{"id":"CVE-2021-3519","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-3519","generatedAt":"2026-10-28T01:19:27.008Z","title":"A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the \"BIOS Password At Boot Device List\" BIOS setting is Yes.","description":"A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the \"BIOS Password At Boot Device List\" BIOS setting is Yes.","published":"2021-11-12T22:15:08.000Z","lastModified":"2026-06-17T04:05:17.000Z","status":"Modified","sourceIdentifier":"psirt@lenovo.com","cvss":{"version":"3.1","score":6.8,"severity":"MEDIUM","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-287"],"affected":["lenovo/ideacentre c5-14mb05 firmware","lenovo/ideacentre 3-07imb05 firmware","lenovo/ideacentre 5-14imb05 firmware","lenovo/ideacentre 5-14iob6 firmware","lenovo/ideacentre creator 5-14iob6 firmware","lenovo/ideacentre g5-14imb05 firmware","lenovo/ideacentre gaming 5-14iob6 firmware","lenovo/thinkcentre m60e tiny firmware","lenovo/thinkcentre m630e firmware","lenovo/thinkcentre m70a firmware","lenovo/thinkcentre m70s firmware","lenovo/thinkcentre m70t firmware","lenovo/thinkcentre m710e firmware","lenovo/thinkcentre m710s firmware","lenovo/thinkcentre m710t firmware","lenovo/thinkcentre m720e firmware","lenovo/thinkcentre m75n firmware","lenovo/thinkcentre m75s gen 2 firmware","lenovo/thinkcentre m70a gen 2 firmware","lenovo/thinkcentre m70c firmware","lenovo/thinkcentre m70q firmware","lenovo/thinkcentre m75t gen 2 firmware","lenovo/thinkcentre m80q firmware","lenovo/thinkcentre m80s firmware","lenovo/thinkcentre m80t firmware","lenovo/thinkcentre m810z firmware","lenovo/thinkcentre m820z firmware","lenovo/thinkcentre m90a firmware","lenovo/thinkcentre m90q tiny firmware","lenovo/thinkcentre m90s firmware","lenovo/thinkcentre m90t firmware","lenovo/thinkcentre qt m410 firmware","lenovo/thinkcentre qt b415 firmware","lenovo/thinkcentre qt m415 firmware","lenovo/thinkcentre e75 t\\/s firmware","lenovo/ideacentre 310s-08igm firmware","lenovo/ideacentre 510a-15arr firmware","lenovo/ideacentre 510s-07icb firmware","lenovo/ideacentre 510s-07ick firmware","lenovo/v30a-22iml firmware","lenovo/v330 firmware","lenovo/v50a-24imb firmware","lenovo/v50s-07imb firmware","lenovo/v50a-22imb firmware","lenovo/v50t-13imb firmware","lenovo/v50t-13imb g2 firmware","lenovo/v520 firmware","lenovo/v520s firmware","lenovo/v530-15arr firmware","lenovo/v530-15icr firmware","lenovo/v530s-07icb firmware","lenovo/v530s-07icr firmware","lenovo/v55t-15api firmware","lenovo/thinkstation p340 tiny firmware","lenovo/thinkstation p340 firmware","lenovo/thinkstation p520 firmware","lenovo/thinkstation p520c firmware","lenovo/thinkstation p720 firmware","lenovo/thinkstation p920 firmware"],"epss":{"score":0.00238,"percentile":0.14738,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-67440","tags":["Vendor Advisory"],"source":"psirt@lenovo.com"},{"url":"https://support.lenovo.com/us/en/product_security/LEN-67440","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-3519","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}