CVE-2021-3718
A denial of service vulnerability was reported in some ThinkPad models that could cause a system...
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.
- Record
CVE-2021-3718- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-232
- Updated
- 2026-11-02
EUVDEUVD-2021-26998
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.
- Record
EUVD-2021-26998- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cf28-3crv-xv77 No score
A denial of service vulnerability was reported in some ThinkPad models that could cause a system...
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.
- Record
GHSA-cf28-3crv-xv77- Updated
- 2026-11-02
NVD
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.
- Record
CVE-2021-3718- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 3.1
- 4.6 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.7 Medium
AV:L/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-232
- Updated
- 2026-11-02
Affected products
- lenovo thinkpad bios
- lenovo thinkpad 11e 3rd gen firmware
- lenovo thinkpad 11e 4th gen celeron firmware
- lenovo thinkpad 11e 4th gen i3 firmware
- lenovo thinkpad 11e 4th gen i5 firmware
- lenovo thinkpad 11e 4th gen i7 firmware
- lenovo thinkpad 11e 5th gen firmware
- lenovo thinkpad 11e yoga gen 6 firmware
- lenovo thinkpad 13 gen 2 firmware
- lenovo thinkpad e490 firmware
- lenovo thinkpad e490s firmware
- lenovo thinkpad e590 firmware
Show 28 moreShow less
- lenovo thinkpad l13 firmware
- lenovo thinkpad l13 gen 2 firmware
- lenovo thinkpad l13 yoga firmware
- lenovo thinkpad l13 yoga gen 2 firmware
- lenovo thinkpad l14 firmware
- lenovo thinkpad l14 gen 1 firmware
- lenovo thinkpad l15 firmware
- lenovo thinkpad l15 gen 1 firmware
- lenovo thinkpad l380 firmware
- lenovo thinkpad l380 yoga firmware
- lenovo thinkpad l390 firmware
- lenovo thinkpad l390 yoga firmware
- lenovo thinkpad l490 firmware
- lenovo thinkpad l590 firmware
- lenovo thinkpad p43s firmware
- lenovo thinkpad p52 firmware
- lenovo thinkpad p53s firmware
- lenovo thinkpad p72 firmware
- lenovo thinkpad s2 gen 6 firmware
- lenovo thinkpad s2 yoga gen 6 firmware
- lenovo thinkpad s5 2nd gen firmware
- lenovo thinkpad t460 firmware
- lenovo thinkpad t490 firmware
- lenovo thinkpad t590 firmware
- lenovo thinkpad x12 detachable gen 1 firmware
- lenovo thinkpad x260 firmware
- lenovo thinkpad x380 yoga firmware
- lenovo thinkpad x390 yoga firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-3718 is a medium vulnerability (CVSS 4.3) in Lenovo Thinkpad Bios, published November 12, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. No source names a fixed version.