Find a vulnerability

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

10 vulnerabilities found for ideapad_3-17alc6_firmware by lenovo

CVE-2024-3100 (GCVE-0-2024-3100)

Vulnerability from nvd – Published: 2024-09-13 17:26 – Updated: 2024-09-17 14:38

Summary

A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-13 21:05 UTC

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

lenovo CNA under the mitre root

CNA scorecard B 84/100 over 43 records in the last 180 days details

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…

Impacted products

79 products

Vendor	Product	Version
Lenovo	100w Gen 3 Laptop (Lenovo) BIOS	Affected: 0 , < GACN48WW (custom)
Lenovo	100w Gen 4 Laptop (Lenovo) BIOS	Affected: 0 , < L2CN34WW/L3CN34WW (custom)
Lenovo	13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS	Affected: 0 , < JACN41WW (custom)
Lenovo	13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS	Affected: 0 , < KBCN29WW (custom)
Lenovo	14W Gen 2 Laptop (Lenovo) BIOS	Affected: 0 , < H0CN29WW (custom)
Lenovo	300w Gen 3 Laptop (Lenovo) BIOS	Affected: 0 , < GACN48WW (custom)
Lenovo	300w Yoga Gen 4 Laptop (Lenovo) BIOS	Affected: 0 , < L2CN34WW/L3CN34WW (custom)
Lenovo	500w Yoga Gen 4 Laptop (Lenovo) BIOS	Affected: 0 , < L2CN34WW/L3CN34WW (custom)
Lenovo	Flex 5-14ITL05 Laptop (ideapad) BIOS	Affected: 0 , < FXCN47WW (custom)
Lenovo	Flex 5-15ITL05 Laptop (ideapad) BIOS	Affected: 0 , < FXCN47WW (custom)
Lenovo	IdeaPad 1 14ALC7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 1 15ALC7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 1-11IGL05 Laptop BIOS	Affected: 0 , < DWCN31WW (custom)
Lenovo	IdeaPad 1-14IGL05 Laptop BIOS	Affected: 0 , < DWCN31WW (custom)
Lenovo	IdeaPad 3 14ABA7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 3 15ABA7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 3 17ABA7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 3-14ALC6 Laptop BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	IdeaPad 3-15ALC6 Laptop BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	IdeaPad 3-17ALC6 Laptop BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	ideapad 5-15ALC05 Laptop BIOS	Affected: 0 , < H2CN35WW (custom)
Lenovo	IdeaPad Flex 5 14ABR8 BIOS	Affected: 0 , < L7CN21WW (custom)
Lenovo	IdeaPad Flex 5 14ALC7 Laptop BIOS	Affected: 0 , < JCCN40WW (custom)
Lenovo	IdeaPad Flex 5 14IAU7 Laptop BIOS	Affected: 0 , < J7CN48WW (custom)
Lenovo	IdeaPad Flex 5 14IRU8 BIOS	Affected: 0 , < L6CN24WW (custom)
Lenovo	IdeaPad Flex 5 16ABR8 BIOS	Affected: 0 , < L7CN21WW (custom)
Lenovo	IdeaPad Flex 5 16ALC7 BIOS	Affected: 0 , < JCCN40WW (custom)
Lenovo	IdeaPad Flex 5 16IAU7 BIOS	Affected: 0 , < J7CN48WW (custom)
Lenovo	IdeaPad Flex 5 16IRU8 BIOS	Affected: 0 , < L6CN24WW (custom)
Lenovo	IdeaPad Slim 3 14ABR8 BIOS	Affected: 0 , ≤ KYCN32WW (custom)
Lenovo	IdeaPad Slim 3 14AMN8 BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	IdeaPad Slim 3 15ABR8 BIOS	Affected: 0 , ≤ KYCN32WW (custom)
Lenovo	IdeaPad Slim 3 15AMN8 BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	IdeaPad Slim 3 16ABR8 BIOS	Affected: 0 , ≤ KYCN32WW (custom)
Lenovo	IdeaPad Slim 5 Light 14ABR8 BIOS	Affected: 0 , ≤ L9CN26WW (custom)
Lenovo	K14 G2 IRU BIOS	Affected: 0 , < MMCN36WW (custom)
Lenovo	Lenovo Flex 7 14IAU7 BIOS	Affected: 0 , < J7CN48WW (custom)
Lenovo	Lenovo Flex 7 14IRU8 BIOS	Affected: 0 , < L6CN24WW (custom)
Lenovo	Lenovo V14 G3 ABA Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	Lenovo V14 G4 ABP BIOS	Affected: 0 , < MSCN16WW (custom)
Lenovo	Lenovo V14 G4 AMN BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	Lenovo V15 G3 ABA Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	Lenovo V15 G4 ABP BIOS	Affected: 0 , < MSCN16WW (custom)
Lenovo	Lenovo V15 G4 AMN BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	ThinkBook 13s G4 ARB BIOS	Affected: 0 , < HZCN55WW (custom)
Lenovo	ThinkBook 13s G4 IAP BIOS	Affected: 0 , < HWCN52WW (custom)
Lenovo	ThinkBook 13x G2 IAP Laptop BIOS	Affected: 0 , < HXCN57WW (custom)
Lenovo	ThinkBook 14 G6 ABP BIOS	Affected: 0 , < MNCN27WW (custom)
Lenovo	ThinkBook 14 G6 IRL BIOS	Affected: 0 , < MMCN36WW (custom)
Lenovo	ThinkBook 16 G6 ABP BIOS	Affected: 0 , < MNCN27WW (custom)
Lenovo	ThinkBook 16 G6 IRL BIOS	Affected: 0 , < MMCN36WW (custom)
Lenovo	V14 G2-ALC Laptop (Lenovo) BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	V15 G2-ALC Laptop (Lenovo) BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS	Affected: 0 , < GZCN36WW (custom)
Lenovo	Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS	Affected: 0 , < GZCN36WW (custom)
