CVE-2021-3718

mediumpriority · track · 18EPSS 0.002 · 12 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.22% (12th) EPSS

CVSS 4.7 · medium

Is it mine?

43 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-27

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.

cvss

Technical severity, 0–10. One row per scoring source.

4.7

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.04.7mediumAV:L/AC:M/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USexploitability 3.4 · impact 6.9

v3.14.6mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 0.9 · impact 3.6

v3.14.3mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.14.3mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Hsecondary · psirt@lenovo.comexploitability 0.7 · impact 3.6

v3.14.2mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-232US

affected products (43)

Products and version ranges known to be affected.

Lenovo ThinkPad BIOSall versionsenisa_euvdEU
lenovo thinkpad 11e 3rd gen firmware≤ 1.22nvdUScpe:2.3:o:lenovo:thinkpad_11e_3rd_gen_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad 11e 3rd gen firmware≤ 1.29nvdUScpe:2.3:o:lenovo:thinkpad_11e_3rd_gen_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad 11e 4th gen celeron firmware≤ 1.27nvdUScpe:2.3:o:lenovo:thinkpad_11e_4th_gen_celeron_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad 11e 4th gen i3 firmware≤ 1.22nvdUScpe:2.3:o:lenovo:thinkpad_11e_4th_gen_i3_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad 11e 4th gen i5 firmware≤ 1.22nvdUScpe:2.3:o:lenovo:thinkpad_11e_4th_gen_i5_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad 11e 4th gen i7 firmware≤ 1.22nvdUScpe:2.3:o:lenovo:thinkpad_11e_4th_gen_i7_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad 11e 5th gen firmware≤ 1.13nvdUScpe:2.3:o:lenovo:thinkpad_11e_5th_gen_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad 11e yoga gen 6 firmware≤ 1.12nvdUScpe:2.3:o:lenovo:thinkpad_11e_yoga_gen_6_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad 13 gen 2 firmware≤ 1.29nvdUScpe:2.3:o:lenovo:thinkpad_13_gen_2_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad e490 firmware≤ 1.30nvdUScpe:2.3:o:lenovo:thinkpad_e490_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad e490s firmware≤ 1.30nvdUScpe:2.3:o:lenovo:thinkpad_e490s_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad e590 firmware≤ 1.30nvdUScpe:2.3:o:lenovo:thinkpad_e590_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad l13 firmware≤ 1.31nvdUScpe:2.3:o:lenovo:thinkpad_l13_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad l13 gen 2 firmware≤ 1.11nvdUScpe:2.3:o:lenovo:thinkpad_l13_gen_2_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad l13 gen 2 firmware≤ 1.08nvdUScpe:2.3:o:lenovo:thinkpad_l13_gen_2_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad l13 yoga firmware≤ 1.31nvdUScpe:2.3:o:lenovo:thinkpad_l13_yoga_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad l13 yoga gen 2 firmware≤ 1.11nvdUScpe:2.3:o:lenovo:thinkpad_l13_yoga_gen_2_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad l13 yoga gen 2 firmware≤ 1.08nvdUScpe:2.3:o:lenovo:thinkpad_l13_yoga_gen_2_firmware:*:*:*:*:*:*:*:*
lenovo thinkpad l14 firmware< 1.20.1.17nvdUScpe:2.3:o:lenovo:thinkpad_l14_firmware:*:*:*:*:*:*:*:*

showing 20 of 43

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2021-11-12modified 2026-06-17

references (4)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan