Lucene search
LenovoCVELIST:CVE-2021-3453HistoryJul 16, 2021 - 8:30 p.m.
CVE-2021-3453
2021-07-1620:30:17
CWE-693
lenovo
www.cve.org
3
lenovo
bios
physical access
vulnerability
CVSS3
6.8
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.6
Confidence
High
EPSS
0.001
Percentile
25.0%
Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.
CNA Affected
[
{
"product": "BIOS",
"vendor": "Lenovo",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
]Related
nvd
nvd
CVE-2021-3453
2021-07-16 21:15:10
prion
prion
Code injection
2021-07-16 21:15:00
cve
cve
CVE-2021-3453
2021-07-16 21:15:10
lenovo
lenovo
Lenovo BIOS Vulnerabilities (July 2021) - Lenovo Support NL
2021-07-13 17:34:05
CVSS3
6.8
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.6
Confidence
High
EPSS
0.001
Percentile
25.0%
Related for CVELIST:CVE-2021-3453