Vulnerability-Lookup

BDU:2022-02510 (CVE-2021-3972)

Vulnerability from fstec – Published: 2022-04-21 – Updated: 2022-04-21 – View on bdu.fstec.ru Fixed

Title

Уязвимость драйвера ChgBootDxeHook микропрограммного обеспечения BIOS ноутбуков Lenovo, позволяющая нарушителю выполнять вредоносные драйверы и приложения во время загрузки

Summary

Уязвимость драйвера ChgBootDxeHook микропрограммного обеспечения BIOS ноутбуков Lenovo связана с возможностью изменения настроек безопасной загрузки путем редактирования переменной NVRAM. Эксплуатация уязвимости может позволить нарушителю выполнять вредоносные драйверы и приложения во время загрузки

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:C/A:C

6.7 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Authorization bypass

Incidents

Being clarified

Remediation

Software update

CWE

CWE-264 - Разрешения, привилегии и средства управления доступом

Aliases

CVE-2021-3972, LEN-73440

References

2 references

URL
https://support.lenovo.com/ru/en/product_security/len-73440
https://www.securitylab.ru/news/531212.php

Impacted products

106 products from 1 vendor

Vendors

Lenovo Group Limited

Products

IdeaPad 3 15ADA05, IdeaPad 3-14ADA05, IdeaPad 3-14ADA6, IdeaPad 3-14ALC6, IdeaPad 3-14ARE05, IdeaPad 3-15ADA6, IdeaPad 3-15ALC6, IdeaPad 3-15ARE05, IdeaPad 3-15IGL05, IdeaPad 3-17ADA05, IdeaPad 3-17ADA6, IdeaPad 3-17ALC6, IdeaPad 3-17ARE05, IdeaPad 3-17IIL05, IdeaPad L3 15ITL6, Ideapad Gaming L340-15IRH, IdeaPad L340-15IWL, Ideapad L340-17IRH, Ideapad L340-17IWL, Legion 5 Pro-16ACH6, Legion 5 Pro-16ACH6H, Legion 5 Pro-16ITH6, Legion 5 Pro-16ITH6H, Legion 5-15ACH6, Legion 5-15ACH6A, Legion 5-15ACH6H, Legion 5-15ITH6, Legion 5-15ITH6H, Legion 5-17ACH6, Legion 5-17ACH6H, Legion 5-17ITH6, Legion 5-17ITH6H, Legion 7-16ACHg6, Legion 7-16ITHg6, Legion S7-15ACH6, Legion Y540-15IRH, Legion Y540-15IRH-PG0, Legion Y540-17IRH, Legion Y540-17IRH-PG0, Legion Y545, Legion Y545-PG0, Legion Y7000-2019, Legion Y7000-2019-PG0, IdeaPad S145-14API, Ideapad S145-14AST, Ideapad S145-14IGM, Ideapad S145-14IIL, Ideapad S145-15API, Ideapad S145-15AST, Ideapad S145-15IGM, Ideapad S145-15IIL, Ideapad S540-13API, Ideapad S540-13IML, Ideapad Slim 7 Pro-14IHU5, Ideapad Slim 9-14ITL05, V14 G1-IML, V14 G2-ALC, V14 G2-ITL, V14-ADA, V14-ARE, V14-IGL, V14-IIL, V140-15IWL, V15 G1-IML, V15 G2-ALC, V15 G2-ITL, V15-ADA, V15-IGL, V15-IIL, V17 G2-ITL, V17-IIL, V340-17IWL, Yoga 7-14ACN6, Yoga C740-14IML, Yoga C740-15IML, Yoga C940-14IIL, Yoga Slim 7 Pro-14ACH5 D, Yoga Slim 7 Pro-14ACH5, Yoga Slim 7 Pro-14ACH5 O, Yoga Slim 7 Pro-14ACH5 OD, Yoga Slim 7 Pro-14ARH5, Yoga Slim 7 Pro-14IHU5, Yoga Slim 7 Pro-14IHU5 O, Yoga Slim 7 Pro-14ITL5, Yoga Slim 9-14ITL05, ideapad 3-14IGL05, ideapad 3-14IIL05, ideapad 3-14IML05, ideapad 3-14ITL05, ideapad 3-14ITL6, ideapad 3-15IIL05, ideapad 3-15IML05, ideapad 3-15ITL05, ideapad 3-15ITL6, ideapad 3-17IML05, ideapad 5-15ARE05, ideapad 5-15IIL05, ideapad Creator 5-15IMH05, ideapad Gaming 3-15ARH05, ideapad Gaming 3-15IMH05, Flex 3-11ADA05, IdeaPad 3-17ITL6, L3-15IML05, Legion S7-15ARH5, Legion S7-15IMH5, Lenovo S14 G2 ITL

Versions

до E8CN33WW (IdeaPad 3 15ADA05), до E8CN33WW (IdeaPad 3-14ADA05), до HBCN21WW (IdeaPad 3-14ADA6), до GLCN43WW (IdeaPad 3-14ALC6), до dzcn42ww (IdeaPad 3-14ARE05), до HBCN21WW (IdeaPad 3-15ADA6), до GLCN43WW (IdeaPad 3-15ALC6), до DZCN42WW (IdeaPad 3-15ARE05), до DVCN23WW (IdeaPad 3-15IGL05), до E8CN33WW (IdeaPad 3-17ADA05), до HBCN21WW (IdeaPad 3-17ADA6), до GLCN43WW (IdeaPad 3-17ALC6), до DZCN42WW (IdeaPad 3-17ARE05), до EMCN52WW (IdeaPad 3-17IIL05), до GFCN23WW (IdeaPad L3 15ITL6), до BGCN35WW (Ideapad Gaming L340-15IRH), до ATCN46WW (IdeaPad L340-15IWL), до BGCN35WW (Ideapad L340-17IRH), до ATCN46WW (Ideapad L340-17IWL), до HHCN25WW (Legion 5 Pro-16ACH6), до GKCN51WW (Legion 5 Pro-16ACH6H), до H1CN46WW (Legion 5 Pro-16ITH6), до H1CN46WW (Legion 5 Pro-16ITH6H), до HHCN25WW (Legion 5-15ACH6), до G9CN28WW (Legion 5-15ACH6A), до GKCN51WW (Legion 5-15ACH6H), до H1CN46WW (Legion 5-15ITH6), до H1CN46WW (Legion 5-15ITH6H), до HHCN25WW (Legion 5-17ACH6), до GKCN51WW (Legion 5-17ACH6H), до H1CN46WW (Legion 5-17ITH6), до H1CN46WW (Legion 5-17ITH6H), до GKCN51WW (Legion 7-16ACHg6), до H1CN46WW (Legion 7-16ITHg6), до HACN35WW (Legion S7-15ACH6), до BHCN44WW (Legion Y540-15IRH), до BHCN44WW (Legion Y540-15IRH-PG0), до BHCN44WW (Legion Y540-17IRH), до BHCN44WW (Legion Y540-17IRH-PG0), до BHCN44WW (Legion Y545), до BHCN44WW (Legion Y545-PG0), до BHCN44WW (Legion Y7000-2019), до BHCN44WW (Legion Y7000-2019-PG0), до BUCN31WW (IdeaPad S145-14API), до AYCN26WW (Ideapad S145-14AST), до AWCN28WW (Ideapad S145-14IGM), до DKCN54WW (Ideapad S145-14IIL), до BUCN31WW (Ideapad S145-15API), до BUCN31WW (Ideapad S145-15AST), до AYCN26WW (Ideapad S145-15AST), до AWCN28WW (Ideapad S145-15IGM), до DKCN54WW (Ideapad S145-15IIL), до CXCN34WW (Ideapad S540-13API), - (Ideapad S540-13IML), - (Ideapad Slim 7 Pro-14IHU5), - (Ideapad Slim 9-14ITL05), - (V14 G1-IML), до GLCN43WW (V14 G2-ALC), - (V14 G2-ITL), до E8CN33WW (V14-ADA), до DZCN42WW (V14-ARE), до DVCN23WW (V14-IGL), до DKCN54WW (V14-IIL), до ATCN46WW (V140-15IWL), - (V15 G1-IML), до GLCN43WW (V15 G2-ALC), - (V15 G2-ITL), до E8CN33WW (V15-ADA), до DVCN23WW (V15-IGL), до DKCN54WW (V15-IIL), - (V17 G2-ITL), до EMCN52WW (V17-IIL), до ATCN46WW (V340-17IWL), - (Yoga 7-14ACN6), - (Yoga C740-14IML), - (Yoga C740-15IML), - (Yoga C940-14IIL), до HECN24WW (Yoga Slim 7 Pro-14ACH5 D), - (Yoga Slim 7 Pro-14ACH5), - (Yoga Slim 7 Pro-14ACH5 O), до HECN24WW (Yoga Slim 7 Pro-14ACH5 OD), до G7CN21WW (Yoga Slim 7 Pro-14ARH5), - (Yoga Slim 7 Pro-14IHU5), - (Yoga Slim 7 Pro-14IHU5 O), - (Yoga Slim 7 Pro-14ITL5), - (Yoga Slim 9-14ITL05), до DVCN23WW (ideapad 3-14IGL05), до EMCN52WW (ideapad 3-14IIL05), - (ideapad 3-14IML05), - (ideapad 3-14ITL05), - (ideapad 3-14ITL6), до EMCN52WW (ideapad 3-15IIL05), - (ideapad 3-15IML05), - (ideapad 3-15ITL05), - (ideapad 3-15ITL6), - (ideapad 3-17IML05), до E7CN44WW (ideapad 5-15ARE05), - (ideapad 5-15IIL05), до EGCN36WW (ideapad Creator 5-15IMH05), до FCCN17WW (ideapad Gaming 3-15ARH05), до EGCN36WW (ideapad Gaming 3-15IMH05), - (Flex 3-11ADA05), - (IdeaPad 3-17ITL6), - (L3-15IML05), - (Legion S7-15ARH5), - (Legion S7-15IMH5), - (Lenovo S14 G2 ITL)

