CVE-2021-3519
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access...
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.
- Record
CVE-2021-3519- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H - Weakness
- CWE-287
- Updated
- 2026-11-02
EUVDEUVD-2021-26835
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.
- Record
EUVD-2021-26835- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jxph-jj63-5vcvNo score
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access...
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.
- Record
GHSA-jxph-jj63-5vcv- Weakness
- CWE-287
- Updated
- 2026-11-02
NVD
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.
- Record
CVE-2021-3519- CVSS 3.1
- 6.4 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H - CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-287
- Updated
- 2026-11-02
Affected products
- lenovo desktop bios
- lenovo ideacentre 3-07imb05 firmware
- lenovo ideacentre 310s-08igm firmware
- lenovo ideacentre 5-14imb05 firmware
- lenovo ideacentre 5-14iob6 firmware
- lenovo ideacentre 510a-15arr firmware
- lenovo ideacentre 510s-07icb firmware
- lenovo ideacentre 510s-07ick firmware
- lenovo ideacentre c5-14mb05 firmware
- lenovo ideacentre creator 5-14iob6 firmware
- lenovo ideacentre g5-14imb05 firmware
- lenovo ideacentre gaming 5-14iob6 firmware
Show 48 moreShow less
- lenovo thinkcentre e75 t\/s firmware
- lenovo thinkcentre m60e tiny firmware
- lenovo thinkcentre m630e firmware
- lenovo thinkcentre m70a firmware
- lenovo thinkcentre m70a gen 2 firmware
- lenovo thinkcentre m70c firmware
- lenovo thinkcentre m70q firmware
- lenovo thinkcentre m70s firmware
- lenovo thinkcentre m70t firmware
- lenovo thinkcentre m710e firmware
- lenovo thinkcentre m710s firmware
- lenovo thinkcentre m710t firmware
- lenovo thinkcentre m720e firmware
- lenovo thinkcentre m75n firmware
- lenovo thinkcentre m75s gen 2 firmware
- lenovo thinkcentre m75t gen 2 firmware
- lenovo thinkcentre m80q firmware
- lenovo thinkcentre m80s firmware
- lenovo thinkcentre m80t firmware
- lenovo thinkcentre m810z firmware
- lenovo thinkcentre m820z firmware
- lenovo thinkcentre m90a firmware
- lenovo thinkcentre m90q tiny firmware
- lenovo thinkcentre m90s firmware
- lenovo thinkcentre m90t firmware
- lenovo thinkcentre qt b415 firmware
- lenovo thinkcentre qt m410 firmware
- lenovo thinkcentre qt m415 firmware
- lenovo thinkstation p340 firmware
- lenovo thinkstation p340 tiny firmware
- lenovo thinkstation p520 firmware
- lenovo thinkstation p520c firmware
- lenovo thinkstation p720 firmware
- lenovo thinkstation p920 firmware
- lenovo v30a-22iml firmware
- lenovo v330 firmware
- lenovo v50a-22imb firmware
- lenovo v50a-24imb firmware
- lenovo v50s-07imb firmware
- lenovo v50t-13imb firmware
- lenovo v50t-13imb g2 firmware
- lenovo v520 firmware
- lenovo v520s firmware
- lenovo v530-15arr firmware
- lenovo v530-15icr firmware
- lenovo v530s-07icb firmware
- lenovo v530s-07icr firmware
- lenovo v55t-15api firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-3519 is a medium vulnerability (CVSS 6.4) in Lenovo Desktop Bios, published November 12, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. No source names a fixed version.