Security restrictions bypass in Lenovo products - CVE-2021-3972

Vulnerability identifier: #VU62366

CSH Severity: Low

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-3972

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to an error in driver used during manufacturing process and was mistakenly not deactivated. A local privileged user can modify secure boot setting by modifying an NVRAM variable and bypass implemented security restrictions.

ideapad S145-15AST
ideapad S145-14AST
ideapad S145-15IGM
ideapad S145-14IGM
ideapad L340-15IWL Touch
Lenovo V340-17IWL
ideapad L340-15IWL
V140-15IWL
ideapad L340-17IWL
ideapad S145-15API
ideapad S145-14API
ideapad L340-17IRH Gaming
ideapad L340-15IRH Gaming
Lenovo Legion Y545
Lenovo Legion Y540-17IRH-PG0
Lenovo Legion Y540-17IRH
Lenovo Legion Y540-15IRH-PG0
Lenovo Legion Y540-15IRH
Lenovo Legion Y7000-2019-PG0
Lenovo Legion Y545-PG0
Lenovo Legion Y7000-2019
ideapad 5-15ARE05
IdeaPad 3-14ADA05
Lenovo V14-ADA
Lenovo V15-ADA
IdeaPad 3 15ADA05
IdeaPad 3-17ADA05
ideapad Yoga Slim 7 Pro-14ARH5
Lenovo Legion 5-15ACH6A
Lenovo Legion 5-15ITH6
Lenovo Legion 5-15ITH6H
Lenovo Legion 5-17ITH6
Lenovo Legion 5-17ITH6H
Lenovo Legion 7-16ITHg6
Lenovo Legion 5 Pro-16ITH6H
Lenovo Legion 5 Pro-16ITH6
ideapad S540-13API
Lenovo V14-IIL
ideapad S145-15IIL
Lenovo V15-IIL
ideapad S145-14IIL
Lenovo V14-IGL
ideapad 3-14IGL05
Lenovo V15-IGL
IdeaPad 3-15IGL05
IdeaPad 3-17ARE05
Lenovo V14-ARE
IdeaPad 3-14ARE05
IdeaPad 3-15ARE05
ideapad Creator 5-15IMH05
ideapad Gaming 3-15IMH05
IdeaPad 3-17IIL05
ideapad 3-15IIL05
ideapad 3-14IIL05
Lenovo V17-IIL
ideapad Gaming 3-15ARH05
ideapad L3-15ITL6
Lenovo Legion 5-15ACH6H
Lenovo Legion 5-17ACH6H
Lenovo Legion 7-16ACHg6
Lenovo Legion 5 Pro-16ACH6H
Lenovo V15 G2-ALC
IdeaPad 3-14ALC6
Lenovo V14 G2-ALC
IdeaPad 3-15ALC6
IdeaPad 3-17ALC6
Lenovo Legion S7-15ACH6
IdeaPad 3-17ADA6
IdeaPad 3-14ADA6
IdeaPad 3-15ADA6
Yoga Slim 7 Pro-14ACH5 OD
Yoga Slim 7 Pro-14ACH5 D
Lenovo Legion 5-15ACH6
Lenovo Legion 5 Pro-16ACH6
Lenovo Legion 5-17ACH6
ideapad 3-14IML05
Lenovo Yoga C740-15IML
ideapad Yoga C940-14IIL
ideapad Yoga Slim 7 Pro-14ACH5
ideapad Yoga Slim 7 Pro-14ACH5 O
ideapad Yoga Slim 7 Pro-14IHU5
ideapad Yoga Slim 7 Pro-14IHU5 O
ideapad Yoga Slim 7 Pro-14ITL5
ideapad Yoga Slim 9-14ITL05
Lenovo Yoga C740-14IML
ideapad 3-14ITL05
ideapad 3-14ITL6
ideapad 3-15IML05
ideapad 3-15ITL05
ideapad 3-15ITL6
ideapad 3-17IML05
ideapad 5-15IIL05
ideapad Flex 3-11ADA05
ideapad Yoga 7-14ACN6
Lenovo V17 G2-ITL
Lenovo V15 G2-ITL
Lenovo V15 G1-IML
Lenovo V14 G2-ITL
Lenovo V14 G1-IML
ideapad Slim 9-14ITL05
IdeaPad Slim 7 Pro-14IHU5
ideapad S540-13IML
Lenovo S14 G2 ITL
Lenovo Legion S7-15IMH5
Lenovo Legion S7-15ARH5
Lenovo Legion 5-15IMH6
ideapad L3-15IML05
IdeaPad 3-17ITL6

Install updates from vendor's website.

