{"id":"CVE-2021-3453","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-3453","generatedAt":"2026-10-27T23:42:09.173Z","title":"Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.","description":"Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.","published":"2021-07-16T21:15:11.000Z","lastModified":"2026-06-17T04:05:08.000Z","status":"Modified","sourceIdentifier":"psirt@lenovo.com","cvss":{"version":"3.1","score":4.6,"severity":"MEDIUM","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},"cwe":["CWE-693"],"affected":["lenovo/thinkpad helix firmware","lenovo/thinkpad t550 firmware","lenovo/thinkpad w550s firmware","lenovo/thinkpad x1 carbon 3rd gen firmware","lenovo/thinkpad x250 firmware","lenovo/thinkpad yoga 15 firmware","lenovo/730s-13iml firmware","lenovo/ideapad 1-11igl05 firmware","lenovo/ideapad 1-14igl05 firmware","lenovo/ideapad s940-14iil firmware","lenovo/ideapad s940-14iwl firmware","lenovo/ideapad slim 1-11ast-05 firmware","lenovo/ideapad slim 1-14ast-05 firmware","lenovo/v130-15igm firmware","lenovo/v330-15ikb firmware","lenovo/v330-15isk firmware","lenovo/yoga s730-13iml firmware","lenovo/yoga s940-14iil firmware","lenovo/yoga s940-14iwl firmware","lenovo/ideacentre aio 5-24imb05 firmware","lenovo/ideacentre aio 5-74imb05 firmware"],"epss":{"score":0.00236,"percentile":0.14444,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-65529","tags":["Vendor Advisory"],"source":"psirt@lenovo.com"},{"url":"https://support.lenovo.com/us/en/product_security/LEN-65529","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-3453","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}