Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-3519 Details

Description

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.8 MEDIUMVector:CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:6.4 MEDIUMVector:CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.lenovo.com/us/en/product_security/LEN-67440	CVE	Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-67440	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-287	Improper Authentication	[email protected]
CWE-287	Improper Authentication	[email protected]

Affected Products

Product	Versions
lenovo ideacentre c5-14mb05 firmware	< o4hkt33a
CPE cpe:2.3:o:lenovo:ideacentre_c5-14mb05_firmware:::::::: Remediation No remediation found in references.
lenovo ideacentre c5-14mb05	All versions
CPE cpe:2.3:h:lenovo:ideacentre_c5-14mb05:-:::::::* Remediation No remediation found in references.
lenovo ideacentre 3-07imb05 firmware	< m2vkt18a
CPE cpe:2.3:o:lenovo:ideacentre_3-07imb05_firmware:::::::: Remediation No remediation found in references.
lenovo ideacentre 3-07imb05	All versions
CPE cpe:2.3:h:lenovo:ideacentre_3-07imb05:-:::::::* Remediation No remediation found in references.
lenovo ideacentre 5-14imb05 firmware	< o4hkt33a
CPE cpe:2.3:o:lenovo:ideacentre_5-14imb05_firmware:::::::: Remediation No remediation found in references.
lenovo ideacentre 5-14imb05	All versions
CPE cpe:2.3:h:lenovo:ideacentre_5-14imb05:-:::::::* Remediation No remediation found in references.
lenovo ideacentre 5-14iob6 firmware	< m3gkt29a
CPE cpe:2.3:o:lenovo:ideacentre_5-14iob6_firmware:::::::: Remediation No remediation found in references.
lenovo ideacentre 5-14iob6	All versions
CPE cpe:2.3:h:lenovo:ideacentre_5-14iob6:-:::::::* Remediation No remediation found in references.
lenovo ideacentre creator 5-14iob6 firmware	< m3gkt29a
CPE cpe:2.3:o:lenovo:ideacentre_creator_5-14iob6_firmware:::::::: Remediation No remediation found in references.
lenovo ideacentre creator 5-14iob6	All versions
CPE cpe:2.3:h:lenovo:ideacentre_creator_5-14iob6:-:::::::* Remediation No remediation found in references.
lenovo ideacentre g5-14imb05 firmware	< o4hkt33a
CPE cpe:2.3:o:lenovo:ideacentre_g5-14imb05_firmware:::::::: Remediation No remediation found in references.
lenovo ideacentre g5-14imb05	All versions
CPE cpe:2.3:h:lenovo:ideacentre_g5-14imb05:-:::::::* Remediation No remediation found in references.
lenovo ideacentre gaming 5-14iob6 firmware	< m3gkt29a
CPE cpe:2.3:o:lenovo:ideacentre_gaming_5-14iob6_firmware:::::::: Remediation No remediation found in references.
lenovo ideacentre gaming 5-14iob6	All versions
CPE cpe:2.3:h:lenovo:ideacentre_gaming_5-14iob6:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m60e tiny firmware	< m3skt1ea
CPE cpe:2.3:o:lenovo:thinkcentre_m60e_tiny_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m60e tiny	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m60e_tiny:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m630e firmware	< m28kt36a
CPE cpe:2.3:o:lenovo:thinkcentre_m630e_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m630e	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m630e:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m70a firmware	<= m2skt21a
CPE cpe:2.3:o:lenovo:thinkcentre_m70a_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m70a	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m70a:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m70s firmware	< m2tkt3ca
CPE cpe:2.3:o:lenovo:thinkcentre_m70s_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m70s	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m70s:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m70t firmware	< m2tkt3ca
CPE cpe:2.3:o:lenovo:thinkcentre_m70t_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m70t	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m70t:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m710e firmware	< m1zkt37a
CPE cpe:2.3:o:lenovo:thinkcentre_m710e_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m710e	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m710e:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m710s firmware	< m16kt67a
CPE cpe:2.3:o:lenovo:thinkcentre_m710s_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m710s	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m710s:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m710t firmware	< m16kt67a
CPE cpe:2.3:o:lenovo:thinkcentre_m710t_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m710t	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m710t:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m720e firmware	< m30kt23a
CPE cpe:2.3:o:lenovo:thinkcentre_m720e_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m720e	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m720e:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m75n firmware	< m33kt21a
CPE cpe:2.3:o:lenovo:thinkcentre_m75n_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m75n	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m75n:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m75s gen 2 firmware	< m3bkt24a < m3akt35a
CPE cpe:2.3:o:lenovo:thinkcentre_m75s_gen_2_firmware:::::matisse:::* cpe:2.3:o:lenovo:thinkcentre_m75s_gen_2_firmware:::::picasso/renoir:::* Remediation No remediation found in references.
