WW | Patch available | CNA |
| Lenovo | IdeaPad Slim 3 16ABR8 BIOS | up to KYCN32WW | — | No fix listed | CNA |
| Lenovo | IdeaPad Slim 5 Light 14ABR8 BIOS | up to L9CN26WW | — | No fix listed | CNA |
| Lenovo | K14 G2 IRU BIOS | before MMCN36WW | MMCN36WW | Patch available | CNA |
| Lenovo | Lenovo Flex 7 14IAU7 BIOS | before J7CN48WW | J7CN48WW | Patch available | CNA |
| Lenovo | Lenovo Flex 7 14IRU8 BIOS | before L6CN24WW | L6CN24WW | Patch available | CNA |
| Lenovo | Lenovo V14 G3 ABA Laptop BIOS | before JTCN54WW | JTCN54WW | Patch available | CNA |
| Lenovo | Lenovo V14 G4 ABP BIOS | before MSCN16WW | MSCN16WW | Patch available | CNA |
| Lenovo | Lenovo V14 G4 AMN BIOS | before L1CN41WW | L1CN41WW | Patch available | CNA |
| Lenovo | Lenovo V15 G3 ABA Laptop BIOS | before JTCN54WW | JTCN54WW | Patch available | CNA |
| Lenovo | Lenovo V15 G4 ABP BIOS | before MSCN16WW | MSCN16WW | Patch available | CNA |
| Lenovo | Lenovo V15 G4 AMN BIOS | before L1CN41WW | L1CN41WW | Patch available | CNA |
| Lenovo | ThinkBook 13s G4 ARB BIOS | before HZCN55WW | HZCN55WW | Patch available | CNA |
| Lenovo | ThinkBook 13s G4 IAP BIOS | before HWCN52WW | HWCN52WW | Patch available | CNA |
| Lenovo | ThinkBook 13x G2 IAP Laptop BIOS | before HXCN57WW | HXCN57WW | Patch available | CNA |
| Lenovo | ThinkBook 14 G6 ABP BIOS | before MNCN27WW | MNCN27WW | Patch available | CNA |
| Lenovo | ThinkBook 14 G6 IRL BIOS | before MMCN36WW | MMCN36WW | Patch available | CNA |
| Lenovo | ThinkBook 16 G6 ABP BIOS | before MNCN27WW | MNCN27WW | Patch available | CNA |
| Lenovo | ThinkBook 16 G6 IRL BIOS | before MMCN36WW | MMCN36WW | Patch available | CNA |
| Lenovo | V14 G2-ALC Laptop (Lenovo) BIOS | up to GLCN63WW | — | No fix listed | CNA |
| Lenovo | V15 G2-ALC Laptop (Lenovo) BIOS | up to GLCN63WW | — | No fix listed | CNA |
| Lenovo | Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS | before GZCN36WW | GZCN36WW | Patch available | CNA |
| Lenovo | Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS | before GZCN36WW | GZCN36WW | Patch available | CNA |
- 100w Gen 3 Laptop (Lenovo) BIOS VendorLenovo Affected before GACN48WW Fixed in GACN48WW Patch available CNA
- 100w Gen 4 Laptop (Lenovo) BIOS VendorLenovo Affected before L2CN34WW/L3CN34WW Fixed in L2CN34WW/L3CN34WW Patch available CNA
- 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS VendorLenovo Affected before JACN41WW Fixed in JACN41WW Patch available CNA
- 13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS VendorLenovo Affected before KBCN29WW Fixed in KBCN29WW Patch available CNA
- 14W Gen 2 Laptop (Lenovo) BIOS VendorLenovo Affected before H0CN29WW Fixed in H0CN29WW Patch available CNA
- 300w Gen 3 Laptop (Lenovo) BIOS VendorLenovo Affected before GACN48WW Fixed in GACN48WW Patch available CNA
- 300w Yoga Gen 4 Laptop (Lenovo) BIOS VendorLenovo Affected before L2CN34WW/L3CN34WW Fixed in L2CN34WW/L3CN34WW Patch available CNA
- 500w Yoga Gen 4 Laptop (Lenovo) BIOS VendorLenovo Affected before L2CN34WW/L3CN34WW Fixed in L2CN34WW/L3CN34WW Patch available CNA
- Flex 5-14ITL05 Laptop (ideapad) BIOS VendorLenovo Affected before FXCN47WW Fixed in FXCN47WW Patch available CNA
- Flex 5-15ITL05 Laptop (ideapad) BIOS VendorLenovo Affected before FXCN47WW Fixed in FXCN47WW Patch available CNA
- IdeaPad 1 14ALC7 Laptop BIOS VendorLenovo Affected before JTCN54WW Fixed in JTCN54WW Patch available CNA
- IdeaPad 1 15ALC7 Laptop BIOS VendorLenovo Affected before JTCN54WW Fixed in JTCN54WW Patch available CNA
- IdeaPad 1-11IGL05 Laptop BIOS VendorLenovo Affected before DWCN31WW Fixed in DWCN31WW Patch available CNA
- IdeaPad 1-14IGL05 Laptop BIOS VendorLenovo Affected before DWCN31WW Fixed in DWCN31WW Patch available CNA
- IdeaPad 3 14ABA7 Laptop BIOS VendorLenovo Affected before JTCN54WW Fixed in JTCN54WW Patch available CNA
- IdeaPad 3 15ABA7 Laptop BIOS VendorLenovo Affected before JTCN54WW Fixed in JTCN54WW Patch available CNA
- IdeaPad 3 17ABA7 Laptop BIOS VendorLenovo Affected before JTCN54WW Fixed in JTCN54WW Patch available CNA
- IdeaPad 3-14ALC6 Laptop BIOS VendorLenovo Affected up to GLCN63WW Fixed in — No fix listed CNA
- IdeaPad 3-15ALC6 Laptop BIOS VendorLenovo Affected up to GLCN63WW Fixed in — No fix listed CNA
- IdeaPad 3-17ALC6 Laptop BIOS VendorLenovo Affected up to GLCN63WW Fixed in — No fix listed CNA
- ideapad 5-15ALC05 Laptop BIOS VendorLenovo Affected before H2CN35WW Fixed in H2CN35WW Patch available CNA
- IdeaPad Flex 5 14ABR8 BIOS VendorLenovo Affected before L7CN21WW Fixed in L7CN21WW Patch available CNA
- IdeaPad Flex 5 14ALC7 Laptop BIOS VendorLenovo Affected before JCCN40WW Fixed in JCCN40WW Patch available CNA
- IdeaPad Flex 5 14IAU7 Laptop BIOS VendorLenovo Affected before J7CN48WW Fixed in J7CN48WW Patch available CNA
- IdeaPad Flex 5 14IRU8 BIOS VendorLenovo Affected before L6CN24WW Fixed in L6CN24WW Patch available CNA
- IdeaPad Flex 5 16ABR8 BIOS VendorLenovo Affected before L7CN21WW Fixed in L7CN21WW Patch available CNA
- IdeaPad Flex 5 16ALC7 BIOS VendorLenovo Affected before JCCN40WW Fixed in JCCN40WW Patch available CNA
- IdeaPad Flex 5 16IAU7 BIOS VendorLenovo Affected before J7CN48WW Fixed in J7CN48WW Patch available CNA
- IdeaPad Flex 5 16IRU8 BIOS VendorLenovo Affected before L6CN24WW Fixed in L6CN24WW Patch available CNA
- IdeaPad Slim 3 14ABR8 BIOS VendorLenovo Affected up to KYCN32WW Fixed in — No fix listed CNA
- IdeaPad Slim 3 14AMN8 BIOS VendorLenovo Affected before L1CN41WW Fixed in L1CN41WW Patch available CNA
- IdeaPad Slim 3 15ABR8 BIOS VendorLenovo Affected up to KYCN32WW Fixed in — No fix listed CNA
- IdeaPad Slim 3 15AMN8 BIOS VendorLenovo Affected before L1CN41WW Fixed in L1CN41WW Patch available CNA
- IdeaPad Slim 3 16ABR8 BIOS VendorLenovo Affected up to KYCN32WW Fixed in — No fix listed CNA
- IdeaPad Slim 5 Light 14ABR8 BIOS VendorLenovo Affected up to L9CN26WW Fixed in — No fix listed CNA
- K14 G2 IRU BIOS VendorLenovo Affected before MMCN36WW Fixed in MMCN36WW Patch available CNA
- Lenovo Flex 7 14IAU7 BIOS VendorLenovo Affected before J7CN48WW Fixed in J7CN48WW Patch available CNA
- Lenovo Flex 7 14IRU8 BIOS VendorLenovo Affected before L6CN24WW Fixed in L6CN24WW Patch available CNA
- Lenovo V14 G3 ABA Laptop BIOS VendorLenovo Affected before JTCN54WW Fixed in JTCN54WW Patch available CNA
- Lenovo V14 G4 ABP BIOS VendorLenovo Affected before MSCN16WW Fixed in MSCN16WW Patch available CNA
- Lenovo V14 G4 AMN BIOS VendorLenovo Affected before L1CN41WW Fixed in L1CN41WW Patch available CNA
- Lenovo V15 G3 ABA Laptop BIOS VendorLenovo Affected before JTCN54WW Fixed in JTCN54WW Patch available CNA
- Lenovo V15 G4 ABP BIOS VendorLenovo Affected before MSCN16WW Fixed in MSCN16WW Patch available CNA
- Lenovo V15 G4 AMN BIOS VendorLenovo Affected before L1CN41WW Fixed in L1CN41WW Patch available CNA
- ThinkBook 13s G4 ARB BIOS VendorLenovo Affected before HZCN55WW Fixed in HZCN55WW Patch available CNA
- ThinkBook 13s G4 IAP BIOS VendorLenovo Affected before HWCN52WW Fixed in HWCN52WW Patch available CNA
- ThinkBook 13x G2 IAP Laptop BIOS VendorLenovo Affected before HXCN57WW Fixed in HXCN57WW Patch available CNA
- ThinkBook 14 G6 ABP BIOS VendorLenovo Affected before MNCN27WW Fixed in MNCN27WW Patch available CNA
- ThinkBook 14 G6 IRL BIOS VendorLenovo Affected before MMCN36WW Fixed in MMCN36WW Patch available CNA
- ThinkBook 16 G6 ABP BIOS VendorLenovo Affected before MNCN27WW Fixed in MNCN27WW Patch available CNA
- ThinkBook 16 G6 IRL BIOS VendorLenovo Affected before MMCN36WW Fixed in MMCN36WW Patch available CNA
- V14 G2-ALC Laptop (Lenovo) BIOS VendorLenovo Affected up to GLCN63WW Fixed in — No fix listed CNA
- V15 G2-ALC Laptop (Lenovo) BIOS VendorLenovo Affected up to GLCN63WW Fixed in — No fix listed CNA
- Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS VendorLenovo Affected before GZCN36WW Fixed in GZCN36WW Patch available CNA
- Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS VendorLenovo Affected before GZCN36WW Fixed in GZCN36WW Patch available CNA
CPE names CISA-ADP · 55
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:ideapad_1-14igl05_firmware:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_1-11igl05_firmware:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_5-15itl05_firmware:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Lenovo |
| cpe:2.3:o:lenovo:flex_5-14itl05_firmware:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Lenovo |
| cpe:2.3:o:lenovo:300w_gen_3_firmware:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Lenovo |
| cpe:2.3:o:lenovo:100w_gen_3_firmware:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_o_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:14w_gen_2_firmware:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_5-15alc05_firmware:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Lenovo |
- cpe:2.3:o:lenovo:ideapad_1-14igl05_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_1-11igl05_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_5-15itl05_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lenovo
- cpe:2.3:o:lenovo:flex_5-14itl05_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lenovo
- cpe:2.3:o:lenovo:300w_gen_3_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lenovo
- cpe:2.3:o:lenovo:100w_gen_3_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_o_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:14w_gen_2_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_5-15alc05_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lenovo
Show 45 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:thinkbook_13s_g4_iap_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_13x_g2_iap_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_13s_g4_arb_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:flex_7_14iau7_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_flex_5_14iau7_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_flex_5_16iau7_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:13w_yoga_firmware:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_flex_5_16alc7_firmware:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_flex_5_14alc7_firmware:-:*:*:*:*:*:*:* | not specified by CISA-ADP | — | Lenovo |
| cpe:2.3:o:lenovo:v15_g3_aba_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:v14_g3_aba_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3_14aba7_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3_15aba7_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3_17aba7_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_1_14alc7_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_1_15alc7_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:13w_yoga_gen_2_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:v14_g4_amn_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:v15_g4_amn_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_slim_3_14amn8_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_slim_3_15amn8_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:100w_gen_4_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:300w_yoga_gen_4_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:500w_yoga_gen_4_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:flex_7_14iru8_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_flex_5_14iru8_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_flex_5_16iru8_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_flex_5_14abr8_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_flex_5_16abr8_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14_g6_irl_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_16_g6_irl_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:k14_g2_iru_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_14_g6_abp_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:thinkbook_16_g6_abp_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:v14_g4_abp_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:v15_g4_abp_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:v14_g2-alc_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:v15_g2-alc_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_slim_3_14abr8_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_slim_3_15abr8_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_slim_3_16abr8_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
| cpe:2.3:o:lenovo:ideapad_slim_5_light_14abr8_firmware:*:*:*:*:*:*:*:* | — | — | Lenovo |
- cpe:2.3:o:lenovo:thinkbook_13s_g4_iap_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_13x_g2_iap_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_13s_g4_arb_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:flex_7_14iau7_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_flex_5_14iau7_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_flex_5_16iau7_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:13w_yoga_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_flex_5_16alc7_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_flex_5_14alc7_firmware:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lenovo
- cpe:2.3:o:lenovo:v15_g3_aba_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:v14_g3_aba_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3_14aba7_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3_15aba7_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3_17aba7_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_1_14alc7_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_1_15alc7_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:13w_yoga_gen_2_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:v14_g4_amn_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:v15_g4_amn_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_slim_3_14amn8_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_slim_3_15amn8_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:100w_gen_4_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:300w_yoga_gen_4_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:500w_yoga_gen_4_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:flex_7_14iru8_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_flex_5_14iru8_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_flex_5_16iru8_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_flex_5_14abr8_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_flex_5_16abr8_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14_g6_irl_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_16_g6_irl_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:k14_g2_iru_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_14_g6_abp_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:thinkbook_16_g6_abp_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:v14_g4_abp_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:v15_g4_abp_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:v14_g2-alc_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:v15_g2-alc_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_slim_3_14abr8_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_slim_3_15abr8_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_slim_3_16abr8_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
- cpe:2.3:o:lenovo:ideapad_slim_5_light_14abr8_firmware:*:*:*:*:*:*:*:* Versions — — ·Lenovo
Remediation
- Fix · CNA 100w Gen 3 Laptop (Lenovo) BIOS (Lenovo) Fixed in GACN48WW
- Fix · CNA 100w Gen 4 Laptop (Lenovo) BIOS (Lenovo) Fixed in L2CN34WW/L3CN34WW
- Fix · CNA 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS (Lenovo) Fixed in JACN41WW
- Fix · CNA 13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS (Lenovo) Fixed in KBCN29WW
- Fix · CNA 14W Gen 2 Laptop (Lenovo) BIOS (Lenovo) Fixed in H0CN29WW
- Fix · CNA 300w Gen 3 Laptop (Lenovo) BIOS (Lenovo) Fixed in GACN48WW
- Fix · CNA 300w Yoga Gen 4 Laptop (Lenovo) BIOS (Lenovo) Fixed in L2CN34WW/L3CN34WW
- Fix · CNA 500w Yoga Gen 4 Laptop (Lenovo) BIOS (Lenovo) Fixed in L2CN34WW/L3CN34WW
- Fix · CNA Flex 5-14ITL05 Laptop (ideapad) BIOS (Lenovo) Fixed in FXCN47WW
- Fix · CNA Flex 5-15ITL05 Laptop (ideapad) BIOS (Lenovo) Fixed in FXCN47WW
- Fix · CNA IdeaPad 1 14ALC7 Laptop BIOS (Lenovo) Fixed in JTCN54WW
- Fix · CNA IdeaPad 1 15ALC7 Laptop BIOS (Lenovo) Fixed in JTCN54WW
- Fix · CNA IdeaPad 1-11IGL05 Laptop BIOS (Lenovo) Fixed in DWCN31WW
- Fix · CNA IdeaPad 1-14IGL05 Laptop BIOS (Lenovo) Fixed in DWCN31WW
- Fix · CNA IdeaPad 3 14ABA7 Laptop BIOS (Lenovo) Fixed in JTCN54WW
- Fix · CNA IdeaPad 3 15ABA7 Laptop BIOS (Lenovo) Fixed in JTCN54WW
- Fix · CNA IdeaPad 3 17ABA7 Laptop BIOS (Lenovo) Fixed in JTCN54WW
- Fix · CNA ideapad 5-15ALC05 Laptop BIOS (Lenovo) Fixed in H2CN35WW
- Fix · CNA IdeaPad Flex 5 14ABR8 BIOS (Lenovo) Fixed in L7CN21WW
- Fix · CNA IdeaPad Flex 5 14ALC7 Laptop BIOS (Lenovo) Fixed in JCCN40WW
- Fix · CNA IdeaPad Flex 5 14IAU7 Laptop BIOS (Lenovo) Fixed in J7CN48WW
- Fix · CNA IdeaPad Flex 5 14IRU8 BIOS (Lenovo) Fixed in L6CN24WW
- Fix · CNA IdeaPad Flex 5 16ABR8 BIOS (Lenovo) Fixed in L7CN21WW
- Fix · CNA IdeaPad Flex 5 16ALC7 BIOS (Lenovo) Fixed in JCCN40WW
- Fix · CNA IdeaPad Flex 5 16IAU7 BIOS (Lenovo) Fixed in J7CN48WW
- Fix · CNA IdeaPad Flex 5 16IRU8 BIOS (Lenovo) Fixed in L6CN24WW
- Fix · CNA IdeaPad Slim 3 14AMN8 BIOS (Lenovo) Fixed in L1CN41WW
- Fix · CNA IdeaPad Slim 3 15AMN8 BIOS (Lenovo) Fixed in L1CN41WW
- Fix · CNA K14 G2 IRU BIOS (Lenovo) Fixed in MMCN36WW
- Fix · CNA Lenovo Flex 7 14IAU7 BIOS (Lenovo) Fixed in J7CN48WW
- Fix · CNA Lenovo Flex 7 14IRU8 BIOS (Lenovo) Fixed in L6CN24WW
- Fix · CNA Lenovo V14 G3 ABA Laptop BIOS (Lenovo) Fixed in JTCN54WW
- Fix · CNA Lenovo V14 G4 ABP BIOS (Lenovo) Fixed in MSCN16WW
- Fix · CNA Lenovo V14 G4 AMN BIOS (Lenovo) Fixed in L1CN41WW
- Fix · CNA Lenovo V15 G3 ABA Laptop BIOS (Lenovo) Fixed in JTCN54WW
- Fix · CNA Lenovo V15 G4 ABP BIOS (Lenovo) Fixed in MSCN16WW
- Fix · CNA Lenovo V15 G4 AMN BIOS (Lenovo) Fixed in L1CN41WW
- Fix · CNA ThinkBook 13s G4 ARB BIOS (Lenovo) Fixed in HZCN55WW
- Fix · CNA ThinkBook 13s G4 IAP BIOS (Lenovo) Fixed in HWCN52WW
- Fix · CNA ThinkBook 13x G2 IAP Laptop BIOS (Lenovo) Fixed in HXCN57WW
- Fix · CNA ThinkBook 14 G6 ABP BIOS (Lenovo) Fixed in MNCN27WW
- Fix · CNA ThinkBook 14 G6 IRL BIOS (Lenovo) Fixed in MMCN36WW
- Fix · CNA ThinkBook 16 G6 ABP BIOS (Lenovo) Fixed in MNCN27WW
- Fix · CNA ThinkBook 16 G6 IRL BIOS (Lenovo) Fixed in MMCN36WW
- Fix · CNA Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS (Lenovo) Fixed in GZCN36WW
- Fix · CNA Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS (Lenovo) Fixed in GZCN36WW
Timeline
- 2026-10-02 Threatist record created from CVE-2024-3100
- 2026-10-03 Alias added: GHSA-wcv7-2grg-g5qr
References
More Lenovo vulnerabilities
- TI-2017-03639 Improper handling of exceptional conditions in Apache Struts KEVCVSS 3.1CRITICAL 9.8
- TI-2024-07516 Insecure Platform Key (PK) used in UEFI system firmware signature CVSS 3.1MEDIUM 6.4
- TI-2017-13070 OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory… CVSS 3.0CRITICAL 9.8
- TI-2017-02875 OS command injection in Lenovo Service Framework application CVSS 3.0CRITICAL 9.8
- TI-2013-01192 Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate… CVSS 2.0HIGH 9.3
- TI-2026-53163 Hard-coded credentials in Lenovo Health Application CVSS 4.0CRITICAL 9.3
Sources
- CVE-2024-3100 · CVE Program
- CVE-2024-3100 · NVD
- FIRST EPSS
- GHSA-wcv7-2grg-g5qr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences