Vulnerability-Lookup

BDU:2022-02509 (CVE-2021-3971)

Vulnerability from fstec – Published: 2022-04-21 – Updated: 2022-04-21 – View on bdu.fstec.ru Fixed

Title

Уязвимость драйвера SecureBackDoor микропрограммного обеспечения BIOS ноутбуков Lenovo, позволяющая нарушителю разместить вредоносный код во флэшпамяти SPI

Summary

Уязвимость драйвера SecureBackDoor микропрограммного обеспечения BIOS ноутбуков Lenovo связана с возможностью изменения области защиты микропрограммы путем редактирования переменной NVRAM. Эксплуатация уязвимости может позволить нарушителю разместить вредоносный код во флэшпамяти SPI

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:C/A:C

6.7 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Authorization bypass

Incidents

Being clarified

Remediation

Software update

CWE

CWE-264 - Разрешения, привилегии и средства управления доступом

Aliases

CVE-2021-3971, LEN-73440

References

2 references

URL
https://support.lenovo.com/ru/en/product_security/len-73440
https://www.securitylab.ru/news/531212.php

Impacted products

74 products from 1 vendor

Vendors

Lenovo Group Limited

Products

IdeaPad 3 15ADA05, IdeaPad 3-14ADA05, IdeaPad 3-14ADA6, IdeaPad 3-14ALC6, IdeaPad 3-14ARE05, IdeaPad 3-15ADA6, IdeaPad 3-15ALC6, IdeaPad 3-15ARE05, IdeaPad 3-15IGL05, IdeaPad 3-17ADA05, IdeaPad 3-17ADA6, IdeaPad 3-17ALC6, IdeaPad 3-17ARE05, IdeaPad 3-17IIL05, IdeaPad L3 15ITL6, Ideapad Gaming L340-15IRH, IdeaPad L340-15IWL, Ideapad L340-17IRH, Ideapad L340-17IWL, Legion 5 Pro-16ACH6, Legion 5 Pro-16ACH6H, Legion 5 Pro-16ITH6, Legion 5 Pro-16ITH6H, Legion 5-15ACH6, Legion 5-15ACH6A, Legion 5-15ACH6H, Legion 5-15ITH6, Legion 5-15ITH6H, Legion 5-17ACH6, Legion 5-17ACH6H, Legion 5-17ITH6, Legion 5-17ITH6H, Legion 7-16ACHg6, Legion 7-16ITHg6, Legion Y540-15IRH, Legion Y540-15IRH-PG0, Legion Y540-17IRH, Legion Y540-17IRH-PG0, Legion Y545, Legion Y545-PG0, Legion Y7000-2019, Legion Y7000-2019-PG0, IdeaPad S145-14API, Ideapad S145-14AST, Ideapad S145-14IGM, Ideapad S145-14IIL, Ideapad S145-15API, Ideapad S145-15AST, Ideapad S145-15IGM, Ideapad S145-15IIL, Ideapad S540-13API, V14 G2-ALC, V14-ADA, V14-ARE, V14-IGL, V14-IIL, V140-15IWL, V15 G2-ALC, V15-ADA, V15-IGL, V15-IIL, V17-IIL, V340-17IWL, Yoga Slim 7 Pro-14ACH5 D, Yoga Slim 7 Pro-14ACH5, Yoga Slim 7 Pro-14ACH5 O, Yoga Slim 7 Pro-14ACH5 OD, ideapad 3-14IGL05, ideapad 3-14IIL05, ideapad 3-15IIL05, ideapad 5-15ARE05, ideapad Creator 5-15IMH05, ideapad Gaming 3-15ARH05, ideapad Gaming 3-15IMH05

Versions

до E8CN33WW (IdeaPad 3 15ADA05), до E8CN33WW (IdeaPad 3-14ADA05), до HBCN21WW (IdeaPad 3-14ADA6), до GLCN43WW (IdeaPad 3-14ALC6), до dzcn42ww (IdeaPad 3-14ARE05), до HBCN21WW (IdeaPad 3-15ADA6), до GLCN43WW (IdeaPad 3-15ALC6), до DZCN42WW (IdeaPad 3-15ARE05), до DVCN23WW (IdeaPad 3-15IGL05), до E8CN33WW (IdeaPad 3-17ADA05), до HBCN21WW (IdeaPad 3-17ADA6), до GLCN43WW (IdeaPad 3-17ALC6), до DZCN42WW (IdeaPad 3-17ARE05), до EMCN52WW (IdeaPad 3-17IIL05), до GFCN23WW (IdeaPad L3 15ITL6), до BGCN35WW (Ideapad Gaming L340-15IRH), до ATCN46WW (IdeaPad L340-15IWL), до BGCN35WW (Ideapad L340-17IRH), до ATCN46WW (Ideapad L340-17IWL), до HHCN25WW (Legion 5 Pro-16ACH6), до GKCN51WW (Legion 5 Pro-16ACH6H), до H1CN46WW (Legion 5 Pro-16ITH6), до H1CN46WW (Legion 5 Pro-16ITH6H), до HHCN25WW (Legion 5-15ACH6), до G9CN28WW (Legion 5-15ACH6A), до GKCN51WW (Legion 5-15ACH6H), до H1CN46WW (Legion 5-15ITH6), до H1CN46WW (Legion 5-15ITH6H), до HHCN25WW (Legion 5-17ACH6), до GKCN51WW (Legion 5-17ACH6H), до H1CN46WW (Legion 5-17ITH6), до H1CN46WW (Legion 5-17ITH6H), до GKCN51WW (Legion 7-16ACHg6), до H1CN46WW (Legion 7-16ITHg6), до BHCN44WW (Legion Y540-15IRH), до BHCN44WW (Legion Y540-15IRH-PG0), до BHCN44WW (Legion Y540-17IRH), до BHCN44WW (Legion Y540-17IRH-PG0), до BHCN44WW (Legion Y545), до BHCN44WW (Legion Y545-PG0), до BHCN44WW (Legion Y7000-2019), до BHCN44WW (Legion Y7000-2019-PG0), до BUCN31WW (IdeaPad S145-14API), до AYCN26WW (Ideapad S145-14AST), до AWCN28WW (Ideapad S145-14IGM), до DKCN54WW (Ideapad S145-14IIL), до BUCN31WW (Ideapad S145-15API), до BUCN31WW (Ideapad S145-15AST), до AYCN26WW (Ideapad S145-15AST), до AWCN28WW (Ideapad S145-15IGM), до DKCN54WW (Ideapad S145-15IIL), до CXCN34WW (Ideapad S540-13API), до GLCN43WW (V14 G2-ALC), до E8CN33WW (V14-ADA), до DZCN42WW (V14-ARE), до DVCN23WW (V14-IGL), до DKCN54WW (V14-IIL), до ATCN46WW (V140-15IWL), до GLCN43WW (V15 G2-ALC), до E8CN33WW (V15-ADA), до DVCN23WW (V15-IGL), до DKCN54WW (V15-IIL), до EMCN52WW (V17-IIL), до ATCN46WW (V340-17IWL), до HECN24WW (Yoga Slim 7 Pro-14ACH5 D), - (Yoga Slim 7 Pro-14ACH5), - (Yoga Slim 7 Pro-14ACH5 O), до HECN24WW (Yoga Slim 7 Pro-14ACH5 OD), до DVCN23WW (ideapad 3-14IGL05), до EMCN52WW (ideapad 3-14IIL05), до EMCN52WW (ideapad 3-15IIL05), до E7CN44WW (ideapad 5-15ARE05), до EGCN36WW (ideapad Creator 5-15IMH05), до FCCN17WW (ideapad Gaming 3-15ARH05), до EGCN36WW (ideapad Gaming 3-15IMH05)

Product types

Firmware

Mitigations

Установка обновлений из доверенных источников. В связи со сложившейся обстановкой и введенными санкциями против Российской Федерации рекомендуется устанавливать обновления программного обеспечения только после оценки всех сопутствующих рисков. Разработка компенсирующих мер, полностью нейтрализующих возможность эксплуатации уязвимости, не представляется возможной. Компенсирующие меры: - использование программного обеспечения для шифрования с поддержкой TPM в целях предотвращения получения доступа к информации, если конфигурация безопасной загрузки UEFI изменена; - выявление и исключение (блокирование) вредоносного драйвера SecureBackDoor из микропрограммного обеспечения UEFI ноутбуков Lenovo. Информация от производителя: https://support.lenovo.com/us/en/product_security/LEN-73440

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Lenovo Group Limited",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e E8CN33WW (IdeaPad 3 15ADA05), \u0434\u043e E8CN33WW (IdeaPad 3-14ADA05), \u0434\u043e HBCN21WW (IdeaPad 3-14ADA6), \u0434\u043e GLCN43WW (IdeaPad 3-14ALC6), \u0434\u043e dzcn42ww (IdeaPad 3-14ARE05), \u0434\u043e HBCN21WW (IdeaPad 3-15ADA6), \u0434\u043e GLCN43WW (IdeaPad 3-15ALC6), \u0434\u043e DZCN42WW (IdeaPad 3-15ARE05), \u0434\u043e DVCN23WW (IdeaPad 3-15IGL05), \u0434\u043e E8CN33WW (IdeaPad 3-17ADA05), \u0434\u043e HBCN21WW (IdeaPad 3-17ADA6), \u0434\u043e GLCN43WW (IdeaPad 3-17ALC6), \u0434\u043e DZCN42WW (IdeaPad 3-17ARE05), \u0434\u043e EMCN52WW (IdeaPad 3-17IIL05), \u0434\u043e GFCN23WW (IdeaPad L3 15ITL6), \u0434\u043e BGCN35WW (Ideapad Gaming L340-15IRH), \u0434\u043e ATCN46WW (IdeaPad L340-15IWL), \u0434\u043e BGCN35WW (Ideapad L340-17IRH), \u0434\u043e ATCN46WW (Ideapad L340-17IWL), \u0434\u043e HHCN25WW (Legion 5 Pro-16ACH6), \u0434\u043e GKCN51WW (Legion 5 Pro-16ACH6H), \u0434\u043e H1CN46WW (Legion 5 Pro-16ITH6), \u0434\u043e H1CN46WW (Legion 5 Pro-16ITH6H), \u0434\u043e HHCN25WW (Legion 5-15ACH6), \u0434\u043e G9CN28WW (Legion 5-15ACH6A), \u0434\u043e GKCN51WW (Legion 5-15ACH6H), \u0434\u043e H1CN46WW (Legion 5-15ITH6), \u0434\u043e H1CN46WW (Legion 5-15ITH6H), \u0434\u043e HHCN25WW (Legion 5-17ACH6), \u0434\u043e GKCN51WW (Legion 5-17ACH6H), \u0434\u043e H1CN46WW (Legion 5-17ITH6), \u0434\u043e H1CN46WW (Legion 5-17ITH6H), \u0434\u043e GKCN51WW (Legion 7-16ACHg6), \u0434\u043e H1CN46WW (Legion 7-16ITHg6), \u0434\u043e BHCN44WW (Legion Y540-15IRH), \u0434\u043e BHCN44WW (Legion Y540-15IRH-PG0), \u0434\u043e BHCN44WW (Legion Y540-17IRH), \u0434\u043e BHCN44WW (Legion Y540-17IRH-PG0), \u0434\u043e BHCN44WW (Legion Y545), \u0434\u043e BHCN44WW (Legion Y545-PG0), \u0434\u043e BHCN44WW (Legion Y7000-2019), \u0434\u043e BHCN44WW (Legion Y7000-2019-PG0), \u0434\u043e BUCN31WW (IdeaPad S145-14API), \u0434\u043e AYCN26WW (Ideapad S145-14AST), \u0434\u043e AWCN28WW (Ideapad S145-14IGM), \u0434\u043e DKCN54WW (Ideapad S145-14IIL), \u0434\u043e BUCN31WW (Ideapad S145-15API), \u0434\u043e BUCN31WW (Ideapad S145-15AST), \u0434\u043e AYCN26WW (Ideapad S145-15AST), \u0434\u043e AWCN28WW (Ideapad S145-15IGM), \u0434\u043e DKCN54WW (Ideapad S145-15IIL), \u0434\u043e CXCN34WW (Ideapad S540-13API), \u0434\u043e GLCN43WW (V14 G2-ALC), \u0434\u043e E8CN33WW (V14-ADA), \u0434\u043e DZCN42WW (V14-ARE), \u0434\u043e DVCN23WW (V14-IGL), \u0434\u043e DKCN54WW (V14-IIL), \u0434\u043e ATCN46WW (V140-15IWL), \u0434\u043e GLCN43WW (V15 G2-ALC), \u0434\u043e E8CN33WW (V15-ADA), \u0434\u043e DVCN23WW (V15-IGL), \u0434\u043e DKCN54WW (V15-IIL), \u0434\u043e EMCN52WW (V17-IIL), \u0434\u043e ATCN46WW (V340-17IWL), \u0434\u043e HECN24WW (Yoga Slim 7 Pro-14ACH5 D), - (Yoga Slim 7 Pro-14ACH5), - (Yoga Slim 7 Pro-14ACH5 O), \u0434\u043e HECN24WW (Yoga Slim 7 Pro-14ACH5 OD), \u0434\u043e DVCN23WW (ideapad 3-14IGL05), \u0434\u043e EMCN52WW (ideapad 3-14IIL05), \u0434\u043e EMCN52WW (ideapad 3-15IIL05), \u0434\u043e E7CN44WW (ideapad 5-15ARE05), \u0434\u043e EGCN36WW (ideapad Creator 5-15IMH05), \u0434\u043e FCCN17WW (ideapad Gaming 3-15ARH05), \u0434\u043e EGCN36WW (ideapad Gaming 3-15IMH05)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u043a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0440, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 TPM \u0432 \u0446\u0435\u043b\u044f\u0445 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0435\u0441\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0430;\n- \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 (\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435) \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 SecureBackDoor \u0438\u0437 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f UEFI \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://support.lenovo.com/us/en/product_security/LEN-73440",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "18.04.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "21.04.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "21.04.2022",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-02509",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-3971, LEN-73440",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "IdeaPad 3 15ADA05, IdeaPad 3-14ADA05, IdeaPad 3-14ADA6, IdeaPad 3-14ALC6, IdeaPad 3-14ARE05, IdeaPad 3-15ADA6, IdeaPad 3-15ALC6, IdeaPad 3-15ARE05, IdeaPad 3-15IGL05, IdeaPad 3-17ADA05, IdeaPad 3-17ADA6, IdeaPad 3-17ALC6, IdeaPad 3-17ARE05, IdeaPad 3-17IIL05, IdeaPad L3 15ITL6, Ideapad Gaming L340-15IRH, IdeaPad L340-15IWL, Ideapad L340-17IRH, Ideapad L340-17IWL, Legion 5 Pro-16ACH6, Legion 5 Pro-16ACH6H, Legion 5 Pro-16ITH6, Legion 5 Pro-16ITH6H, Legion 5-15ACH6, Legion 5-15ACH6A, Legion 5-15ACH6H, Legion 5-15ITH6, Legion 5-15ITH6H, Legion 5-17ACH6, Legion 5-17ACH6H, Legion 5-17ITH6, Legion 5-17ITH6H, Legion 7-16ACHg6, Legion 7-16ITHg6, Legion Y540-15IRH, Legion Y540-15IRH-PG0, Legion Y540-17IRH, Legion Y540-17IRH-PG0, Legion Y545, Legion Y545-PG0, Legion Y7000-2019, Legion Y7000-2019-PG0, IdeaPad S145-14API, Ideapad S145-14AST, Ideapad S145-14IGM, Ideapad S145-14IIL, Ideapad S145-15API, Ideapad S145-15AST, Ideapad S145-15IGM, Ideapad S145-15IIL, Ideapad S540-13API, V14 G2-ALC, V14-ADA, V14-ARE, V14-IGL, V14-IIL, V140-15IWL, V15 G2-ALC, V15-ADA, V15-IGL, V15-IIL, V17-IIL, V340-17IWL, Yoga Slim 7 Pro-14ACH5 D, Yoga Slim 7 Pro-14ACH5, Yoga Slim 7 Pro-14ACH5 O, Yoga Slim 7 Pro-14ACH5 OD, ideapad 3-14IGL05, ideapad 3-14IIL05, ideapad 3-15IIL05, ideapad 5-15ARE05, ideapad Creator 5-15IMH05, ideapad Gaming 3-15ARH05, ideapad Gaming 3-15IMH05",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 SecureBackDoor \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f BIOS \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u043e \u0444\u043b\u044d\u0448\u043f\u0430\u043c\u044f\u0442\u0438 SPI",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (CWE-264)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 SecureBackDoor \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f BIOS \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u043f\u0443\u0442\u0435\u043c \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 NVRAM. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432\u043e \u0444\u043b\u044d\u0448\u043f\u0430\u043c\u044f\u0442\u0438 SPI",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.lenovo.com/ru/en/product_security/len-73440\nhttps://www.securitylab.ru/news/531212.php",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-264",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,7)"
}

CVE-2021-3971 (GCVE-0-2021-3971)

Vulnerability from cvelistv5 – Published: 2022-04-22 20:30 – Updated: 2024-08-03 17:09

Summary

A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-489 - Leftover Debug Code

Assigner

lenovo mitre root

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Lenovo	Notebook BIOS	Affected: various

Credits

Lenovo thanks Martin Smolár from ESET for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:09:09.596Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Notebook BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-489",
              "description": "CWE-489 Leftover Debug Code",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-22T20:30:38.000Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
        }
      ],
      "source": {
        "advisory": "LEN-73440",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "ID": "CVE-2021-3971",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Notebook BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "various"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Lenovo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-489 Leftover Debug Code"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-73440",
              "refsource": "MISC",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
          }
        ],
        "source": {
          "advisory": "LEN-73440",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2021-3971",
    "datePublished": "2022-04-22T20:30:38.000Z",
    "dateReserved": "2021-11-17T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:09:09.596Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2022-02509 (CVE-2021-3971)

CVE-2021-3971 (GCVE-0-2021-3971)

Tags

Sightings

Nomenclature

Related by attack behaviour