{"id":"CVE-2021-3519","aliases":["EUVD-2021-26835","GHSA-jxph-jj63-5vcv"],"status":"published","title":"A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access...","description":"A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the \"BIOS Password At Boot Device List\" BIOS setting is Yes.","severity":{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00238,"percentile":0.15004,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2021-11-12T22:05:29Z","modified":"2026-06-17T04:05:17Z","products":[{"vendor":"lenovo","product":"desktop bios"},{"vendor":"lenovo","product":"ideacentre_3-07imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_310s-08igm_firmware"},{"vendor":"lenovo","product":"ideacentre_5-14imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_5-14iob6_firmware"},{"vendor":"lenovo","product":"ideacentre_510a-15arr_firmware"},{"vendor":"lenovo","product":"ideacentre_510s-07icb_firmware"},{"vendor":"lenovo","product":"ideacentre_510s-07ick_firmware"},{"vendor":"lenovo","product":"ideacentre_c5-14mb05_firmware"},{"vendor":"lenovo","product":"ideacentre_creator_5-14iob6_firmware"},{"vendor":"lenovo","product":"ideacentre_g5-14imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_gaming_5-14iob6_firmware"},{"vendor":"lenovo","product":"thinkcentre_e75_t\\/s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m60e_tiny_firmware"},{"vendor":"lenovo","product":"thinkcentre_m630e_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70a_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70a_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70c_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m710e_firmware"},{"vendor":"lenovo","product":"thinkcentre_m710s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m710t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m720e_firmware"},{"vendor":"lenovo","product":"thinkcentre_m75n_firmware"},{"vendor":"lenovo","product":"thinkcentre_m75s_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m75t_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m80q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m80s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m80t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m810z_firmware"},{"vendor":"lenovo","product":"thinkcentre_m820z_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90a_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90q_tiny_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90t_firmware"},{"vendor":"lenovo","product":"thinkcentre_qt_b415_firmware"},{"vendor":"lenovo","product":"thinkcentre_qt_m410_firmware"},{"vendor":"lenovo","product":"thinkcentre_qt_m415_firmware"},{"vendor":"lenovo","product":"thinkstation_p340_firmware"},{"vendor":"lenovo","product":"thinkstation_p340_tiny_firmware"},{"vendor":"lenovo","product":"thinkstation_p520_firmware"},{"vendor":"lenovo","product":"thinkstation_p520c_firmware"},{"vendor":"lenovo","product":"thinkstation_p720_firmware"},{"vendor":"lenovo","product":"thinkstation_p920_firmware"},{"vendor":"lenovo","product":"v30a-22iml_firmware"},{"vendor":"lenovo","product":"v330_firmware"},{"vendor":"lenovo","product":"v50a-22imb_firmware"},{"vendor":"lenovo","product":"v50a-24imb_firmware"},{"vendor":"lenovo","product":"v50s-07imb_firmware"},{"vendor":"lenovo","product":"v50t-13imb_firmware"},{"vendor":"lenovo","product":"v50t-13imb_g2_firmware"},{"vendor":"lenovo","product":"v520_firmware"},{"vendor":"lenovo","product":"v520s_firmware"},{"vendor":"lenovo","product":"v530-15arr_firmware"},{"vendor":"lenovo","product":"v530-15icr_firmware"},{"vendor":"lenovo","product":"v530s-07icb_firmware"},{"vendor":"lenovo","product":"v530s-07icr_firmware"},{"vendor":"lenovo","product":"v55t-15api_firmware"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-67440","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3519"},{"url":"https://github.com/advisories/GHSA-jxph-jj63-5vcv"}],"sources":{"cve":[{"id":"CVE-2021-3519","description":"A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the \"BIOS Password At Boot Device List\" BIOS setting is Yes.","status":"published","published":"2021-11-12T22:05:29Z","modified":"2024-08-03T17:01:07.319Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:33:04.360272Z"}],"euvd":[{"id":"EUVD-2021-26835","description":"A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the \"BIOS Password At Boot Device List\" BIOS setting is Yes.","status":"published","published":"2021-11-12T22:05:29Z","modified":"2024-08-03T17:01:07Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","level":"medium"}],"updated_at":"2026-11-03T03:25:12.535968Z"}],"ghsa":[{"id":"GHSA-jxph-jj63-5vcv","title":"A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access...","description":"A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the \"BIOS Password At Boot Device List\" BIOS setting is Yes.","status":"published","published":"2022-05-24T19:20:30Z","modified":"2023-01-30T05:03:49Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:46:55.198962Z"}],"nvd":[{"id":"CVE-2021-3519","description":"A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the \"BIOS Password At Boot Device List\" BIOS setting is Yes.","status":"published","published":"2021-11-12T22:15:07.733Z","modified":"2026-06-17T04:05:17.013Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:07:00.984108Z"}]}}