CVE-2021-3971CWE-489

A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the…

Medium · published April 22, 2022

CVSS v3.1
6.7
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01229 · 68.7th percentile
Weakness
CWE-489 · Active Debug Code
Published
2022-04-22T20:30Z
EPSS history
Timeline
  • 22 APR 20:30Z
    A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the…
    cvelistv5