lenovo	ideapad_1-11igl05_firmware	Affected: 0 , < dwcn31ww (custom) cpe:2.3:o:lenovo:ideapad_1-14igl05_firmware:-:::::::* cpe:2.3:o:lenovo:ideapad_1-11igl05_firmware:-:::::::*
lenovo	flex_5-14itl05_firmware	Affected: 0 , < fxcn47ww (custom) cpe:2.3:o:lenovo:ideapad_5-15itl05_firmware:-:::::::* cpe:2.3:o:lenovo:flex_5-14itl05_firmware:-:::::::*
lenovo	100w_gen_3_firmware	Affected: 0 , < gacn48ww (custom) cpe:2.3:o:lenovo:300w_gen_3_firmware:-:::::::* cpe:2.3:o:lenovo:100w_gen_3_firmware:-:::::::*
lenovo	yoga_slim_7_pro-14ach5_o_firmware	Affected: 0 , < gzcn36ww (custom) cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_firmware:::::::: cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_o_firmware::::::::
lenovo	14w_gen_2_firmware	Affected: 0 , < h0cn29ww (custom) cpe:2.3:o:lenovo:14w_gen_2_firmware:-:::::::*
lenovo	ideapad_5-15alc05_firmware	Affected: 0 , < h2cn35ww (custom) cpe:2.3:o:lenovo:ideapad_5-15alc05_firmware:-:::::::*
lenovo	thinkbook_13s_g4_iap_firmware	Affected: 0 , < hwcn52ww (custom) cpe:2.3:o:lenovo:thinkbook_13s_g4_iap_firmware::::::::
lenovo	thinkbook_13x_g2_iap_firmware	Affected: 0 , < hxcn57ww (custom) cpe:2.3:o:lenovo:thinkbook_13x_g2_iap_firmware::::::::
lenovo	thinkbook_13s_g4_arb_firmware	Affected: 0 , < hzcx55ww (custom) cpe:2.3:o:lenovo:thinkbook_13s_g4_arb_firmware::::::::
lenovo	ideapad_flex_5_16iau7_firmware	Affected: 0 , < j7cn48ww (custom) cpe:2.3:o:lenovo:flex_7_14iau7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_14iau7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_16iau7_firmware::::::::
lenovo	13w_yoga_firmware	Affected: 0 , < jacn41ww (custom) cpe:2.3:o:lenovo:13w_yoga_firmware:-:::::::*
lenovo	ideapad_flex_5_14alc7_firmware	Affected: 0 , < jccn40ww (custom) cpe:2.3:o:lenovo:ideapad_flex_5_16alc7_firmware:-:::::::* cpe:2.3:o:lenovo:ideapad_flex_5_14alc7_firmware:-:::::::*
lenovo	ideapad_1_15alc7_firmware	Affected: 0 , < jtcn54ww (custom) cpe:2.3:o:lenovo:v15_g3_aba_firmware:::::::: cpe:2.3:o:lenovo:v14_g3_aba_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3_14aba7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3_15aba7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3_17aba7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_1_14alc7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_1_15alc7_firmware::::::::
lenovo	13w_yoga_gen_2_firmware	Affected: 0 , < kbcn29ww (custom) cpe:2.3:o:lenovo:13w_yoga_gen_2_firmware::::::::
lenovo	ideapad_slim_3_15amn8_firmware	Affected: 0 , < l1cn41ww (custom) cpe:2.3:o:lenovo:v14_g4_amn_firmware:::::::: cpe:2.3:o:lenovo:v15_g4_amn_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_14amn8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_15amn8_firmware::::::::
lenovo	500w_yoga_gen_4_firmware	Affected: 0 , < l2cn34ww (custom) Affected: 0 , < l3cn34ww (custom) cpe:2.3:o:lenovo:100w_gen_4_firmware:::::::: cpe:2.3:o:lenovo:300w_yoga_gen_4_firmware:::::::: cpe:2.3:o:lenovo:500w_yoga_gen_4_firmware::::::::
lenovo	ideapad_flex_5_16iru8_firmware	Affected: 0 , < l6cn24ww (custom) cpe:2.3:o:lenovo:flex_7_14iru8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_14iru8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_16iru8_firmware::::::::
lenovo	ideapad_flex_5_16abr8_firmware	Affected: 0 , < l7cn21ww (custom) cpe:2.3:o:lenovo:ideapad_flex_5_14abr8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_16abr8_firmware::::::::
lenovo	k14_g2_iru_firmware	Affected: 0 , < mmcn36ww (custom) cpe:2.3:o:lenovo:thinkbook_14_g6_irl_firmware:::::::: cpe:2.3:o:lenovo:thinkbook_16_g6_irl_firmware:::::::: cpe:2.3:o:lenovo:k14_g2_iru_firmware::::::::
lenovo	thinkbook_16_g6_abp_firmware	Affected: 0 , < mncn27ww (custom) cpe:2.3:o:lenovo:thinkbook_14_g6_abp_firmware:::::::: cpe:2.3:o:lenovo:thinkbook_16_g6_abp_firmware::::::::
lenovo	v15_g4_abp_firmware	Affected: 0 , < mscn16ww (custom) cpe:2.3:o:lenovo:v14_g4_abp_firmware:::::::: cpe:2.3:o:lenovo:v15_g4_abp_firmware::::::::
lenovo	ideapad_3-17alc6_firmware	Affected: 0 , < glcn63ww (custom) cpe:2.3:o:lenovo:v14_g2-alc_firmware:::::::: cpe:2.3:o:lenovo:v15_g2-alc_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware::::::::
lenovo	ideapad_slim_3_16abr8_firmware	Affected: 0 , < kycn32ww (custom) cpe:2.3:o:lenovo:ideapad_slim_3_14abr8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_15abr8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_16abr8_firmware::::::::
lenovo	ideapad_slim_5_light_14abr8_firmware	Affected: 0 , < l9cn26ww (custom) cpe:2.3:o:lenovo:ideapad_slim_5_light_14abr8_firmware::::::::

Credits

Lenovo thanks Eason for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_1-14igl05_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_1-11igl05_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_1-11igl05_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "dwcn31ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_5-15itl05_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:flex_5-14itl05_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "flex_5-14itl05_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "fxcn47ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:300w_gen_3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:100w_gen_3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "100w_gen_3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "gacn48ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_o_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "yoga_slim_7_pro-14ach5_o_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "gzcn36ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:14w_gen_2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "14w_gen_2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "h0cn29ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_5-15alc05_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_5-15alc05_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "h2cn35ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_13s_g4_iap_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_13s_g4_iap_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "hwcn52ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_13x_g2_iap_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_13x_g2_iap_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "hxcn57ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_13s_g4_arb_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_13s_g4_arb_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "hzcx55ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:flex_7_14iau7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_14iau7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_16iau7_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_16iau7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "j7cn48ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:13w_yoga_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "13w_yoga_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "jacn41ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_flex_5_16alc7_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_14alc7_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_14alc7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "jccn40ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v15_g3_aba_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v14_g3_aba_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3_14aba7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3_15aba7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3_17aba7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_1_14alc7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_1_15alc7_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_1_15alc7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "jtcn54ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:13w_yoga_gen_2_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "13w_yoga_gen_2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "kbcn29ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v14_g4_amn_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v15_g4_amn_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_14amn8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_15amn8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_slim_3_15amn8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l1cn41ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:100w_gen_4_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:300w_yoga_gen_4_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:500w_yoga_gen_4_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "500w_yoga_gen_4_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l2cn34ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "l3cn34ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:flex_7_14iru8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_14iru8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_16iru8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_16iru8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l6cn24ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_flex_5_14abr8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_16abr8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_16abr8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l7cn21ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_14_g6_irl_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:thinkbook_16_g6_irl_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:k14_g2_iru_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "k14_g2_iru_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "mmcn36ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_14_g6_abp_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:thinkbook_16_g6_abp_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_16_g6_abp_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "mncn27ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v14_g4_abp_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v15_g4_abp_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "v15_g4_abp_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "mscn16ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v14_g2-alc_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v15_g2-alc_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_3-17alc6_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "glcn63ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_slim_3_14abr8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_15abr8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_16abr8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_slim_3_16abr8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "kycn32ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_slim_5_light_14abr8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_slim_5_light_14abr8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l9cn26ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-3100",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-13T21:05:01.377114Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-17T14:38:51.949Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "100w Gen 3 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GACN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "100w Gen 4 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L2CN34WW/L3CN34WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JACN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "KBCN29WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "14W Gen 2 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "H0CN29WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "300w Gen 3 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GACN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "300w Yoga Gen 4 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L2CN34WW/L3CN34WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "500w Yoga Gen 4 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L2CN34WW/L3CN34WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Flex 5-14ITL05 Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "FXCN47WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Flex 5-15ITL05 Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "FXCN47WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1 14ALC7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1 15ALC7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1-11IGL05 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "DWCN31WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1-14IGL05 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "DWCN31WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3 14ABA7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3 15ABA7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3 17ABA7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3-14ALC6 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3-15ALC6 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3-17ALC6 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ideapad 5-15ALC05 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "H2CN35WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L7CN21WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14ALC7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JCCN40WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14IAU7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "J7CN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14IRU8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L6CN24WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L7CN21WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16ALC7 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JCCN40WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16IAU7 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "J7CN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16IRU8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L6CN24WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 14ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "KYCN32WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 14AMN8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 15ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "KYCN32WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 15AMN8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 16ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "KYCN32WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 5 Light 14ABR8  BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "L9CN26WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "K14 G2 IRU BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MMCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo Flex 7 14IAU7 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "J7CN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo Flex 7 14IRU8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L6CN24WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V14 G3 ABA Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V14 G4 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MSCN16WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V14 G4 AMN BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V15 G3 ABA Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V15 G4 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MSCN16WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V15 G4 AMN BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 13s G4 ARB BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "HZCN55WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 13s G4 IAP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "HWCN52WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 13x G2 IAP Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "HXCN57WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 14 G6 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MNCN27WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 14 G6 IRL BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MMCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 16 G6 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MNCN27WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 16 G6 IRL BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MMCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "V14 G2-ALC Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "V15 G2-ALC Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GZCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GZCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Lenovo thanks Eason for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cp\u003eA potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-13T17:26:33.357Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-165524"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cp\u003e\n\nUpdate system firmware to the version (or newer) indicated for your model in the advisory:\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://support.lenovo.com/us/en/product_security/LEN-165524\"\u003ehttps://support.lenovo.com/us/en/product_security/LEN-165524\u003c/a\u003e\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the advisory:\u00a0 https://support.lenovo.com/us/en/product_security/LEN-165524"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2024-3100",
    "datePublished": "2024-09-13T17:26:33.357Z",
    "dateReserved": "2024-03-29T17:56:28.533Z",
    "dateUpdated": "2024-09-17T14:38:51.949Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1892 (GCVE-0-2022-1892)

Vulnerability from nvd – Published: 2023-01-23 15:31 – Updated: 2025-04-02 14:37

Summary

A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-02 14:36 UTC

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

lenovo CNA under the mitre root

CNA scorecard B 84/100 over 43 records in the last 180 days details

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…

Impacted products

1 product

Vendor	Product	Version
Lenovo	BIOS	Affected: various

Credits

Lenovo thanks Martin Smolár from ESET for reporting these issues.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:17:00.914Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-91369"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-1892",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:36:42.939310Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T14:37:24.386Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting these issues."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code."
            }
          ],
          "value": "A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-26T06:03:10.975Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-91369"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-91369\u003cbr\u003e"
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-91369\n"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2022-1892",
    "datePublished": "2023-01-23T15:31:19.243Z",
    "dateReserved": "2022-05-25T20:29:39.456Z",
    "dateUpdated": "2025-04-02T14:37:24.386Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-3972 (GCVE-0-2021-3972)

Vulnerability from nvd – Published: 2022-04-22 20:30 – Updated: 2024-08-03 17:09

Summary

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-489 - Leftover Debug Code

Assigner

lenovo CNA under the mitre root

CNA scorecard B 84/100 over 43 records in the last 180 days details

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Lenovo	Notebook BIOS	Affected: various

Credits

Lenovo thanks Martin Smolár from ESET for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:09:09.723Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Notebook BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices\u0027 BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-489",
              "description": "CWE-489 Leftover Debug Code",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-22T20:30:40.000Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
        }
      ],
      "source": {
        "advisory": "LEN-73440",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "ID": "CVE-2021-3972",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Notebook BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "various"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Lenovo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices\u0027 BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-489 Leftover Debug Code"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-73440",
              "refsource": "MISC",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
          }
        ],
        "source": {
          "advisory": "LEN-73440",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2021-3972",
    "datePublished": "2022-04-22T20:30:40.000Z",
    "dateReserved": "2021-11-17T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:09:09.723Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-3971 (GCVE-0-2021-3971)

Vulnerability from nvd – Published: 2022-04-22 20:30 – Updated: 2024-08-03 17:09

Summary

A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-489 - Leftover Debug Code

Assigner

lenovo CNA under the mitre root

CNA scorecard B 84/100 over 43 records in the last 180 days details

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Lenovo	Notebook BIOS	Affected: various

Credits

Lenovo thanks Martin Smolár from ESET for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:09:09.596Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Notebook BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-489",
              "description": "CWE-489 Leftover Debug Code",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-22T20:30:38.000Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
        }
      ],
      "source": {
        "advisory": "LEN-73440",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "ID": "CVE-2021-3971",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Notebook BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "various"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Lenovo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-489 Leftover Debug Code"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-73440",
              "refsource": "MISC",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
          }
        ],
        "source": {
          "advisory": "LEN-73440",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2021-3971",
    "datePublished": "2022-04-22T20:30:38.000Z",
    "dateReserved": "2021-11-17T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:09:09.596Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-3970 (GCVE-0-2021-3970)

Vulnerability from nvd – Published: 2022-04-22 20:30 – Updated: 2024-08-03 17:09

Summary

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-20 - Improper Input Validation

Assigner

lenovo CNA under the mitre root

CNA scorecard B 84/100 over 43 records in the last 180 days details

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Lenovo	Notebook BIOS	Affected: various

Credits

Lenovo thanks Martin Smolár from ESET for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:09:09.797Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Notebook BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-22T20:30:37.000Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
        }
      ],
      "source": {
        "advisory": "LEN-73440",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "ID": "CVE-2021-3970",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Notebook BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "various"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Lenovo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20 Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-73440",
              "refsource": "MISC",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
          }
        ],
        "source": {
          "advisory": "LEN-73440",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2021-3970",
    "datePublished": "2022-04-22T20:30:37.000Z",
    "dateReserved": "2021-11-17T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:09:09.797Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-3100 (GCVE-0-2024-3100)

Vulnerability from cvelistv5 – Published: 2024-09-13 17:26 – Updated: 2024-09-17 14:38

Summary

A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-13 21:05 UTC

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

lenovo CNA under the mitre root

CNA scorecard B 84/100 over 43 records in the last 180 days details

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…

Impacted products

79 products

Vendor	Product	Version
Lenovo	100w Gen 3 Laptop (Lenovo) BIOS	Affected: 0 , < GACN48WW (custom)
Lenovo	100w Gen 4 Laptop (Lenovo) BIOS	Affected: 0 , < L2CN34WW/L3CN34WW (custom)
Lenovo	13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS	Affected: 0 , < JACN41WW (custom)
Lenovo	13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS	Affected: 0 , < KBCN29WW (custom)
Lenovo	14W Gen 2 Laptop (Lenovo) BIOS	Affected: 0 , < H0CN29WW (custom)
Lenovo	300w Gen 3 Laptop (Lenovo) BIOS	Affected: 0 , < GACN48WW (custom)
Lenovo	300w Yoga Gen 4 Laptop (Lenovo) BIOS	Affected: 0 , < L2CN34WW/L3CN34WW (custom)
Lenovo	500w Yoga Gen 4 Laptop (Lenovo) BIOS	Affected: 0 , < L2CN34WW/L3CN34WW (custom)
Lenovo	Flex 5-14ITL05 Laptop (ideapad) BIOS	Affected: 0 , < FXCN47WW (custom)
Lenovo	Flex 5-15ITL05 Laptop (ideapad) BIOS	Affected: 0 , < FXCN47WW (custom)
Lenovo	IdeaPad 1 14ALC7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 1 15ALC7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 1-11IGL05 Laptop BIOS	Affected: 0 , < DWCN31WW (custom)
Lenovo	IdeaPad 1-14IGL05 Laptop BIOS	Affected: 0 , < DWCN31WW (custom)
Lenovo	IdeaPad 3 14ABA7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 3 15ABA7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 3 17ABA7 Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	IdeaPad 3-14ALC6 Laptop BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	IdeaPad 3-15ALC6 Laptop BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	IdeaPad 3-17ALC6 Laptop BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	ideapad 5-15ALC05 Laptop BIOS	Affected: 0 , < H2CN35WW (custom)
Lenovo	IdeaPad Flex 5 14ABR8 BIOS	Affected: 0 , < L7CN21WW (custom)
Lenovo	IdeaPad Flex 5 14ALC7 Laptop BIOS	Affected: 0 , < JCCN40WW (custom)
Lenovo	IdeaPad Flex 5 14IAU7 Laptop BIOS	Affected: 0 , < J7CN48WW (custom)
Lenovo	IdeaPad Flex 5 14IRU8 BIOS	Affected: 0 , < L6CN24WW (custom)
Lenovo	IdeaPad Flex 5 16ABR8 BIOS	Affected: 0 , < L7CN21WW (custom)
Lenovo	IdeaPad Flex 5 16ALC7 BIOS	Affected: 0 , < JCCN40WW (custom)
Lenovo	IdeaPad Flex 5 16IAU7 BIOS	Affected: 0 , < J7CN48WW (custom)
Lenovo	IdeaPad Flex 5 16IRU8 BIOS	Affected: 0 , < L6CN24WW (custom)
Lenovo	IdeaPad Slim 3 14ABR8 BIOS	Affected: 0 , ≤ KYCN32WW (custom)
Lenovo	IdeaPad Slim 3 14AMN8 BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	IdeaPad Slim 3 15ABR8 BIOS	Affected: 0 , ≤ KYCN32WW (custom)
Lenovo	IdeaPad Slim 3 15AMN8 BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	IdeaPad Slim 3 16ABR8 BIOS	Affected: 0 , ≤ KYCN32WW (custom)
Lenovo	IdeaPad Slim 5 Light 14ABR8 BIOS	Affected: 0 , ≤ L9CN26WW (custom)
Lenovo	K14 G2 IRU BIOS	Affected: 0 , < MMCN36WW (custom)
Lenovo	Lenovo Flex 7 14IAU7 BIOS	Affected: 0 , < J7CN48WW (custom)
Lenovo	Lenovo Flex 7 14IRU8 BIOS	Affected: 0 , < L6CN24WW (custom)
Lenovo	Lenovo V14 G3 ABA Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	Lenovo V14 G4 ABP BIOS	Affected: 0 , < MSCN16WW (custom)
Lenovo	Lenovo V14 G4 AMN BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	Lenovo V15 G3 ABA Laptop BIOS	Affected: 0 , < JTCN54WW (custom)
Lenovo	Lenovo V15 G4 ABP BIOS	Affected: 0 , < MSCN16WW (custom)
Lenovo	Lenovo V15 G4 AMN BIOS	Affected: 0 , < L1CN41WW (custom)
Lenovo	ThinkBook 13s G4 ARB BIOS	Affected: 0 , < HZCN55WW (custom)
Lenovo	ThinkBook 13s G4 IAP BIOS	Affected: 0 , < HWCN52WW (custom)
Lenovo	ThinkBook 13x G2 IAP Laptop BIOS	Affected: 0 , < HXCN57WW (custom)
Lenovo	ThinkBook 14 G6 ABP BIOS	Affected: 0 , < MNCN27WW (custom)
Lenovo	ThinkBook 14 G6 IRL BIOS	Affected: 0 , < MMCN36WW (custom)
Lenovo	ThinkBook 16 G6 ABP BIOS	Affected: 0 , < MNCN27WW (custom)
Lenovo	ThinkBook 16 G6 IRL BIOS	Affected: 0 , < MMCN36WW (custom)
Lenovo	V14 G2-ALC Laptop (Lenovo) BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	V15 G2-ALC Laptop (Lenovo) BIOS	Affected: 0 , ≤ GLCN63WW (custom)
Lenovo	Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS	Affected: 0 , < GZCN36WW (custom)
Lenovo	Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS	Affected: 0 , < GZCN36WW (custom)
lenovo	ideapad_1-11igl05_firmware	Affected: 0 , < dwcn31ww (custom) cpe:2.3:o:lenovo:ideapad_1-14igl05_firmware:-:::::::* cpe:2.3:o:lenovo:ideapad_1-11igl05_firmware:-:::::::*
lenovo	flex_5-14itl05_firmware	Affected: 0 , < fxcn47ww (custom) cpe:2.3:o:lenovo:ideapad_5-15itl05_firmware:-:::::::* cpe:2.3:o:lenovo:flex_5-14itl05_firmware:-:::::::*
lenovo	100w_gen_3_firmware	Affected: 0 , < gacn48ww (custom) cpe:2.3:o:lenovo:300w_gen_3_firmware:-:::::::* cpe:2.3:o:lenovo:100w_gen_3_firmware:-:::::::*
lenovo	yoga_slim_7_pro-14ach5_o_firmware	Affected: 0 , < gzcn36ww (custom) cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_firmware:::::::: cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_o_firmware::::::::
lenovo	14w_gen_2_firmware	Affected: 0 , < h0cn29ww (custom) cpe:2.3:o:lenovo:14w_gen_2_firmware:-:::::::*
lenovo	ideapad_5-15alc05_firmware	Affected: 0 , < h2cn35ww (custom) cpe:2.3:o:lenovo:ideapad_5-15alc05_firmware:-:::::::*
lenovo	thinkbook_13s_g4_iap_firmware	Affected: 0 , < hwcn52ww (custom) cpe:2.3:o:lenovo:thinkbook_13s_g4_iap_firmware::::::::
lenovo	thinkbook_13x_g2_iap_firmware	Affected: 0 , < hxcn57ww (custom) cpe:2.3:o:lenovo:thinkbook_13x_g2_iap_firmware::::::::
lenovo	thinkbook_13s_g4_arb_firmware	Affected: 0 , < hzcx55ww (custom) cpe:2.3:o:lenovo:thinkbook_13s_g4_arb_firmware::::::::
lenovo	ideapad_flex_5_16iau7_firmware	Affected: 0 , < j7cn48ww (custom) cpe:2.3:o:lenovo:flex_7_14iau7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_14iau7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_16iau7_firmware::::::::
lenovo	13w_yoga_firmware	Affected: 0 , < jacn41ww (custom) cpe:2.3:o:lenovo:13w_yoga_firmware:-:::::::*
lenovo	ideapad_flex_5_14alc7_firmware	Affected: 0 , < jccn40ww (custom) cpe:2.3:o:lenovo:ideapad_flex_5_16alc7_firmware:-:::::::* cpe:2.3:o:lenovo:ideapad_flex_5_14alc7_firmware:-:::::::*
lenovo	ideapad_1_15alc7_firmware	Affected: 0 , < jtcn54ww (custom) cpe:2.3:o:lenovo:v15_g3_aba_firmware:::::::: cpe:2.3:o:lenovo:v14_g3_aba_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3_14aba7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3_15aba7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3_17aba7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_1_14alc7_firmware:::::::: cpe:2.3:o:lenovo:ideapad_1_15alc7_firmware::::::::
lenovo	13w_yoga_gen_2_firmware	Affected: 0 , < kbcn29ww (custom) cpe:2.3:o:lenovo:13w_yoga_gen_2_firmware::::::::
lenovo	ideapad_slim_3_15amn8_firmware	Affected: 0 , < l1cn41ww (custom) cpe:2.3:o:lenovo:v14_g4_amn_firmware:::::::: cpe:2.3:o:lenovo:v15_g4_amn_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_14amn8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_15amn8_firmware::::::::
lenovo	500w_yoga_gen_4_firmware	Affected: 0 , < l2cn34ww (custom) Affected: 0 , < l3cn34ww (custom) cpe:2.3:o:lenovo:100w_gen_4_firmware:::::::: cpe:2.3:o:lenovo:300w_yoga_gen_4_firmware:::::::: cpe:2.3:o:lenovo:500w_yoga_gen_4_firmware::::::::
lenovo	ideapad_flex_5_16iru8_firmware	Affected: 0 , < l6cn24ww (custom) cpe:2.3:o:lenovo:flex_7_14iru8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_14iru8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_16iru8_firmware::::::::
lenovo	ideapad_flex_5_16abr8_firmware	Affected: 0 , < l7cn21ww (custom) cpe:2.3:o:lenovo:ideapad_flex_5_14abr8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_flex_5_16abr8_firmware::::::::
lenovo	k14_g2_iru_firmware	Affected: 0 , < mmcn36ww (custom) cpe:2.3:o:lenovo:thinkbook_14_g6_irl_firmware:::::::: cpe:2.3:o:lenovo:thinkbook_16_g6_irl_firmware:::::::: cpe:2.3:o:lenovo:k14_g2_iru_firmware::::::::
lenovo	thinkbook_16_g6_abp_firmware	Affected: 0 , < mncn27ww (custom) cpe:2.3:o:lenovo:thinkbook_14_g6_abp_firmware:::::::: cpe:2.3:o:lenovo:thinkbook_16_g6_abp_firmware::::::::
lenovo	v15_g4_abp_firmware	Affected: 0 , < mscn16ww (custom) cpe:2.3:o:lenovo:v14_g4_abp_firmware:::::::: cpe:2.3:o:lenovo:v15_g4_abp_firmware::::::::
lenovo	ideapad_3-17alc6_firmware	Affected: 0 , < glcn63ww (custom) cpe:2.3:o:lenovo:v14_g2-alc_firmware:::::::: cpe:2.3:o:lenovo:v15_g2-alc_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:::::::: cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware::::::::
lenovo	ideapad_slim_3_16abr8_firmware	Affected: 0 , < kycn32ww (custom) cpe:2.3:o:lenovo:ideapad_slim_3_14abr8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_15abr8_firmware:::::::: cpe:2.3:o:lenovo:ideapad_slim_3_16abr8_firmware::::::::
lenovo	ideapad_slim_5_light_14abr8_firmware	Affected: 0 , < l9cn26ww (custom) cpe:2.3:o:lenovo:ideapad_slim_5_light_14abr8_firmware::::::::

Credits

Lenovo thanks Eason for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_1-14igl05_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_1-11igl05_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_1-11igl05_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "dwcn31ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_5-15itl05_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:flex_5-14itl05_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "flex_5-14itl05_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "fxcn47ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:300w_gen_3_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:100w_gen_3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "100w_gen_3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "gacn48ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:yoga_slim_7_pro-14ach5_o_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "yoga_slim_7_pro-14ach5_o_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "gzcn36ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:14w_gen_2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "14w_gen_2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "h0cn29ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_5-15alc05_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_5-15alc05_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "h2cn35ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_13s_g4_iap_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_13s_g4_iap_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "hwcn52ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_13x_g2_iap_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_13x_g2_iap_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "hxcn57ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_13s_g4_arb_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_13s_g4_arb_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "hzcx55ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:flex_7_14iau7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_14iau7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_16iau7_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_16iau7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "j7cn48ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:13w_yoga_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "13w_yoga_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "jacn41ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_flex_5_16alc7_firmware:-:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_14alc7_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_14alc7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "jccn40ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v15_g3_aba_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v14_g3_aba_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3_14aba7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3_15aba7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3_17aba7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_1_14alc7_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_1_15alc7_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_1_15alc7_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "jtcn54ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:13w_yoga_gen_2_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "13w_yoga_gen_2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "kbcn29ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v14_g4_amn_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v15_g4_amn_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_14amn8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_15amn8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_slim_3_15amn8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l1cn41ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:100w_gen_4_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:300w_yoga_gen_4_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:500w_yoga_gen_4_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "500w_yoga_gen_4_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l2cn34ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "l3cn34ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:flex_7_14iru8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_14iru8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_16iru8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_16iru8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l6cn24ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_flex_5_14abr8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_flex_5_16abr8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_flex_5_16abr8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l7cn21ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_14_g6_irl_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:thinkbook_16_g6_irl_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:k14_g2_iru_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "k14_g2_iru_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "mmcn36ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkbook_14_g6_abp_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:thinkbook_16_g6_abp_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "thinkbook_16_g6_abp_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "mncn27ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v14_g4_abp_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v15_g4_abp_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "v15_g4_abp_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "mscn16ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:v14_g2-alc_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:v15_g2-alc_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3-14alc6_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3-15alc6_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_3-17alc6_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_3-17alc6_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "glcn63ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_slim_3_14abr8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_15abr8_firmware:*:*:*:*:*:*:*:*",
              "cpe:2.3:o:lenovo:ideapad_slim_3_16abr8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_slim_3_16abr8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "kycn32ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:ideapad_slim_5_light_14abr8_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ideapad_slim_5_light_14abr8_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "l9cn26ww",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-3100",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-13T21:05:01.377114Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-17T14:38:51.949Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "100w Gen 3 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GACN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "100w Gen 4 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L2CN34WW/L3CN34WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JACN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "KBCN29WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "14W Gen 2 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "H0CN29WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "300w Gen 3 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GACN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "300w Yoga Gen 4 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L2CN34WW/L3CN34WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "500w Yoga Gen 4 Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L2CN34WW/L3CN34WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Flex 5-14ITL05 Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "FXCN47WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Flex 5-15ITL05 Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "FXCN47WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1 14ALC7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1 15ALC7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1-11IGL05 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "DWCN31WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 1-14IGL05 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "DWCN31WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3 14ABA7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3 15ABA7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3 17ABA7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3-14ALC6 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3-15ALC6 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad 3-17ALC6 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ideapad 5-15ALC05 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "H2CN35WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L7CN21WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14ALC7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JCCN40WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14IAU7 Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "J7CN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 14IRU8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L6CN24WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L7CN21WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16ALC7 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JCCN40WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16IAU7 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "J7CN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Flex 5 16IRU8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L6CN24WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 14ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "KYCN32WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 14AMN8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 15ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "KYCN32WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 15AMN8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 3 16ABR8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "KYCN32WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IdeaPad Slim 5 Light 14ABR8  BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "L9CN26WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "K14 G2 IRU BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MMCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo Flex 7 14IAU7 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "J7CN48WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo Flex 7 14IRU8 BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L6CN24WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V14 G3 ABA Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V14 G4 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MSCN16WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V14 G4 AMN BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V15 G3 ABA Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "JTCN54WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V15 G4 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MSCN16WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Lenovo V15 G4 AMN BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "L1CN41WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 13s G4 ARB BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "HZCN55WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 13s G4 IAP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "HWCN52WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 13x G2 IAP Laptop BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "HXCN57WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 14 G6 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MNCN27WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 14 G6 IRL BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MMCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 16 G6 ABP BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MNCN27WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ThinkBook 16 G6 IRL BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "MMCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "V14 G2-ALC Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "V15 G2-ALC Laptop (Lenovo) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThanOrEqual": "GLCN63WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GZCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "lessThan": "GZCN36WW",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Lenovo thanks Eason for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cp\u003eA potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-13T17:26:33.357Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-165524"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003e\u003cdiv\u003e\u003cp\u003e\n\nUpdate system firmware to the version (or newer) indicated for your model in the advisory:\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://support.lenovo.com/us/en/product_security/LEN-165524\"\u003ehttps://support.lenovo.com/us/en/product_security/LEN-165524\u003c/a\u003e\u003c/p\u003e\u003c/div\u003e\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the advisory:\u00a0 https://support.lenovo.com/us/en/product_security/LEN-165524"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2024-3100",
    "datePublished": "2024-09-13T17:26:33.357Z",
    "dateReserved": "2024-03-29T17:56:28.533Z",
    "dateUpdated": "2024-09-17T14:38:51.949Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-1892 (GCVE-0-2022-1892)

Vulnerability from cvelistv5 – Published: 2023-01-23 15:31 – Updated: 2025-04-02 14:37

Summary

A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-02 14:36 UTC

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

lenovo CNA under the mitre root

CNA scorecard B 84/100 over 43 records in the last 180 days details

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…

Impacted products

1 product

Vendor	Product	Version
Lenovo	BIOS	Affected: various

Credits

Lenovo thanks Martin Smolár from ESET for reporting these issues.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:17:00.914Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-91369"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-1892",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-02T14:36:42.939310Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-02T14:37:24.386Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting these issues."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code."
            }
          ],
          "value": "A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-26T06:03:10.975Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-91369"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-91369\u003cbr\u003e"
            }
          ],
          "value": "Update system firmware to the version (or newer) indicated for your model in the product Impact section of LEN-91369\n"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2022-1892",
    "datePublished": "2023-01-23T15:31:19.243Z",
    "dateReserved": "2022-05-25T20:29:39.456Z",
    "dateUpdated": "2025-04-02T14:37:24.386Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-3972 (GCVE-0-2021-3972)

Vulnerability from cvelistv5 – Published: 2022-04-22 20:30 – Updated: 2024-08-03 17:09

Summary

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-489 - Leftover Debug Code

Assigner

lenovo CNA under the mitre root

CNA scorecard B 84/100 over 43 records in the last 180 days details

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Lenovo	Notebook BIOS	Affected: various

Credits

Lenovo thanks Martin Smolár from ESET for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:09:09.723Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Notebook BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices\u0027 BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-489",
              "description": "CWE-489 Leftover Debug Code",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-22T20:30:40.000Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
        }
      ],
      "source": {
        "advisory": "LEN-73440",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "ID": "CVE-2021-3972",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Notebook BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "various"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Lenovo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices\u0027 BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-489 Leftover Debug Code"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-73440",
              "refsource": "MISC",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
          }
        ],
        "source": {
          "advisory": "LEN-73440",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2021-3972",
    "datePublished": "2022-04-22T20:30:40.000Z",
    "dateReserved": "2021-11-17T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:09:09.723Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-3971 (GCVE-0-2021-3971)

Vulnerability from cvelistv5 – Published: 2022-04-22 20:30 – Updated: 2024-08-03 17:09

Summary

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-489 - Leftover Debug Code

Assigner

lenovo CNA under the mitre root

CNA scorecard B 84/100 over 43 records in the last 180 days details

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Lenovo	Notebook BIOS	Affected: various

Credits

Lenovo thanks Martin Smolár from ESET for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:09:09.596Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Notebook BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-489",
              "description": "CWE-489 Leftover Debug Code",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-22T20:30:38.000Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
        }
      ],
      "source": {
        "advisory": "LEN-73440",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "ID": "CVE-2021-3971",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Notebook BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "various"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Lenovo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-489 Leftover Debug Code"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-73440",
              "refsource": "MISC",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
          }
        ],
        "source": {
          "advisory": "LEN-73440",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2021-3971",
    "datePublished": "2022-04-22T20:30:38.000Z",
    "dateReserved": "2021-11-17T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:09:09.596Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-3970 (GCVE-0-2021-3970)

Vulnerability from cvelistv5 – Published: 2022-04-22 20:30 – Updated: 2024-08-03 17:09

Summary

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-20 - Improper Input Validation

Assigner

lenovo CNA under the mitre root

CNA scorecard B 84/100 over 43 records in the last 180 days details

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Lenovo	Notebook BIOS	Affected: various

Credits

Lenovo thanks Martin Smolár from ESET for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:09:09.797Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Notebook BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-22T20:30:37.000Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
        }
      ],
      "source": {
        "advisory": "LEN-73440",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "ID": "CVE-2021-3970",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Notebook BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "various"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Lenovo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20 Improper Input Validation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-73440",
              "refsource": "MISC",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
          }
        ],
        "source": {
          "advisory": "LEN-73440",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2021-3970",
    "datePublished": "2022-04-22T20:30:37.000Z",
    "dateReserved": "2021-11-17T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:09:09.797Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}