CVE-2021-3972CWE-489

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may…

Medium · published April 22, 2022

CVSS v3.1
6.7
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02835 · 86.5th percentile
Weakness
CWE-489 · Active Debug Code
Published
2022-04-22T20:30Z
EPSS history
Timeline
  • 22 APR 20:30Z
    A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may…
    cvelistv5