ideapad S145-15AST - update to AYCN26WW
ideapad S145-14AST - update to AYCN26WW
ideapad S145-15IGM - update to AWCN28WW
ideapad S145-14IGM - update to AWCN28WW
ideapad L340-15IWL Touch - update to ATCN46WW
Lenovo V340-17IWL - update to ATCN46WW
ideapad L340-15IWL - update to ATCN46WW
V140-15IWL - update to ATCN46WW
ideapad L340-17IWL - update to ATCN46WW
ideapad S145-15API - update to BUCN31WW
ideapad S145-14API - update to BUCN31WW
ideapad L340-17IRH Gaming - update to BGCN35WW
ideapad L340-15IRH Gaming - update to BGCN35WW
Lenovo Legion Y545 - update to BHCN44WW
Lenovo Legion Y540-17IRH-PG0 - update to BHCN44WW
Lenovo Legion Y540-17IRH - update to BHCN44WW
Lenovo Legion Y540-15IRH-PG0 - update to BHCN44WW
Lenovo Legion Y540-15IRH - update to BHCN44WW
Lenovo Legion Y7000-2019-PG0 - update to BHCN44WW
Lenovo Legion Y545-PG0 - update to BHCN44WW
Lenovo Legion Y7000-2019 - update to BHCN44WW
ideapad 5-15ARE05 - update to E7CN44WW
IdeaPad 3-14ADA05 - update to E8CN33WW
Lenovo V14-ADA - update to E8CN33WW
Lenovo V15-ADA - update to E8CN33WW
IdeaPad 3 15ADA05 - update to E8CN33WW
IdeaPad 3-17ADA05 - update to E8CN33WW
ideapad Yoga Slim 7 Pro-14ARH5 - update to G7CN21WW
Lenovo Legion 5-15ACH6A - update to G9CN28WW
Lenovo Legion 5-15ITH6 - update to H1CN46WW
Lenovo Legion 5-15ITH6H - update to H1CN46WW
Lenovo Legion 5-17ITH6 - update to H1CN46WW
Lenovo Legion 5-17ITH6H - update to H1CN46WW
Lenovo Legion 7-16ITHg6 - update to H1CN46WW
Lenovo Legion 5 Pro-16ITH6H - update to H1CN46WW
Lenovo Legion 5 Pro-16ITH6 - update to H1CN46WW
ideapad S540-13API - update to CXCN34WW
Lenovo V14-IIL - update to DKCN54WW
ideapad S145-15IIL - update to DKCN54WW
Lenovo V15-IIL - update to DKCN54WW
ideapad S145-14IIL - update to DKCN54WW
Lenovo V14-IGL - update to DVCN23WW
ideapad 3-14IGL05 - update to DVCN23WW
Lenovo V15-IGL - update to DVCN23WW
IdeaPad 3-15IGL05 - update to DVCN23WW
IdeaPad 3-17ARE05 - update to DZCN42WW
Lenovo V14-ARE - update to DZCN42WW
IdeaPad 3-14ARE05 - update to DZCN42WW
IdeaPad 3-15ARE05 - update to DZCN42WW
ideapad Creator 5-15IMH05 - update to EGCN36WW
ideapad Gaming 3-15IMH05 - update to EGCN36WW
IdeaPad 3-17IIL05 - update to EMCN52WW
ideapad 3-15IIL05 - update to EMCN52WW
ideapad 3-14IIL05 - update to EMCN52WW
Lenovo V17-IIL - update to EMCN52WW
ideapad Gaming 3-15ARH05 - update to FCCN17WW
ideapad L3-15ITL6 - update to GFCN23WW
Lenovo Legion 5-15ACH6H - update to GKCN51WW
Lenovo Legion 5-17ACH6H - update to GKCN51WW
Lenovo Legion 7-16ACHg6 - update to GKCN51WW
Lenovo Legion 5 Pro-16ACH6H - update to GKCN51WW
Lenovo V15 G2-ALC - update to GLCN43WW
IdeaPad 3-14ALC6 - update to GLCN43WW
Lenovo V14 G2-ALC - update to GLCN43WW
IdeaPad 3-15ALC6 - update to GLCN43WW
IdeaPad 3-17ALC6 - update to GLCN43WW
Lenovo Legion S7-15ACH6 - update to HACN35WW
IdeaPad 3-17ADA6 - update to HBCN21WW
IdeaPad 3-14ADA6 - update to HBCN21WW
IdeaPad 3-15ADA6 - update to HBCN21WW
Yoga Slim 7 Pro-14ACH5 OD - update to HECN24WW
Yoga Slim 7 Pro-14ACH5 D - update to HECN24WW
Lenovo Legion 5-15ACH6 - update to HHCN25WW
Lenovo Legion 5 Pro-16ACH6 - update to HHCN25WW
Lenovo Legion 5-17ACH6 - update to HHCN25WW

• https://support.lenovo.com/lu/uk/product_security/LEN-73440

• Multiple vulnerabilities in Lenovo products
• Security restrictions bypass in multiple Lenovo products