MEDIUM🇵🇱 Wersja polska

CVE-2021-3519

CVSS 6.4v3.1pub. 2021-11-12upd. 2024-11-21

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.

CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

  • Lenovo Ideacentre 3 07imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 3 07imb05 Firmware

    OS
    Lenovo
    < m2vkt18a

  • Lenovo Ideacentre 310s 08igm

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 310s 08igm Firmware

    OS
    Lenovo
    ≤ m1tkt31a

  • Lenovo Ideacentre 510a 15arr

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 510a 15arr Firmware

    OS
    Lenovo
    ≤ o4dkt41a

  • Lenovo Ideacentre 510s 07icb

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 510s 07icb Firmware

    OS
    Lenovo
    < m22kt46a

  • Lenovo Ideacentre 510s 07ick

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 510s 07ick Firmware

    OS
    Lenovo
    < m30kt23a< m30kt24a

  • Lenovo Ideacentre 5 14imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14imb05 Firmware

    OS
    Lenovo
    < o4hkt33a

  • Lenovo Ideacentre 5 14iob6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14iob6 Firmware

    OS
    Lenovo
    < m3gkt29a

  • Lenovo Ideacentre C5 14mb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre C5 14mb05 Firmware

    OS
    Lenovo
    < o4hkt33a

  • Lenovo Ideacentre Creator 5 14iob6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Creator 5 14iob6 Firmware

    OS
    Lenovo
    < m3gkt29a

  • Lenovo Ideacentre G5 14imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre G5 14imb05 Firmware

    OS
    Lenovo
    < o4hkt33a

  • Lenovo Ideacentre Gaming 5 14iob6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre Gaming 5 14iob6 Firmware

    OS
    Lenovo
    < m3gkt29a

  • Lenovo Thinkcentre E75 T\/s

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre E75 T\/s Firmware

    OS
    Lenovo
    < m16kt67a

  • Lenovo Thinkcentre M60e Tiny

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M60e Tiny Firmware

    OS
    Lenovo
    < m3skt1ea

  • Lenovo Thinkcentre M630e

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M630e Firmware

    OS
    Lenovo
    < m28kt36a

  • Lenovo Thinkcentre M70a

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M70a Firmware

    OS
    Lenovo
    ≤ m2skt21a
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2016-4171CRITICAL9.8⚠ KEVPL ✓same product

RCE w Adobe Flash Player 21.0.0.242 i wcześniejszych — aktywnie exploitowany

CVE-2016-1019CRITICAL9.8⚠ KEVPL ✓same product

Adobe Flash Player — RCE lub DoS przez nieokreślone wektory ataku

CVE-2023-36910CRITICAL9.8PL ✓same product

RCE w Microsoft Message Queuing (MSMQ) — przepełnienie liczby całkowitej

CVE-2023-36911CRITICAL9.8PL ✓same product

RCE w Microsoft Message Queuing (MSMQ) — przepełnienie liczby całkowitej

CVE-2023-29411CRITICAL9.8PL ✓same product

Brak uwierzytelnienia w Java RMI umożliwia RCE w APC Easy UPS