← Database
CVE-2021-3972
MEDIUM
CVSS: 6.7
Published: 2022-04-22
Modified: 2026-06-17
Description
A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
Affected Platforms
Lenovo Legion 5-17Ach6HLenovo Legion Y540-15Irh FirmwareLenovo L340-17IwlLenovo Yoga Slim 7 Pro-14Ach5 DLenovo Yoga 7-14Acn6 FirmwareLenovo V14-IglLenovo Yoga Slim 7 Pro-14Arh5 FirmwareLenovo Legion 5-17Ach6 FirmwareLenovo V15-IilLenovo Ideapad 5-15Iil05 Firmware
Weakness Type
CWE-489, NVD-CWE-Other