lenovo thinkcentre m75s gen 2	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m75s_gen_2:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m70a gen 2 firmware	< m3nkt17a
CPE cpe:2.3:o:lenovo:thinkcentre_m70a_gen_2_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m70a gen 2	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m70a_gen_2:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m70c firmware	< m2vkt18a
CPE cpe:2.3:o:lenovo:thinkcentre_m70c_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m70c	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m70c:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m70q firmware	< m2wkt49a
CPE cpe:2.3:o:lenovo:thinkcentre_m70q_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m70q	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m70q:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m75t gen 2 firmware	< m3bkt24a < m3akt35a
CPE cpe:2.3:o:lenovo:thinkcentre_m75t_gen_2_firmware:::::matisse:::* cpe:2.3:o:lenovo:thinkcentre_m75t_gen_2_firmware:::::picasso/renoir:::* Remediation No remediation found in references.
lenovo thinkcentre m75t gen 2	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m75t_gen_2:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m80q firmware	< m2wkt49a
CPE cpe:2.3:o:lenovo:thinkcentre_m80q_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m80q	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m80q:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m80s firmware	< m2tkt3ca
CPE cpe:2.3:o:lenovo:thinkcentre_m80s_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m80s	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m80s:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m80t firmware	< m2tkt3ca
CPE cpe:2.3:o:lenovo:thinkcentre_m80t_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m80t	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m80t:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m810z firmware	< m1ckt47a
CPE cpe:2.3:o:lenovo:thinkcentre_m810z_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m810z	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m810z:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m820z firmware	< m1nkt57a
CPE cpe:2.3:o:lenovo:thinkcentre_m820z_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m820z	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m820z:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m90a firmware	< m2rkt47a
CPE cpe:2.3:o:lenovo:thinkcentre_m90a_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m90a	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m90a:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m90q tiny firmware	< m2wkt49a
CPE cpe:2.3:o:lenovo:thinkcentre_m90q_tiny_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m90a tiny	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m90a_tiny:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m90s firmware	< m2tkt3ca
CPE cpe:2.3:o:lenovo:thinkcentre_m90s_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m90s	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m90s:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre m90t firmware	< m2tkt3ca
CPE cpe:2.3:o:lenovo:thinkcentre_m90t_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre m90t	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_m90t:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre qt m410 firmware	< m16kt67a
CPE cpe:2.3:o:lenovo:thinkcentre_qt_m410_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre qt m410	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_qt_m410:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre qt b415 firmware	< m16kt67a
CPE cpe:2.3:o:lenovo:thinkcentre_qt_b415_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre qt b415	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_qt_b415:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre qt m415 firmware	< m16kt67a
CPE cpe:2.3:o:lenovo:thinkcentre_qt_m415_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre qt m415	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_qt_m415:-:::::::* Remediation No remediation found in references.
lenovo thinkcentre e75 t/s firmware	< m16kt67a
CPE cpe:2.3:o:lenovo:thinkcentre_e75_t/s_firmware:::::::: Remediation No remediation found in references.
lenovo thinkcentre e75 t/s	All versions
CPE cpe:2.3:h:lenovo:thinkcentre_e75_t/s:-:::::::* Remediation No remediation found in references.
lenovo ideacentre 310s-08igm firmware	<= m1tkt31a
CPE cpe:2.3:o:lenovo:ideacentre_310s-08igm_firmware:::::::: Remediation No remediation found in references.
