CVE-2021-3614: Lenovo 100e 2nd Gen Firmware

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to elevate privileges under certain conditions during a BIOS update performed by Lenovo Vantage.

Affected products

• Lenovo 100e 2nd Gen Firmware: affected versions not specified
• Lenovo 300e 2nd Gen Firmware: affected versions not specified
• Lenovo Ideapad 1-11ada05 Firmware: version fqcn19ww only
• Lenovo Ideapad 1-11igl05 Firmware: affected versions not specified
• Lenovo Ideapad 1-14ada05 Firmware: version fqcn19ww only
• Lenovo Ideapad 1-14igl05 Firmware: affected versions not specified
• Lenovo Ideapad 730-13iml Firmware: affected versions not specified
• Lenovo Ideapad Flex 5-14alc05 Firmware: affected versions not specified
• Lenovo Ideapad Flex 5-15alc05 Firmware: affected versions not specified
• Lenovo Ideapad s940-14iil Firmware: affected versions not specified
• Lenovo Ideapad s940-14iwl Firmware: affected versions not specified
• Lenovo Ideapad Slim 1-11ast-05 Firmware: affected versions not specified
• Lenovo Ideapad Slim 1-14ast-05 Firmware: affected versions not specified
• Lenovo Ideapad Yoga c940-15irh Firmware: affected versions not specified
• Lenovo Ideapad Yoga s730-13iml Firmware: affected versions not specified
• Lenovo Ideapad Yoga s940-14iil Firmware: affected versions not specified
• Lenovo Ideapad Yoga s940-14iwl Firmware: affected versions not specified
• Lenovo v130-15igm Firmware: affected versions not specified
• Lenovo v130-15ikb Firmware: affected versions not specified
• Lenovo v330-15ikb Firmware: affected versions not specified
• Lenovo v330-15isk Firmware: affected versions not specified

Published 2021-07-16. Last modified 2026-06-17.