VulnerabilityModified
CVE-2021-3718
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.
MEDIUM 4.6EPSS 0.22%
Does this matter?
Lower severity and a low EPSS score (0.22%). Track it; it rarely justifies an emergency change on its own.
Description
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.
- CVSS 3.1
- 4.6 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.22% probability · 12th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-232
- Affected
- lenovo/thinkpad 11e 3rd gen firmware · lenovo/thinkpad 11e 4th gen i3 firmware · lenovo/thinkpad 11e 4th gen i7 firmware · lenovo/thinkpad 11e 4th gen i5 firmware · lenovo/thinkpad 11e 4th gen celeron firmware · lenovo/thinkpad 11e yoga gen 6 firmware · lenovo/thinkpad 13 gen 2 firmware · lenovo/thinkpad e490 firmware · lenovo/thinkpad e490s firmware · lenovo/thinkpad e590 firmware · lenovo/thinkpad l13 firmware · lenovo/thinkpad l13 gen 2 firmware · lenovo/thinkpad l13 yoga firmware · lenovo/thinkpad l13 yoga gen 2 firmware · lenovo/thinkpad l14 gen 1 firmware · lenovo/thinkpad l14 firmware · lenovo/thinkpad l15 gen 1 firmware · lenovo/thinkpad l15 firmware · lenovo/thinkpad l380 firmware · lenovo/thinkpad l380 yoga firmware · +19 more
- Source
- psirt@lenovo.com
EPSS 0.2% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://support.lenovo.com/us/en/product_security/LEN-72619Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-72619Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.