lenovo ideacentre 310s-08igm	All versions
CPE cpe:2.3:h:lenovo:ideacentre_310s-08igm:-:::::::* Remediation No remediation found in references.
microsoft windows 10	All versions
CPE cpe:2.3:o:microsoft:windows_10:-::::::x64: Remediation No remediation found in references.
lenovo ideacentre 510a-15arr firmware	<= o4dkt41a
CPE cpe:2.3:o:lenovo:ideacentre_510a-15arr_firmware:::::::: Remediation No remediation found in references.
lenovo ideacentre 510a-15arr	All versions
CPE cpe:2.3:h:lenovo:ideacentre_510a-15arr:-:::::::* Remediation No remediation found in references.
lenovo ideacentre 510s-07icb firmware	< m22kt46a
CPE cpe:2.3:o:lenovo:ideacentre_510s-07icb_firmware:::::::: Remediation No remediation found in references.
lenovo ideacentre 510s-07icb	All versions
CPE cpe:2.3:h:lenovo:ideacentre_510s-07icb:-:::::::* Remediation No remediation found in references.
lenovo ideacentre 510s-07ick firmware	< m30kt24a < m30kt23a
CPE cpe:2.3:o:lenovo:ideacentre_510s-07ick_firmware:::::::: Remediation No remediation found in references.
lenovo ideacentre 510s-07ick	All versions
CPE cpe:2.3:h:lenovo:ideacentre_510s-07ick:-:::::::* Remediation No remediation found in references.
lenovo v30a-22iml firmware	< m37kt26a
CPE cpe:2.3:o:lenovo:v30a-22iml_firmware:::::::: Remediation No remediation found in references.
lenovo v30a-22iml	All versions
CPE cpe:2.3:h:lenovo:v30a-22iml:-:::::::* Remediation No remediation found in references.
lenovo v330 firmware	<= m1tkt32a
CPE cpe:2.3:o:lenovo:v330_firmware:::::::: Remediation No remediation found in references.
lenovo v330	All versions
CPE cpe:2.3:h:lenovo:v330:-:::::::* Remediation No remediation found in references.
lenovo v50a-24imb firmware	< m36kt27a
CPE cpe:2.3:o:lenovo:v50a-24imb_firmware:::::::: Remediation No remediation found in references.
lenovo v50a-24imb	All versions
CPE cpe:2.3:h:lenovo:v50a-24imb:-:::::::* Remediation No remediation found in references.
lenovo v50s-07imb firmware	< m2vkt18a
CPE cpe:2.3:o:lenovo:v50s-07imb_firmware:::::::: Remediation No remediation found in references.
lenovo v50s-07imb	All versions
CPE cpe:2.3:h:lenovo:v50s-07imb:-:::::::* Remediation No remediation found in references.
lenovo v50a-22imb firmware	< m36kt27a
CPE cpe:2.3:o:lenovo:v50a-22imb_firmware:::::::: Remediation No remediation found in references.
lenovo v50a-22imb	All versions
CPE cpe:2.3:h:lenovo:v50a-22imb:-:::::::* Remediation No remediation found in references.
lenovo v50t-13imb firmware	< o4hkt33a
CPE cpe:2.3:o:lenovo:v50t-13imb_firmware:::::::: Remediation No remediation found in references.
lenovo v50t-13imb	All versions
CPE cpe:2.3:h:lenovo:v50t-13imb:-:::::::* Remediation No remediation found in references.
lenovo v50t-13imb g2 firmware	< m3gkt29a
CPE cpe:2.3:o:lenovo:v50t-13imb_g2_firmware:::::::: Remediation No remediation found in references.
lenovo v50t-13imb g2	All versions
CPE cpe:2.3:h:lenovo:v50t-13imb_g2:-:::::::* Remediation No remediation found in references.
lenovo v520 firmware	< m16kt67a
CPE cpe:2.3:o:lenovo:v520_firmware:::::::: Remediation No remediation found in references.
lenovo v520	All versions
CPE cpe:2.3:h:lenovo:v520:-:::::::* Remediation No remediation found in references.
lenovo v520s firmware	< m16kt67a
CPE cpe:2.3:o:lenovo:v520s_firmware:::::::: Remediation No remediation found in references.
lenovo v520s	All versions
CPE cpe:2.3:h:lenovo:v520s:-:::::::* Remediation No remediation found in references.
lenovo v530-15arr firmware	<= o4dkt41a
CPE cpe:2.3:o:lenovo:v530-15arr_firmware:::::::: Remediation No remediation found in references.
lenovo v530-15arr	All versions
CPE cpe:2.3:h:lenovo:v530-15arr:-:::::::* Remediation No remediation found in references.
lenovo v530-15icr firmware	< m2ykt29a
CPE cpe:2.3:o:lenovo:v530-15icr_firmware:::::::: Remediation No remediation found in references.
lenovo v530-15icr	All versions
CPE cpe:2.3:h:lenovo:v530-15icr:-:::::::* Remediation No remediation found in references.
lenovo v530s-07icb firmware	< m30kt23a
CPE cpe:2.3:o:lenovo:v530s-07icb_firmware:::::::: Remediation No remediation found in references.
lenovo v530s-07icb	All versions
CPE cpe:2.3:h:lenovo:v530s-07icb:-:::::::* Remediation No remediation found in references.
lenovo v530s-07icr firmware	< m30kt23a
CPE cpe:2.3:o:lenovo:v530s-07icr_firmware:::::::: Remediation No remediation found in references.
lenovo v530s-07icr	All versions
CPE cpe:2.3:h:lenovo:v530s-07icr:-:::::::* Remediation No remediation found in references.
lenovo v55t-15api firmware	<= o4dkt41a
CPE cpe:2.3:o:lenovo:v55t-15api_firmware:::::::: Remediation No remediation found in references.
lenovo v55t-15api	All versions
CPE cpe:2.3:h:lenovo:v55t-15api:-:::::::* Remediation No remediation found in references.
lenovo thinkstation p340 tiny firmware	< m2wkt49a
CPE cpe:2.3:o:lenovo:thinkstation_p340_tiny_firmware:::::::: Remediation No remediation found in references.
lenovo thinkstation p340 tiny	All versions
CPE cpe:2.3:h:lenovo:thinkstation_p340_tiny:-:::::::* Remediation No remediation found in references.
lenovo thinkstation p340 firmware	< s08kt3fa
CPE cpe:2.3:o:lenovo:thinkstation_p340_firmware:::::::: Remediation No remediation found in references.
lenovo thinkstation p340	All versions
CPE cpe:2.3:h:lenovo:thinkstation_p340:-:::::::* Remediation No remediation found in references.
lenovo thinkstation p520 firmware	<= s03kt49a
CPE cpe:2.3:o:lenovo:thinkstation_p520_firmware:::::::: Remediation No remediation found in references.
lenovo thinkstation p520	All versions
CPE cpe:2.3:h:lenovo:thinkstation_p520:-:::::::* Remediation No remediation found in references.
lenovo thinkstation p520c firmware	<= s03kt49a
CPE cpe:2.3:o:lenovo:thinkstation_p520c_firmware:::::::: Remediation No remediation found in references.
lenovo thinkstation p520c	All versions
CPE cpe:2.3:h:lenovo:thinkstation_p520c:-:::::::* Remediation No remediation found in references.
lenovo thinkstation p720 firmware	< s04kt54a\/s04kt54p
CPE cpe:2.3:o:lenovo:thinkstation_p720_firmware:::::::: Remediation No remediation found in references.
lenovo thinkstation p720	All versions
CPE cpe:2.3:h:lenovo:thinkstation_p720:-:::::::* Remediation No remediation found in references.
lenovo thinkstation p920 firmware	< s04kt54a\/s04kt54p
CPE cpe:2.3:o:lenovo:thinkstation_p920_firmware:::::::: Remediation No remediation found in references.
lenovo thinkstation p920	All versions
CPE cpe:2.3:h:lenovo:thinkstation_p920:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Nov 19, 2021	Initial Analysis	[email protected]

CVE-2021-3519 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation