CVE-2021-3453

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-693

Affected software

No affected versions have been published.

Timeline

Published: Jul 16, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-345307.8Windows Graphics Component Remote Code Execution Vulnerability CVE-2021-345325.5ASP.NET Core and Visual Studio Information Disclosure Vulnerability CVE-2021-345337.8Windows Graphics Component Font Parsing Remote Code Execution Vulnerability CVE-2021-345346.8Windows MSHTML Platform Remote Code Execution Vulnerability CVE-2021-345358.8Remote Desktop Client Remote Code Execution Vulnerability CVE-2021-345367.8Windows Storage Spaces Controller Elevation of Privilege Vulnerability CVE-2021-345377.8Windows Bluetooth Driver Elevation of Privilege Vulnerability CVE-2021-345387.5Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved entities in the quer CVE-2021-345397.2An issue was discovered in CubeCoders AMP before 2.1.1.8. A lack of validation of the Java Version setting means that an unintended executab CVE-2021-34547.5Truncated L2CAP K-frame causes assertion failure. Zephyr versions >= 2.4.0, >= v.2.50 contain Improper Handling of Length Parameter Inconsis CVE-2021-345406.1Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard.CVE-2021-345437.5The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain