CVE-2021-3453
Estado: ModificadaMedia (4.6)—
Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Puntuación base: 4.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.24%
- Percentil entre todas las CVEs puntuadas: 13
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (21)
Lenovo — 730s-13iml FirmwareLenovo — Ideacentre AIO 5-24imb05 FirmwareLenovo — Ideacentre AIO 5-74imb05 FirmwareLenovo — Ideapad 1-11igl05 FirmwareLenovo — Ideapad 1-14igl05 FirmwareLenovo — Ideapad S940-14iil FirmwareLenovo — Ideapad S940-14iwl FirmwareLenovo — Ideapad Slim 1-11ast-05 FirmwareLenovo — Ideapad Slim 1-14ast-05 FirmwareLenovo — Thinkpad Helix FirmwareLenovo — Thinkpad T550 FirmwareLenovo — Thinkpad W550s FirmwareLenovo — Thinkpad X1 Carbon 3RD GEN FirmwareLenovo — Thinkpad X250 FirmwareLenovo — Thinkpad Yoga 15 FirmwareLenovo — V130-15igm FirmwareLenovo — V330-15ikb FirmwareLenovo — V330-15isk FirmwareLenovo — Yoga S730-13iml FirmwareLenovo — Yoga S940-14iil FirmwareLenovo — Yoga S940-14iwl Firmware
CWE
- CWE-693
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-3453",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2021-3453",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-12-16T17:55:59.636899Z"
}
}
],
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 2.1,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@lenovo.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.8,
"attackVector": "PHYSICAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 0.9
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.6,
"attackVector": "PHYSICAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 0.9
}
]
},
"affected": [
{
"source": "psirt@lenovo.com",
"affectedData": [
{
"vendor": "Lenovo",
"product": "BIOS",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
]
}
],
"published": "2021-07-16T21:15:10.683",
"references": [
{
"url": "https://support.lenovo.com/us/en/product_security/LEN-65529",
"tags": [
"Vendor Advisory"
],
"source": "psirt@lenovo.com"
},
{
"url": "https://support.lenovo.com/us/en/product_security/LEN-65529",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@lenovo.com",
"description": [
{
"lang": "en",
"value": "CWE-693"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage."
},
{
"lang": "es",
"value": "Algunos sistemas de portátiles, ThinkPad y ordenadores de sobremesa de Lenovo presentan módulos BIOS desprotegidos por Intel Boot Guard que podrían permitir a un atacante con acceso físico la habilidad de escribir en el almacenamiento flash SPI"
}
],
"lastModified": "2026-06-17T04:05:08.030",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_helix_firmware:n17etb4w:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AB0E3D0-B598-4391-98AF-B1C6F78D5F2A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_helix:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9BD5DB5D-4ADF-4AC9-9774-8F36B3F2BDBF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_t550_firmware:n11et53w:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "093E0901-6078-42AA-81AF-FEC9BB11475B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9D79966D-08A3-428F-B4EC-CAAC8F4CF435"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_w550s_firmware:n11et53w:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14982F3D-67A1-455B-9A73-9729E7705002"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "23267973-5F08-43C5-9C92-F429B84D3245"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_3rd_gen_firmware:n14et55w:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "336C04AD-21B6-4288-B3B6-FBDD749469D6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_3rd_gen:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "86F4EB0E-B4C9-4FC1-987F-8EE359F17172"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_x250_firmware:n10et62w:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "644C610C-E8D7-4867-B89F-D677ED26E423"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AEA076E5-D554-4570-B5E3-FE78CEC024B4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:thinkpad_yoga_15_firmware:n19et65w:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E96C53C2-9F91-4981-8458-5A596BE5AF2F"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_15:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9052750D-3481-46A1-B1C5-EABB56DDD4E0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:730s-13iml_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D6C8BA48-DE2C-4861-B692-D94222EE139A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:730s-13iml:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BC58D9FF-9036-43BB-8BB7-D4E535796614"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_1-11igl05_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "522827D6-4928-49B5-B293-61BCB6959134"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_1-11igl05:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0AC62EEC-713B-4559-8AB7-0B2B0F4D84F6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_1-14igl05_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B9AB2D9-0D58-4145-9DDE-23C55B0D0A8C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_1-14igl05:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "076B2AA1-ED0B-47B3-B6E2-FFEBB21220AB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_s940-14iil_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AF6EA58-3B77-428C-8CAE-2A3882D55612"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_s940-14iil:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5AA59CAA-1FFF-4E3A-87F5-3F845504C26F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_s940-14iwl_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "678FF008-4CB3-42C3-9717-C96CBEE740F4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_s940-14iwl:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C9DD9308-18A9-49B1-85AD-0D9E9E93FACC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_slim_1-11ast-05_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB8BA6E9-F84C-4FEA-8E7C-A61CED49C556"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_slim_1-11ast-05:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "97D758B0-E09A-4D2D-8EF0-954E2FB3426E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideapad_slim_1-14ast-05_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9497349B-7024-4FAB-A722-10928995B0D0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideapad_slim_1-14ast-05:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EA0D718A-2E08-487E-8963-1D4B7491C325"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v130-15igm_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD79628A-52FD-46F7-A756-B26C61F9F36E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v130-15igm:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B5053055-975C-4074-A9BA-BEB2E055DDEE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v330-15ikb_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C185C13-B791-40ED-B8B8-D654EFFAE804"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v330-15ikb:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E62FBC6C-7CE6-4143-8E20-A53EBCDA760B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:v330-15isk_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B6561DCB-6CEA-4E92-A517-EBB32B60C594"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:v330-15isk:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7536DC2F-CCB1-4BF5-A04B-412A35DB1302"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_s730-13iml_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3EB5673A-F59B-4190-8626-093368C0D470"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_s730-13iml:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3CD603B8-6B07-44AC-B1A1-621D34B281D8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_s940-14iil_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D471E83D-3DA6-4762-B592-4DEAF6C71185"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_s940-14iil:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C08A1C6F-6D23-4772-9935-1A72CB7FCBF3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:yoga_s940-14iwl_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F02E247-7E1D-4D0D-B6CC-7EE4F806BD9B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:yoga_s940-14iwl:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "00821048-9198-4A78-8275-B6BA81D2B0EE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideacentre_aio_5-24imb05_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54126591-EF21-4A00-BD93-DB9E5459CFC6",
"versionEndExcluding": "2021-09-30"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideacentre_aio_5-24imb05:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1D279D84-E26F-4D6A-B7EC-3AB10BC4EB9C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ideacentre_aio_5-74imb05_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C106A3B4-B6D5-4107-9049-8A5DC85DA7FC",
"versionEndExcluding": "2021-09-30"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ideacentre_aio_5-74imb05:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6B0F50EA-E337-49E6-94A7-B384AF719D48"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@lenovo.com"
}