Product types

Firmware

Mitigations

Установка обновлений из доверенных источников. В связи со сложившейся обстановкой и введенными санкциями против Российской Федерации рекомендуется устанавливать обновления программного обеспечения только после оценки всех сопутствующих рисков. Разработка компенсирующих мер, полностью нейтрализующих возможность эксплуатации уязвимости, не представляется возможной. Компенсирующие меры: - использование программного обеспечения для шифрования с поддержкой TPM в целях предотвращения получения доступа к информации, если конфигурация безопасной загрузки UEFI изменена; - выявление и исключение (блокирование) вредоносного драйвера ChgBootDxeHook из микропрограммного обеспечения UEFI ноутбуков Lenovo. Информация от производителя: https://support.lenovo.com/us/en/product_security/LEN-73440

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Lenovo Group Limited",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e E8CN33WW (IdeaPad 3 15ADA05), \u0434\u043e E8CN33WW (IdeaPad 3-14ADA05), \u0434\u043e HBCN21WW (IdeaPad 3-14ADA6), \u0434\u043e GLCN43WW (IdeaPad 3-14ALC6), \u0434\u043e dzcn42ww (IdeaPad 3-14ARE05), \u0434\u043e HBCN21WW (IdeaPad 3-15ADA6), \u0434\u043e GLCN43WW (IdeaPad 3-15ALC6), \u0434\u043e DZCN42WW (IdeaPad 3-15ARE05), \u0434\u043e DVCN23WW (IdeaPad 3-15IGL05), \u0434\u043e E8CN33WW (IdeaPad 3-17ADA05), \u0434\u043e HBCN21WW (IdeaPad 3-17ADA6), \u0434\u043e GLCN43WW (IdeaPad 3-17ALC6), \u0434\u043e DZCN42WW (IdeaPad 3-17ARE05), \u0434\u043e EMCN52WW (IdeaPad 3-17IIL05), \u0434\u043e GFCN23WW (IdeaPad L3 15ITL6), \u0434\u043e BGCN35WW (Ideapad Gaming L340-15IRH), \u0434\u043e ATCN46WW (IdeaPad L340-15IWL), \u0434\u043e BGCN35WW (Ideapad L340-17IRH), \u0434\u043e ATCN46WW (Ideapad L340-17IWL), \u0434\u043e HHCN25WW (Legion 5 Pro-16ACH6), \u0434\u043e GKCN51WW (Legion 5 Pro-16ACH6H), \u0434\u043e H1CN46WW (Legion 5 Pro-16ITH6), \u0434\u043e H1CN46WW (Legion 5 Pro-16ITH6H), \u0434\u043e HHCN25WW (Legion 5-15ACH6), \u0434\u043e G9CN28WW (Legion 5-15ACH6A), \u0434\u043e GKCN51WW (Legion 5-15ACH6H), \u0434\u043e H1CN46WW (Legion 5-15ITH6), \u0434\u043e H1CN46WW (Legion 5-15ITH6H), \u0434\u043e HHCN25WW (Legion 5-17ACH6), \u0434\u043e GKCN51WW (Legion 5-17ACH6H), \u0434\u043e H1CN46WW (Legion 5-17ITH6), \u0434\u043e H1CN46WW (Legion 5-17ITH6H), \u0434\u043e GKCN51WW (Legion 7-16ACHg6), \u0434\u043e H1CN46WW (Legion 7-16ITHg6), \u0434\u043e HACN35WW (Legion S7-15ACH6), \u0434\u043e BHCN44WW (Legion Y540-15IRH), \u0434\u043e BHCN44WW (Legion Y540-15IRH-PG0), \u0434\u043e BHCN44WW (Legion Y540-17IRH), \u0434\u043e BHCN44WW (Legion Y540-17IRH-PG0), \u0434\u043e BHCN44WW (Legion Y545), \u0434\u043e BHCN44WW (Legion Y545-PG0), \u0434\u043e BHCN44WW (Legion Y7000-2019), \u0434\u043e BHCN44WW (Legion Y7000-2019-PG0), \u0434\u043e BUCN31WW (IdeaPad S145-14API), \u0434\u043e AYCN26WW (Ideapad S145-14AST), \u0434\u043e AWCN28WW (Ideapad S145-14IGM), \u0434\u043e DKCN54WW (Ideapad S145-14IIL), \u0434\u043e BUCN31WW (Ideapad S145-15API), \u0434\u043e BUCN31WW (Ideapad S145-15AST), \u0434\u043e AYCN26WW (Ideapad S145-15AST), \u0434\u043e AWCN28WW (Ideapad S145-15IGM), \u0434\u043e DKCN54WW (Ideapad S145-15IIL), \u0434\u043e CXCN34WW (Ideapad S540-13API), - (Ideapad S540-13IML), - (Ideapad Slim 7 Pro-14IHU5), - (Ideapad Slim 9-14ITL05), - (V14 G1-IML), \u0434\u043e GLCN43WW (V14 G2-ALC), - (V14 G2-ITL), \u0434\u043e E8CN33WW (V14-ADA), \u0434\u043e DZCN42WW (V14-ARE), \u0434\u043e DVCN23WW (V14-IGL), \u0434\u043e DKCN54WW (V14-IIL), \u0434\u043e ATCN46WW (V140-15IWL), - (V15 G1-IML), \u0434\u043e GLCN43WW (V15 G2-ALC), - (V15 G2-ITL), \u0434\u043e E8CN33WW (V15-ADA), \u0434\u043e DVCN23WW (V15-IGL), \u0434\u043e DKCN54WW (V15-IIL), - (V17 G2-ITL), \u0434\u043e EMCN52WW (V17-IIL), \u0434\u043e ATCN46WW (V340-17IWL), - (Yoga 7-14ACN6), - (Yoga C740-14IML), - (Yoga C740-15IML), - (Yoga C940-14IIL), \u0434\u043e HECN24WW (Yoga Slim 7 Pro-14ACH5 D), - (Yoga Slim 7 Pro-14ACH5), - (Yoga Slim 7 Pro-14ACH5 O), \u0434\u043e HECN24WW (Yoga Slim 7 Pro-14ACH5 OD), \u0434\u043e G7CN21WW (Yoga Slim 7 Pro-14ARH5), - (Yoga Slim 7 Pro-14IHU5), - (Yoga Slim 7 Pro-14IHU5 O), - (Yoga Slim 7 Pro-14ITL5), - (Yoga Slim 9-14ITL05), \u0434\u043e DVCN23WW (ideapad 3-14IGL05), \u0434\u043e EMCN52WW (ideapad 3-14IIL05), - (ideapad 3-14IML05), - (ideapad 3-14ITL05), - (ideapad 3-14ITL6), \u0434\u043e EMCN52WW (ideapad 3-15IIL05), - (ideapad 3-15IML05), - (ideapad 3-15ITL05), - (ideapad 3-15ITL6), - (ideapad 3-17IML05), \u0434\u043e E7CN44WW (ideapad 5-15ARE05), - (ideapad 5-15IIL05), \u0434\u043e EGCN36WW (ideapad Creator 5-15IMH05), \u0434\u043e FCCN17WW (ideapad Gaming 3-15ARH05), \u0434\u043e EGCN36WW (ideapad Gaming 3-15IMH05), - (Flex 3-11ADA05), - (IdeaPad 3-17ITL6), - (L3-15IML05), - (Legion S7-15ARH5), - (Legion S7-15IMH5), - (Lenovo S14 G2 ITL)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u043a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0440, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 TPM \u0432 \u0446\u0435\u043b\u044f\u0445 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0435\u0441\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0430;\n- \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 (\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435) \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 ChgBootDxeHook \u0438\u0437 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f UEFI \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://support.lenovo.com/us/en/product_security/LEN-73440",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "18.04.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "21.04.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "21.04.2022",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-02510",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-3972, LEN-73440",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "IdeaPad 3 15ADA05, IdeaPad 3-14ADA05, IdeaPad 3-14ADA6, IdeaPad 3-14ALC6, IdeaPad 3-14ARE05, IdeaPad 3-15ADA6, IdeaPad 3-15ALC6, IdeaPad 3-15ARE05, IdeaPad 3-15IGL05, IdeaPad 3-17ADA05, IdeaPad 3-17ADA6, IdeaPad 3-17ALC6, IdeaPad 3-17ARE05, IdeaPad 3-17IIL05, IdeaPad L3 15ITL6, Ideapad Gaming L340-15IRH, IdeaPad L340-15IWL, Ideapad L340-17IRH, Ideapad L340-17IWL, Legion 5 Pro-16ACH6, Legion 5 Pro-16ACH6H, Legion 5 Pro-16ITH6, Legion 5 Pro-16ITH6H, Legion 5-15ACH6, Legion 5-15ACH6A, Legion 5-15ACH6H, Legion 5-15ITH6, Legion 5-15ITH6H, Legion 5-17ACH6, Legion 5-17ACH6H, Legion 5-17ITH6, Legion 5-17ITH6H, Legion 7-16ACHg6, Legion 7-16ITHg6, Legion S7-15ACH6, Legion Y540-15IRH, Legion Y540-15IRH-PG0, Legion Y540-17IRH, Legion Y540-17IRH-PG0, Legion Y545, Legion Y545-PG0, Legion Y7000-2019, Legion Y7000-2019-PG0, IdeaPad S145-14API, Ideapad S145-14AST, Ideapad S145-14IGM, Ideapad S145-14IIL, Ideapad S145-15API, Ideapad S145-15AST, Ideapad S145-15IGM, Ideapad S145-15IIL, Ideapad S540-13API, Ideapad S540-13IML, Ideapad Slim 7 Pro-14IHU5, Ideapad Slim 9-14ITL05, V14 G1-IML, V14 G2-ALC, V14 G2-ITL, V14-ADA, V14-ARE, V14-IGL, V14-IIL, V140-15IWL, V15 G1-IML, V15 G2-ALC, V15 G2-ITL, V15-ADA, V15-IGL, V15-IIL, V17 G2-ITL, V17-IIL, V340-17IWL, Yoga 7-14ACN6, Yoga C740-14IML, Yoga C740-15IML, Yoga C940-14IIL, Yoga Slim 7 Pro-14ACH5 D, Yoga Slim 7 Pro-14ACH5, Yoga Slim 7 Pro-14ACH5 O, Yoga Slim 7 Pro-14ACH5 OD, Yoga Slim 7 Pro-14ARH5, Yoga Slim 7 Pro-14IHU5, Yoga Slim 7 Pro-14IHU5 O, Yoga Slim 7 Pro-14ITL5, Yoga Slim 9-14ITL05, ideapad 3-14IGL05, ideapad 3-14IIL05, ideapad 3-14IML05, ideapad 3-14ITL05, ideapad 3-14ITL6, ideapad 3-15IIL05, ideapad 3-15IML05, ideapad 3-15ITL05, ideapad 3-15ITL6, ideapad 3-17IML05, ideapad 5-15ARE05, ideapad 5-15IIL05, ideapad Creator 5-15IMH05, ideapad Gaming 3-15ARH05, ideapad Gaming 3-15IMH05, Flex 3-11ADA05, IdeaPad 3-17ITL6, L3-15IML05, Legion S7-15ARH5, Legion S7-15IMH5, Lenovo S14 G2 ITL",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 ChgBootDxeHook \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f BIOS \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c (CWE-264)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 ChgBootDxeHook \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f BIOS \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0443\u0442\u0435\u043c \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 NVRAM. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u044b \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.lenovo.com/ru/en/product_security/len-73440\nhttps://www.securitylab.ru/news/531212.php",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-264",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,7)"
}

