Lenovo has addressed 3 high-impact security vulnerabilities tracked as CVE-2021-3970, CVE-2021-3971, and CVE-2021-3972 that affect Lenovo consumer laptops in its Unified Extensible Firmware Interface (UEFI). This came after ESET security researchers responsibly reported the vulnerabilities to Lenovo in October last year.
According to the detailed technical analysis published by ESET, two of the vulnerabilities (CVE-2021-3971 and CVE-2021-3972) affect firmware drivers that were mistakenly used in the production BIOS images but were originally meant to be used only during the manufacturing process of Lenovo consumer notebooks.
Firmware updates are now available for some of the affected Lenovo laptops. Kindly refer to Section C for the list of the affected product.
______________________________
A. Nature of Vulnerability
CVE-2021-3970
A potential vulnerability in Lenovo Variable SMI Handler due to insufficient validation in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2021-3971
A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify the firmware protection region by modifying an NVRAM variable.
CVE-2021-3972
A potential vulnerability by a driver used during the manufacturing process on some consumer Lenovo Notebook devices which were mistakenly not deactivated may allow an attacker with elevated privileges to modify the secure boot settings by modifying an NVRAM variable.
______________________________
B. Actions to be Taken
CERT-PH recommends the following actions be taken:
- Apply the latest firmware update provided by Lenovo.
- To download the version specified for your product below, follow these steps:
- Navigate to the Drivers & Software support site for your product:
- Lenovo Products (sold worldwide, except in China): https://support.lenovo.com/
- Lenovo Products (sold in China): https://newsupport.lenovo.com.cn/
- IBM-branded System x Legacy Products: https://www.ibm.com/support/fixcentral/
- Navigate to the Drivers & Software support site for your product:
- To download the version specified for your product below, follow these steps:
- Proactively monitor and secure identified systems and devices for any suspicious/malicious activities.
- In addition, providing and capacitating employees with cybersecurity knowledge and information to minimize the attack surface.
- For additional information, kindly refer to the official advisories:
______________________________
C. List of Affected Lenovo Notebooks and Updates
| Product | CVE-2021-3970 | CVE-2021-3971 | CVE-2021-3972 |
| Flex 3-11ADA05 Laptop (ideapad) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| IdeaPad 3 15ADA05 Laptop | E8CN33WW | E8CN33WW | E8CN33WW |
| IdeaPad 3-14ADA05 Laptop | E8CN33WW | E8CN33WW | E8CN33WW |
| IdeaPad 3-14ADA6 Laptop | HBCN21WW | HBCN21WW | HBCN21WW |
| IdeaPad 3-14ALC6 Laptop | GLCN43WW | GLCN43WW | GLCN43WW |
| IdeaPad 3-14ARE05 Laptop | dzcn42ww | dzcn42ww | dzcn42ww |
| IdeaPad 3-14ARE05 Laptop | DZCN42WW | DZCN42WW | DZCN42WW |
| IdeaPad 3-15ADA6 Laptop | HBCN21WW | HBCN21WW | HBCN21WW |
| IdeaPad 3-15ALC6 Laptop | GLCN43WW | GLCN43WW | GLCN43WW |
| IdeaPad 3-15ARE05 Laptop | dzcn42ww | dzcn42ww | dzcn42ww |
| IdeaPad 3-15ARE05 Laptop | DZCN42WW | DZCN42WW | DZCN42WW |
| IdeaPad 3-15IGL05 Laptop | DVCN23WW | DVCN23WW | DVCN23WW |
| IdeaPad 3-17ADA05 Laptop | E8CN33WW | E8CN33WW | E8CN33WW |
| IdeaPad 3-17ADA6 Laptop | HBCN21WW | HBCN21WW | HBCN21WW |
| IdeaPad 3-17ALC6 Laptop | GLCN43WW | GLCN43WW | GLCN43WW |
| IdeaPad 3-17ARE05 Laptop | dzcn42ww | dzcn42ww | dzcn42ww |
| IdeaPad 3-17ARE05 Laptop | DZCN42WW | DZCN42WW | DZCN42WW |
| IdeaPad 3-17IIL05 Laptop | EMCN52WW | EMCN52WW | EMCN52WW |
| IdeaPad 3-17ITL6 Laptop | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| L3-15IML05 Laptop (ideapad) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| L3-15ITL6 Laptop (ideapad) | GFCN23WW | GFCN23WW | GFCN23WW |
