CVE-2021-3453: Lenovo 730s-13iml Firmware

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.

Affected products

• Lenovo 730s-13iml Firmware: affected versions not specified
• Lenovo Ideacentre Aio 5-24imb05 Firmware: before 2021-09-30 (fixed in 2021-09-30)
• Lenovo Ideacentre Aio 5-74imb05 Firmware: before 2021-09-30 (fixed in 2021-09-30)
• Lenovo Ideapad 1-11igl05 Firmware: affected versions not specified
• Lenovo Ideapad 1-14igl05 Firmware: affected versions not specified
• Lenovo Ideapad s940-14iil Firmware: affected versions not specified
• Lenovo Ideapad s940-14iwl Firmware: affected versions not specified
• Lenovo Ideapad Slim 1-11ast-05 Firmware: affected versions not specified
• Lenovo Ideapad Slim 1-14ast-05 Firmware: affected versions not specified
• Lenovo Thinkpad Helix Firmware: version n17etb4w only
• Lenovo Thinkpad t550 Firmware: version n11et53w only
• Lenovo Thinkpad w550s Firmware: version n11et53w only
• Lenovo Thinkpad x1 Carbon 3rd Gen Firmware: version n14et55w only
• Lenovo Thinkpad x250 Firmware: version n10et62w only
• Lenovo Thinkpad Yoga 15 Firmware: version n19et65w only
• Lenovo v130-15igm Firmware: affected versions not specified
• Lenovo v330-15ikb Firmware: affected versions not specified
• Lenovo v330-15isk Firmware: affected versions not specified
• Lenovo Yoga s730-13iml Firmware: affected versions not specified
• Lenovo Yoga s940-14iil Firmware: affected versions not specified
• Lenovo Yoga s940-14iwl Firmware: affected versions not specified

Published 2021-07-16. Last modified 2026-06-17.