CVE-2021-3972 (GCVE-0-2021-3972)

Vulnerability from cvelistv5 – Published: 2022-04-22 20:30 – Updated: 2024-08-03 17:09

Summary

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-489 - Leftover Debug Code

Assigner

lenovo mitre root

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Lenovo	Notebook BIOS	Affected: various

Credits

Lenovo thanks Martin Smolár from ESET for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:09:09.723Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Notebook BIOS",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices\u0027 BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-489",
              "description": "CWE-489 Leftover Debug Code",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-22T20:30:40.000Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
        }
      ],
      "source": {
        "advisory": "LEN-73440",
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "ID": "CVE-2021-3972",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Notebook BIOS",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "various"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Lenovo"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Lenovo thanks Martin Smol\u00e1r from ESET for reporting this issue."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices\u0027 BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-489 Leftover Debug Code"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-73440",
              "refsource": "MISC",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-73440"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section of LEN-73440."
          }
        ],
        "source": {
          "advisory": "LEN-73440",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2021-3972",
    "datePublished": "2022-04-22T20:30:40.000Z",
    "dateReserved": "2021-11-17T00:00:00.000Z",
    "dateUpdated": "2024-08-03T17:09:09.723Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2022-02510 (CVE-2021-3972)

CVE-2021-3972 (GCVE-0-2021-3972)

Tags

Sightings

Nomenclature

Related by attack behaviour