CVE-2021-3519: Lenovo Ideacentre 3-07imb05 Firmware

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.

Affected products

  • Lenovo Ideacentre 3-07imb05 Firmware: before m2vkt18a (fixed in m2vkt18a)
  • Lenovo Ideacentre 310s-08igm Firmware: up to and including m1tkt31a
  • Lenovo Ideacentre 5-14imb05 Firmware: before o4hkt33a (fixed in o4hkt33a)
  • Lenovo Ideacentre 5-14iob6 Firmware: before m3gkt29a (fixed in m3gkt29a)
  • Lenovo Ideacentre 510a-15arr Firmware: up to and including o4dkt41a
  • Lenovo Ideacentre 510s-07icb Firmware: before m22kt46a (fixed in m22kt46a)
  • Lenovo Ideacentre 510s-07ick Firmware: before m30kt24a (fixed in m30kt24a); before m30kt23a (fixed in m30kt23a)
  • Lenovo Ideacentre c5-14mb05 Firmware: before o4hkt33a (fixed in o4hkt33a)
  • Lenovo Ideacentre Creator 5-14iob6 Firmware: before m3gkt29a (fixed in m3gkt29a)
  • Lenovo Ideacentre g5-14imb05 Firmware: before o4hkt33a (fixed in o4hkt33a)
  • Lenovo Ideacentre Gaming 5-14iob6 Firmware: before m3gkt29a (fixed in m3gkt29a)
  • Lenovo Thinkcentre e75 T/s Firmware: before m16kt67a (fixed in m16kt67a)
  • Lenovo Thinkcentre m60e Tiny Firmware: before m3skt1ea (fixed in m3skt1ea)
  • Lenovo Thinkcentre m630e Firmware: before m28kt36a (fixed in m28kt36a)
  • Lenovo Thinkcentre m70a Firmware: up to and including m2skt21a
  • Lenovo Thinkcentre m70a Gen 2 Firmware: before m3nkt17a (fixed in m3nkt17a)
  • Lenovo Thinkcentre m70c Firmware: before m2vkt18a (fixed in m2vkt18a)
  • Lenovo Thinkcentre m70q Firmware: before m2wkt49a (fixed in m2wkt49a)
  • Lenovo Thinkcentre m70s Firmware: before m2tkt3ca (fixed in m2tkt3ca)
  • Lenovo Thinkcentre m70t Firmware: before m2tkt3ca (fixed in m2tkt3ca)
  • Lenovo Thinkcentre m710e Firmware: before m1zkt37a (fixed in m1zkt37a)
  • Lenovo Thinkcentre m710s Firmware: before m16kt67a (fixed in m16kt67a)
  • Lenovo Thinkcentre m710t Firmware: before m16kt67a (fixed in m16kt67a)
  • Lenovo Thinkcentre m720e Firmware: before m30kt23a (fixed in m30kt23a)
  • Lenovo Thinkcentre m75n Firmware: before m33kt21a (fixed in m33kt21a)
  • and 34 more

Published 2021-11-12. Last modified 2026-06-17.