CVE-2021-3718 : A denial of service vulnerability was reported in some ThinkPad models that coul

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.

Published 2021-11-12 22:15:08

Updated 2021-11-23 14:50:22

Source Lenovo Group Ltd.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2021-3718

Lenovo » Thinkpad L380 Firmware
Versions up to, including, (<=) 1.26
cpe:2.3:o:lenovo:thinkpad_l380_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L380 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L380 Yoga Firmware
Versions up to, including, (<=) 1.26
cpe:2.3:o:lenovo:thinkpad_l380_yoga_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L380 Yoga » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad T460 Firmware
Versions up to, including, (<=) 1.43.1.11
cpe:2.3:o:lenovo:thinkpad_t460_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad T460 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A
When used together with: Microsoft » Windows 7 » Version: N/A For X64
When used together with: Microsoft » Windows 7 » Version: N/A For X86
When used together with: Microsoft » Windows 8.1 » Version: N/A
Lenovo » Thinkpad X260 Firmware
Versions up to, including, (<=) 1.47\/1.15
cpe:2.3:o:lenovo:thinkpad_x260_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad X260 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
When used together with: Microsoft » Windows 7 » Version: N/A
Lenovo » Thinkpad X380 Yoga Firmware
Versions up to, including, (<=) 1.34
cpe:2.3:o:lenovo:thinkpad_x380_yoga_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad X380 Yoga » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad P52 Firmware
Versions before (<) n2cet60w
cpe:2.3:o:lenovo:thinkpad_p52_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad P52 » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad P72 Firmware
Versions before (<) n2cet60w
cpe:2.3:o:lenovo:thinkpad_p72_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad P72 » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad E490s Firmware
Versions up to, including, (<=) 1.30
cpe:2.3:o:lenovo:thinkpad_e490s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad E490s » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad E490 Firmware
Versions up to, including, (<=) 1.30
cpe:2.3:o:lenovo:thinkpad_e490_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad E490 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad E590 Firmware
Versions up to, including, (<=) 1.30
cpe:2.3:o:lenovo:thinkpad_e590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad E590 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad P43s Firmware
Versions before (<) n2iet96w
cpe:2.3:o:lenovo:thinkpad_p43s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad P43s » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad P53s Firmware
Versions before (<) n2iet96w
cpe:2.3:o:lenovo:thinkpad_p53s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad P53s » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad T490 Firmware
Versions before (<) n2iet96w
cpe:2.3:o:lenovo:thinkpad_t490_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad T490 » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad T590 Firmware
Versions before (<) n2iet96w
cpe:2.3:o:lenovo:thinkpad_t590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad T590 » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad X390 Yoga Firmware
Versions before (<) n2let87w
cpe:2.3:o:lenovo:thinkpad_x390_yoga_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad X390 Yoga » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L390 Yoga Firmware
Versions up to, including, (<=) 1.35
cpe:2.3:o:lenovo:thinkpad_l390_yoga_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L390 Yoga » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L490 Firmware
Versions before (<) 1.26
cpe:2.3:o:lenovo:thinkpad_l490_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L490 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L590 Firmware
Versions before (<) 1.26
cpe:2.3:o:lenovo:thinkpad_l590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L590 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad 11e Yoga Gen 6 Firmware
Versions up to, including, (<=) 1.12
cpe:2.3:o:lenovo:thinkpad_11e_yoga_gen_6_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad 11e Yoga Gen 6 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L13 Firmware
Versions up to, including, (<=) 1.31
cpe:2.3:o:lenovo:thinkpad_l13_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L13 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad S5 2nd Gen Firmware
Versions up to, including, (<=) 1.28
cpe:2.3:o:lenovo:thinkpad_s5_2nd_gen_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad S5 2nd Gen » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad 11e 3rd Gen Firmware » Braswell Edition
Versions up to, including, (<=) 1.22
cpe:2.3:o:lenovo:thinkpad_11e_3rd_gen_firmware:*:*:*:*:braswell:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad 11e 3rd Gen » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A
When used together with: Microsoft » Windows 7 » Version: N/A For X64
When used together with: Microsoft » Windows 8.1 » Version: N/A
Lenovo » Thinkpad 11e 3rd Gen Firmware » Skylate Edition
Versions up to, including, (<=) 1.29
cpe:2.3:o:lenovo:thinkpad_11e_3rd_gen_firmware:*:*:*:*:skylate:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad 11e 3rd Gen » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A
When used together with: Microsoft » Windows 7 » Version: N/A For X64
When used together with: Microsoft » Windows 8.1 » Version: N/A
Lenovo » Thinkpad 11e 4th Gen I3 Firmware
Versions up to, including, (<=) 1.22
cpe:2.3:o:lenovo:thinkpad_11e_4th_gen_i3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad 11e 4th Gen I3 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A
Lenovo » Thinkpad 11e 4th Gen I7 Firmware
Versions up to, including, (<=) 1.22
cpe:2.3:o:lenovo:thinkpad_11e_4th_gen_i7_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad 11e 4th Gen I7 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A
Lenovo » Thinkpad 11e 4th Gen I5 Firmware
Versions up to, including, (<=) 1.22
cpe:2.3:o:lenovo:thinkpad_11e_4th_gen_i5_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad 11e 4th Gen I5 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A
Lenovo » Thinkpad 11e 4th Gen Celeron Firmware
Versions up to, including, (<=) 1.27
cpe:2.3:o:lenovo:thinkpad_11e_4th_gen_celeron_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad 11e 4th Gen Celeron » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad 13 Gen 2 Firmware
Versions up to, including, (<=) 1.29
cpe:2.3:o:lenovo:thinkpad_13_gen_2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad 13 Gen 2 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L13 Gen 2 Firmware » Vpro Edition
Versions up to, including, (<=) 1.08
cpe:2.3:o:lenovo:thinkpad_l13_gen_2_firmware:*:*:*:*:vpro:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L13 Gen 2 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L13 Gen 2 Firmware » Non-vpro Edition
Versions up to, including, (<=) 1.11
cpe:2.3:o:lenovo:thinkpad_l13_gen_2_firmware:*:*:*:*:non-vpro:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L13 Gen 2 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L13 Yoga Firmware
Versions up to, including, (<=) 1.31
cpe:2.3:o:lenovo:thinkpad_l13_yoga_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L13 Yoga » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L13 Yoga Gen 2 Firmware » Non-vpro Edition
Versions up to, including, (<=) 1.11
cpe:2.3:o:lenovo:thinkpad_l13_yoga_gen_2_firmware:*:*:*:*:non-vpro:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L13 Yoga Gen 2 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L13 Yoga Gen 2 Firmware » Vpro Edition
Versions up to, including, (<=) 1.08
cpe:2.3:o:lenovo:thinkpad_l13_yoga_gen_2_firmware:*:*:*:*:vpro:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L13 Yoga Gen 2 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L14 Gen 1 Firmware
Versions before (<) 1.15
cpe:2.3:o:lenovo:thinkpad_l14_gen_1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L14 Gen 1 » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L14 Firmware
Versions before (<) 1.20.1.17
cpe:2.3:o:lenovo:thinkpad_l14_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L14 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L15 Gen 1 Firmware
Versions before (<) 1.15
cpe:2.3:o:lenovo:thinkpad_l15_gen_1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L15 Gen 1 » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L15 Firmware
Versions before (<) 1.20.1.17
cpe:2.3:o:lenovo:thinkpad_l15_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L15 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad L390 Firmware
Versions up to, including, (<=) 1.35
cpe:2.3:o:lenovo:thinkpad_l390_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L390 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad S2 Gen 6 Firmware
Versions up to, including, (<=) 2021-09-30
cpe:2.3:o:lenovo:thinkpad_s2_gen_6_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad S2 Gen 6 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad S2 Yoga Gen 6 Firmware
Versions up to, including, (<=) 2021-09-30
cpe:2.3:o:lenovo:thinkpad_s2_yoga_gen_6_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad S2 Yoga Gen 6 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad X12 Detachable Gen 1 Firmware
Versions before (<) 1.16
cpe:2.3:o:lenovo:thinkpad_x12_detachable_gen_1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad X12 Detachable Gen 1 » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64
Lenovo » Thinkpad 11e 5th Gen Firmware
Versions up to, including, (<=) 1.13
cpe:2.3:o:lenovo:thinkpad_11e_5th_gen_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad 11e 5th Gen » Version: N/A
When used together with: Microsoft » Windows 10 » Version: N/A For X64

Exploit prediction scoring system (EPSS) score for CVE-2021-3718

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 25 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-3718

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.7	MEDIUM	AV:L/AC:M/Au:N/C:N/I:N/A:C	3.4	6.9	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
4.6	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	0.9	3.6	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
4.3	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H	0.7	3.6	Lenovo Group Ltd.
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2021-3718

CWE-232 Improper Handling of Undefined Values

The product does not handle or incorrectly handles when a value is not defined or supported for the associated parameter, field, or argument name.

Assigned by: psirt@lenovo.com (Secondary)

References for CVE-2021-3718

https://support.lenovo.com/us/en/product_security/LEN-72619

ThinkPad BIOS Vulnerabilities - Lenovo Support US
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-3718

Products affected by CVE-2021-3718

Exploit prediction scoring system (EPSS) score for CVE-2021-3718

CVSS scores for CVE-2021-3718

CWE ids for CVE-2021-3718

References for CVE-2021-3718