vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2021-3519

MEDIUM
6.8
CVSS Score
Published: November 12, 2021 at 10:05 PM UTC
Updated: June 17, 2026 at 04:05 AM UTC
119 products affected across 1 vendorIdeacentre G5-14imb05 FirmwareV50T 13IMB FirmwareIdeacentre Gaming 5-14iob6 Firmware· also runs on 1 platform

Using Desktop BIOS by Lenovo?

Get instant alerts when new vulnerabilities affect Desktop BIOS - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.8
Exploit prediction
EPSS 0.2%

Description

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ideacentre 3-07imb05 Firmware· Lenovo
95%
v < m2vkt18a
Affected range stops below m2vkt18a, so it looks safe — our inference, not a vendor statement
lenovo-ideacentre-3-07imb05 (same device)
Ideacentre 310S 08IGM Firmware· Lenovo
95%
v ≤ m1tkt31a
microsoft-windows-10 (environment) · lenovo-ideacentre-310s-08igm (same device)
Ideacentre 5-14imb05 Firmware· Lenovo
95%
v < o4hkt33a
Affected range stops below o4hkt33a, so it looks safe — our inference, not a vendor statement
lenovo-ideacentre-5-14imb05 (same device)
Ideacentre 5-14iob6 Firmware· Lenovo
95%
v < m3gkt29a
Affected range stops below m3gkt29a, so it looks safe — our inference, not a vendor statement
lenovo-ideacentre-5-14iob6 (same device)
Ideacentre 510A 15ARR Firmware· Lenovo
95%
v ≤ o4dkt41a
microsoft-windows-10 (environment) · lenovo-ideacentre-510a-15arr (same device)
Ideacentre 510S 07ICB Firmware· Lenovo
95%
v < m22kt46a
Affected range stops below m22kt46a, so it looks safe — our inference, not a vendor statement
microsoft-windows-10 (environment) · lenovo-ideacentre-510s-07icb (same device)
Ideacentre 510S 07ICK Firmware· Lenovo
95%
v < m30kt23av < m30kt24a
Affected range stops below m30kt23a, so it looks safe — our inference, not a vendor statement
Affected range stops below m30kt24a, so it looks safe — our inference, not a vendor statement
microsoft-windows-10 (environment) · lenovo-ideacentre-510s-07ick (same device)
Ideacentre C5-14mb05 Firmware· Lenovo
95%
v < o4hkt33a
Affected range stops below o4hkt33a, so it looks safe — our inference, not a vendor statement
lenovo-ideacentre-c5-14mb05 (same device)
Ideacentre Creator 5-14iob6 Firmware· Lenovo
95%
v < m3gkt29a
Affected range stops below m3gkt29a, so it looks safe — our inference, not a vendor statement
lenovo-ideacentre-creator-5-14iob6 (same device)
Ideacentre G5-14imb05 Firmware· Lenovo
95%
v < o4hkt33a
Affected range stops below o4hkt33a, so it looks safe — our inference, not a vendor statement
lenovo-ideacentre-g5-14imb05 (same device)

Runs on — not affected

The affected product only carries this flaw when running on these platforms. The platforms themselves are not vulnerable.

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

x_refsource_MISCVendor Advisory
Source: [email protected]
https://support.lenovo.com/us/en/product_security/LEN-67440

CVSS

6.8MEDIUM[email protected]
Attack Vector
PHYSICAL
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-287

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card