Lucene search

[email protected]CVE-2021-3718

HistoryNov 12, 2021 - 10:15 p.m.

CVE-2021-3718

2021-11-1222:15:07

CWE-232

[email protected]

web.nvd.nist.gov

thinkpad

vulnerability

denial of service

system crash

enhanced biometrics

bios

cve-2021-3718

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

JSON

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.

Affected configurations

NVD

Node

lenovothinkpad_11e_3rd_genMatch-

microsoftwindows_10Match-

microsoftwindows_7Match-x64

microsoftwindows_8.1Match-

AND

lenovothinkpad_11e_3rd_gen_firmwareRange≤1.22braswell

Node

lenovothinkpad_11e_3rd_genMatch-

microsoftwindows_10Match-

microsoftwindows_7Match-x64

microsoftwindows_8.1Match-

AND

lenovothinkpad_11e_3rd_gen_firmwareRange≤1.29skylate

Node

lenovothinkpad_11e_4th_gen_i3Match-

microsoftwindows_10Match-

AND

lenovothinkpad_11e_4th_gen_i3_firmwareRange≤1.22

Node

lenovothinkpad_11e_4th_gen_i7Match-

microsoftwindows_10Match-

AND

lenovothinkpad_11e_4th_gen_i7_firmwareRange≤1.22

Node

lenovothinkpad_11e_4th_gen_i5Match-

microsoftwindows_10Match-

AND

lenovothinkpad_11e_4th_gen_i5_firmwareRange≤1.22

Node

lenovothinkpad_11e_4th_gen_celeronMatch-

microsoftwindows_10Match-x64

AND

lenovothinkpad_11e_4th_gen_celeron_firmwareRange≤1.27

Node

lenovothinkpad_11e_yoga_gen_6Match-

microsoftwindows_10Match-x64

AND

lenovothinkpad_11e_yoga_gen_6_firmwareRange≤1.12

Node

lenovothinkpad_13_gen_2Match-

microsoftwindows_10Match-x64

AND

lenovothinkpad_13_gen_2_firmwareRange≤1.29

Node

lenovothinkpad_e490_firmwareRange≤1.30

AND

lenovothinkpad_e490Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_e490s_firmwareRange≤1.30

AND

lenovothinkpad_e490sMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_e590_firmwareRange≤1.30

AND

lenovothinkpad_e590Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l13_firmwareRange≤1.31

AND

lenovothinkpad_l13Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l13_gen_2_firmwareRange≤1.11non-vpro

AND

lenovothinkpad_l13_gen_2Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l13_gen_2_firmwareRange≤1.08vpro

AND

lenovothinkpad_l13_gen_2Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l13_yoga_firmwareRange≤1.31

AND

lenovothinkpad_l13_yogaMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l13_yoga_gen_2_firmwareRange≤1.11non-vpro

AND

lenovothinkpad_l13_yoga_gen_2Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l13_yoga_gen_2_firmwareRange≤1.08vpro

AND

lenovothinkpad_l13_yoga_gen_2Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l14_gen_1_firmwareRange<1.15

AND

lenovothinkpad_l14_gen_1Match-

linuxlinux_kernelMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l14_firmwareRange<1.20.1.17

AND

lenovothinkpad_l14Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l15_gen_1_firmwareRange<1.15

AND

lenovothinkpad_l15_gen_1Match-

linuxlinux_kernelMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l15_firmwareRange<1.20.1.17

AND

lenovothinkpad_l15Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l380_firmwareRange≤1.26

AND

lenovothinkpad_l380Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l380_yogaMatch-

microsoftwindows_10Match-x64

AND

lenovothinkpad_l380_yoga_firmwareRange≤1.26

Node

lenovothinkpad_l390_yoga_firmwareRange≤1.35

AND

lenovothinkpad_l390_yogaMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l390_firmwareRange≤1.35

AND

lenovothinkpad_l390Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l490_firmwareRange<1.26

AND

lenovothinkpad_l490Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_l590_firmwareRange<1.26

AND

lenovothinkpad_l590Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_p43s_firmwareRange<n2iet96w

AND

lenovothinkpad_p43sMatch-

linuxlinux_kernelMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_p52_firmwareRange<n2cet60w

AND

lenovothinkpad_p52Match-

linuxlinux_kernelMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_p53s_firmwareRange<n2iet96w

AND

lenovothinkpad_p53sMatch-

linuxlinux_kernelMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_p72_firmwareRange<n2cet60w

AND

lenovothinkpad_p72Match-

linuxlinux_kernelMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_s5_2nd_gen_firmwareRange≤1.28

AND

lenovothinkpad_s5_2nd_genMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_t460_firmwareRange≤1.43.1.11

AND

lenovothinkpad_t460Match-

microsoftwindows_10Match-

microsoftwindows_7Match-x64

microsoftwindows_7Match-x86

microsoftwindows_8.1Match-

Node

lenovothinkpad_t490_firmwareRange<n2iet96w

AND

lenovothinkpad_t490Match-

linuxlinux_kernelMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_t590_firmwareRange<n2iet96w

AND

lenovothinkpad_t590Match-

linuxlinux_kernelMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_s2_gen_6_firmwareRange≤2021-09-30

AND

lenovothinkpad_s2_gen_6Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_s2_yoga_gen_6_firmwareRange≤2021-09-30

AND

lenovothinkpad_s2_yoga_gen_6Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_x12_detachable_gen_1_firmwareRange<1.16

AND

lenovothinkpad_x12_detachable_gen_1Match-

microsoftwindows_10Match-x64

Node

lenovothinkpad_x260_firmwareRange≤1.47\/1.15

AND

lenovothinkpad_x260Match-

microsoftwindows_10Match-x64

microsoftwindows_7Match-

Node

lenovothinkpad_x380_yoga_firmwareRange≤1.34

AND

lenovothinkpad_x380_yogaMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_x390_yoga_firmwareRange<n2let87w

AND

lenovothinkpad_x390_yogaMatch-

linuxlinux_kernelMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_11e_5th_gen_firmwareRange≤1.13

AND

lenovothinkpad_11e_5th_genMatch-

microsoftwindows_10Match-x64

Node

lenovothinkpad_11e_5th_gen_firmwareRange≤1.13

AND

lenovothinkpad_yoga_370Match-

microsoftwindows_10Match-x64

CPENameOperatorVersion
lenovo:thinkpad_11e_3rd_gen_firmwarelenovo thinkpad 11e 3rd gen firmwarele1.22

CPE	Name	Operator	Version
lenovo:thinkpad_11e_3rd_gen_firmware	lenovo thinkpad 11e 3rd gen firmware	le	1.22

CNA Affected

[
  {
    "product": "ThinkPad BIOS",
    "vendor": "Lenovo",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-72619

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

JSON

Related for CVE-2021-3718

prion1 cvelist1 nvd1