A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password A…

published 2021-11-12 4 y ago modified 2026-06-17 4 mo ago also EUVD-2021-26835

cvss: 6.4; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.2%; EPSS 0.2% chance of exploitation in 30 days, percentile 14%
public exploits: 0; none known

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.

Patch / fix

fixed in 20

lenovo ideacentre_c5-14mb05_firmware o4hkt33a
lenovo ideacentre_3-07imb05_firmware m2vkt18a
lenovo ideacentre_5-14imb05_firmware o4hkt33a
lenovo ideacentre_5-14iob6_firmware m3gkt29a
lenovo ideacentre_creator_5-14iob6_firmware m3gkt29a
lenovo ideacentre_g5-14imb05_firmware o4hkt33a
lenovo ideacentre_gaming_5-14iob6_firmware m3gkt29a
lenovo thinkcentre_m60e_tiny_firmware m3skt1ea
lenovo thinkcentre_m630e_firmware m28kt36a
lenovo thinkcentre_m70s_firmware m2tkt3ca
lenovo thinkcentre_m70t_firmware m2tkt3ca
lenovo thinkcentre_m710e_firmware m1zkt37a
lenovo thinkcentre_m710s_firmware m16kt67a
lenovo thinkcentre_m710t_firmware m16kt67a
lenovo thinkcentre_m720e_firmware m30kt23a
lenovo thinkcentre_m75n_firmware m33kt21a
lenovo thinkcentre_m75s_gen_2_firmware m3akt35a, m3bkt24a
lenovo thinkcentre_m70a_gen_2_firmware m3nkt17a
lenovo thinkcentre_m70c_firmware m2vkt18a
lenovo thinkcentre_m70q_firmware m2wkt49a

Exploit prediction

0.24% chance of exploitation in the next 30 days, higher than 14% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	6.4	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
NVD	3.1	6.8	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD	2.0	6.9	AV:L/AC:M/Au:N/C:C/I:C/A:C

Affected products

Lenovo Desktop BIOS

Classification

Weakness

CWE-287 Improper Authentication

References

support.lenovo.com /us/en/product_security/LEN-67440
vendor-advisory

Sources

CVE List CVE-2021-3519
NVD CVE-2021-3519

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary