CVE-2021-3453

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-693

Affected software

VendorProductVersions
LenovoBIOSvarious

References

Timeline

Published
Jul 16, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-345307.8Windows Graphics Component Remote Code Execution VulnerabilityCVE-2021-345325.5ASP.NET Core and Visual Studio Information Disclosure VulnerabilityCVE-2021-345337.8Windows Graphics Component Font Parsing Remote Code Execution VulnerabilityCVE-2021-345346.8Windows MSHTML Platform Remote Code Execution VulnerabilityCVE-2021-345358.8Remote Desktop Client Remote Code Execution VulnerabilityCVE-2021-345367.8Windows Storage Spaces Controller Elevation of Privilege VulnerabilityCVE-2021-345377.8Windows Bluetooth Driver Elevation of Privilege VulnerabilityCVE-2021-345387.5Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved entities in the querCVE-2021-345397.2An issue was discovered in CubeCoders AMP before 2.1.1.8. A lack of validation of the Java Version setting means that an unintended executabCVE-2021-34547.5Truncated L2CAP K-frame causes assertion failure. Zephyr versions >= 2.4.0, >= v.2.50 contain Improper Handling of Length Parameter InconsisCVE-2021-345406.1Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard.CVE-2021-345437.5The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain