Protection Mechanism Failure
CVE-2021-3453
Summary
Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.
- LOW
- PHYSICAL
- HIGH
- UNCHANGED
- NONE
- NONE
- HIGH
- HIGH
CWE-693 - Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
References
Advisory Timeline
- Published
