Lucene search
LenovoCVELIST:CVE-2021-3614HistoryJul 16, 2021 - 8:30 p.m.
CVE-2021-3614
2021-07-1620:30:20
CWE-636
lenovo
www.cve.org
4
vulnerability
lenovo
notebook
bios
update
lenovo vantage
CVSS3
6.4
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
AI Score
6.6
Confidence
High
EPSS
0.001
Percentile
30.6%
A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.
CNA Affected
[
{
"product": "Notebook BIOS",
"vendor": "Lenovo",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
]Related
nvd
nvd
CVE-2021-3614
2021-07-16 21:15:10
prion
prion
Design/Logic Flaw
2021-07-16 21:15:00
cve
cve
CVE-2021-3614
2021-07-16 21:15:10
lenovo
lenovo
Lenovo BIOS Vulnerabilities (July 2021) - Lenovo Support NL
2021-07-13 17:34:05
CVSS3
6.4
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
AI Score
6.6
Confidence
High
EPSS
0.001
Percentile
30.6%
Related for CVELIST:CVE-2021-3614