CVE-2021-3972: Lenovo Ideapad 3-14ada05 Firmware

Medium severity, CVSS 6.7. EPSS: 2.8% chance of exploitation in the next 30 days.

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

Affected products

  • Lenovo Ideapad 3-14ada05 Firmware: before e8cn33ww (fixed in e8cn33ww)
  • Lenovo Ideapad 3-14ada6 Firmware: before hbcn21ww (fixed in hbcn21ww)
  • Lenovo Ideapad 3-14alc6 Firmware: before glcn43ww (fixed in glcn43ww)
  • Lenovo Ideapad 3-14are05 Firmware: before dzcn42ww (fixed in dzcn42ww)
  • Lenovo Ideapad 3-14igl05 Firmware: before emcn52ww (fixed in emcn52ww)
  • Lenovo Ideapad 3-14iil05 Firmware: before dvcn23ww (fixed in dvcn23ww)
  • Lenovo Ideapad 3-14iml05 Firmware: before dxcn41ww (fixed in dxcn41ww)
  • Lenovo Ideapad 3-14itl05 Firmware: before gccn26ww (fixed in gccn26ww)
  • Lenovo Ideapad 3-14itl6 Firmware: before ggcn33ww (fixed in ggcn33ww)
  • Lenovo Ideapad 3-15ada05 Firmware: before e8cn33ww (fixed in e8cn33ww)
  • Lenovo Ideapad 3-15ada6 Firmware: before hbcn21ww (fixed in hbcn21ww)
  • Lenovo Ideapad 3-15alc6 Firmware: before glcn43ww (fixed in glcn43ww)
  • Lenovo Ideapad 3-15are05 Firmware: before dzcn42ww (fixed in dzcn42ww)
  • Lenovo Ideapad 3-15igl05 Firmware: before dvcn23ww (fixed in dvcn23ww)
  • Lenovo Ideapad 3-15iil05 Firmware: before emcn52ww (fixed in emcn52ww)
  • Lenovo Ideapad 3-15iml05 Firmware: before dxcn41ww (fixed in dxcn41ww)
  • Lenovo Ideapad 3-15itl05 Firmware: before gccn26ww (fixed in gccn26ww)
  • Lenovo Ideapad 3-15itl6 Firmware: before ggcn33ww (fixed in ggcn33ww)
  • Lenovo Ideapad 3-17ada05 Firmware: before e8cn33ww (fixed in e8cn33ww)
  • Lenovo Ideapad 3-17ada6 Firmware: before hbcn21ww (fixed in hbcn21ww)
  • Lenovo Ideapad 3-17alc6 Firmware: before glcn43ww (fixed in glcn43ww)
  • Lenovo Ideapad 3-17are05 Firmware: before dzcn42ww (fixed in dzcn42ww)
  • Lenovo Ideapad 3-17iil05 Firmware: before emcn52ww (fixed in emcn52ww)
  • Lenovo Ideapad 3-17iml05 Firmware: before dxcn41ww (fixed in dxcn41ww)
  • Lenovo Ideapad 3-17itl6 Firmware: before ggcn33ww (fixed in ggcn33ww)
  • and 80 more

Published 2022-04-22. Last modified 2026-06-17.