Vulnerability Database

309,961

Total vulnerabilities in the database

CVE-2021-3453

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.

Published: Jul 16, 2021
Updated: Nov 16, 2025
CVE: CVE-2021-3453
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.8
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: Low
Score: 2.1
AV:L/AC:L/Au:N/C:N/I:P/A:N

CWEs:

CWE-693

Affected Software
References

Software	From	Fixed in
lenovo / thinkpad_helix_firmware	n17etb4w	n17etb4w.x
lenovo / thinkpad_t550_firmware	n11et53w	n11et53w.x
lenovo / thinkpad_w550s_firmware	n11et53w	n11et53w.x
lenovo / thinkpad_x1_carbon_3rd_gen_firmware	n14et55w	n14et55w.x
lenovo / thinkpad_x250_firmware	n10et62w	n10et62w.x
lenovo / thinkpad_yoga_15_firmware	n19et65w	n19et65w.x
lenovo / ideacentre_aio_5-24imb05_firmware	-	2021-09-30
lenovo / ideacentre_aio_5-74imb05_firmware	-	2021-09-30

https://support.lenovo.com/us/en/product_security/LEN-65529

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo