{"cve":"CVE-2021-3519","nvd":{"published":"2021-11-12T22:15:07.733","modified":"2026-06-17T04:05:17.013","status":"Modified","description":"A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the \"BIOS Password At Boot Device List\" BIOS setting is Yes.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":6.8},"cwes":["CWE-287"],"references":["https://support.lenovo.com/us/en/product_security/LEN-67440","https://support.lenovo.com/us/en/product_security/LEN-67440"],"products":["lenovo:ideacentre_3-07imb05_firmware","lenovo:ideacentre_310s-08igm_firmware","lenovo:ideacentre_5-14imb05_firmware","lenovo:ideacentre_5-14iob6_firmware","lenovo:ideacentre_510a-15arr_firmware","lenovo:ideacentre_510s-07icb_firmware","lenovo:ideacentre_510s-07ick_firmware","lenovo:ideacentre_c5-14mb05_firmware","lenovo:ideacentre_creator_5-14iob6_firmware","lenovo:ideacentre_g5-14imb05_firmware","lenovo:ideacentre_gaming_5-14iob6_firmware","lenovo:thinkcentre_e75_t\\/s_firmware","lenovo:thinkcentre_m60e_tiny_firmware","lenovo:thinkcentre_m630e_firmware","lenovo:thinkcentre_m70a_firmware","lenovo:thinkcentre_m70a_gen_2_firmware","lenovo:thinkcentre_m70c_firmware","lenovo:thinkcentre_m70q_firmware","lenovo:thinkcentre_m70s_firmware","lenovo:thinkcentre_m70t_firmware","lenovo:thinkcentre_m710e_firmware","lenovo:thinkcentre_m710s_firmware","lenovo:thinkcentre_m710t_firmware","lenovo:thinkcentre_m720e_firmware","lenovo:thinkcentre_m75n_firmware","lenovo:thinkcentre_m75s_gen_2_firmware","lenovo:thinkcentre_m75t_gen_2_firmware","lenovo:thinkcentre_m80q_firmware","lenovo:thinkcentre_m80s_firmware","lenovo:thinkcentre_m80t_firmware","lenovo:thinkcentre_m810z_firmware","lenovo:thinkcentre_m820z_firmware","lenovo:thinkcentre_m90a_firmware","lenovo:thinkcentre_m90q_tiny_firmware","lenovo:thinkcentre_m90s_firmware","lenovo:thinkcentre_m90t_firmware","lenovo:thinkcentre_qt_b415_firmware","lenovo:thinkcentre_qt_m410_firmware","lenovo:thinkcentre_qt_m415_firmware","lenovo:thinkstation_p340_firmware","lenovo:thinkstation_p340_tiny_firmware","lenovo:thinkstation_p520_firmware","lenovo:thinkstation_p520c_firmware","lenovo:thinkstation_p720_firmware","lenovo:thinkstation_p920_firmware","lenovo:v30a-22iml_firmware","lenovo:v330_firmware","lenovo:v50a-22imb_firmware","lenovo:v50a-24imb_firmware","lenovo:v50s-07imb_firmware"],"source":"nvd","synced_at":"2026-10-19T21:24:39.218183596+00:00"},"epss":{"cve":"CVE-2021-3519","score":0.00238,"percentile":0.14925,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}