| L340-15IRH Gaming Laptop (ideapad) | BGCN35WW | BGCN35WW | BGCN35WW |
| L340-15IWL Laptop (ideapad) | ATCN46WW | ATCN46WW | ATCN46WW |
| L340-15IWL Touch Laptop (ideapad) | ATCN46WW | ATCN46WW | ATCN46WW |
| L340-17IRH Gaming Laptop (ideapad) | BGCN35WW | BGCN35WW | BGCN35WW |
| L340-17IWL Laptop (ideapad) | ATCN46WW | ATCN46WW | ATCN46WW |
| Legion 5 Pro-16ACH6 Laptop (Lenovo) | HHCN25WW | HHCN25WW | HHCN25WW |
| Legion 5 Pro-16ACH6H Laptop (Lenovo) | GKCN51WW | GKCN51WW | GKCN51WW |
| Legion 5 Pro-16ITH6 Laptop (Lenovo) | H1CN46WW | H1CN46WW | H1CN46WW |
| Legion 5 Pro-16ITH6H Laptop (Lenovo) | H1CN46WW | H1CN46WW | H1CN46WW |
| Legion 5-15ACH6 Laptop (Lenovo) | HHCN25WW | HHCN25WW | HHCN25WW |
| Legion 5-15ACH6A Laptop (Lenovo) | G9CN28WW | G9CN28WW | G9CN28WW |
| Legion 5-15ACH6H Laptop (Lenovo) | GKCN51WW | GKCN51WW | GKCN51WW |
| Legion 5-15IMH6 Laptop (Lenovo) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| Legion 5-15ITH6 Laptop (Lenovo) | H1CN46WW | H1CN46WW | H1CN46WW |
| Legion 5-15ITH6H Laptop (Lenovo) | H1CN46WW | H1CN46WW | H1CN46WW |
| Legion 5-17ACH6 Laptop (Lenovo) | HHCN25WW | HHCN25WW | HHCN25WW |
| Legion 5-17ACH6H Laptop (Lenovo) | GKCN51WW | GKCN51WW | GKCN51WW |
| Legion 5-17ITH6 Laptop (Lenovo) | H1CN46WW | H1CN46WW | H1CN46WW |
| Legion 5-17ITH6H Laptop (Lenovo) | H1CN46WW | H1CN46WW | H1CN46WW |
| Legion 7-16ACHg6 Laptop (Lenovo) | Not Affected | GKCN52WW | GKCN52WW |
| Legion 7-16ACHg6 Laptop (Lenovo) | GKCN51WW | GKCN51WW | GKCN51WW |
| Legion 7-16ITHg6 Laptop (Lenovo) | H1CN46WW | H1CN46WW | H1CN46WW |
| Legion S7-15ACH6 Laptop (Lenovo) | HACN35WW | Not Affected | HACN35WW |
| Legion S7-15ARH5 Laptop (Lenovo) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| Legion S7-15IMH5 Laptop (Lenovo) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| Legion Y540-15IRH Laptop (Lenovo) | BHCN44WW | BHCN44WW | BHCN44WW |
| Legion Y540-15IRH-PG0 Laptop (Lenovo) | BHCN44WW | BHCN44WW | BHCN44WW |
| Legion Y540-17IRH Laptop (Lenovo) | BHCN44WW | BHCN44WW | BHCN44WW |
| Legion Y540-17IRH-PG0 Laptop (Lenovo) | BHCN44WW | BHCN44WW | BHCN44WW |
| Legion Y545 Laptop (Lenovo) | BHCN44WW | BHCN44WW | BHCN44WW |
| Legion Y545-PG0 Laptop (Lenovo) | BHCN44WW | BHCN44WW | BHCN44WW |
| Legion Y7000-2019 Laptop (Lenovo) | BHCN44WW | BHCN44WW | BHCN44WW |
| Legion Y7000-2019-PG0 Laptop (Lenovo) | BHCN44WW | BHCN44WW | BHCN44WW |
| Lenovo S14 G2 ITL | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| S145-14API Laptop (ideapad) | BUCN31WW | BUCN31WW | BUCN31WW |
| S145-14AST Laptop (ideapad) | AYCN26WW | AYCN26WW | AYCN26WW |
| S145-14IGM Laptop (ideapad) | AWCN28WW | AWCN28WW | AWCN28WW |
| S145-14IIL Laptop (ideapad) | DKCN54WW | DKCN54WW | DKCN54WW |
| S145-15API Laptop (ideapad) | BUCN31WW | BUCN31WW | BUCN31WW |
| S145-15AST Laptop (ideapad) | BUCN31WW | BUCN31WW | BUCN31WW |
| S145-15AST Laptop (ideapad) | AYCN26WW | AYCN26WW | AYCN26WW |
| S145-15IGM Laptop (ideapad) | AWCN28WW | AWCN28WW | AWCN28WW |
| S145-15IIL Laptop (ideapad) | DKCN54WW | DKCN54WW | DKCN54WW |
| S540-13API Laptop (ideapad) | CXCN34WW | CXCN34WW | CXCN34WW |
| S540-13IML Laptop (ideapad) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| Slim 7 Pro-14IHU5 Laptop (IdeaPad) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| Slim 9-14ITL05 Laptop (ideapad) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| V14 G1-IML Laptop (Lenovo) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| V14 G2-ALC Laptop (Lenovo) | GLCN43WW | GLCN43WW | GLCN43WW |
| V14 G2-ITL Laptop (Lenovo) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| V14-ADA Laptop (Lenovo) | E8CN33WW | E8CN33WW | E8CN33WW |
| V14-ARE Laptop (Lenovo) | dzcn42ww | dzcn42ww | dzcn42ww |
| V14-ARE Laptop (Lenovo) | DZCN42WW | DZCN42WW | DZCN42WW |
| V14-IGL Laptop (Lenovo) | DVCN23WW | DVCN23WW | DVCN23WW |
| V14-IIL Laptop (Lenovo) | DKCN54WW | DKCN54WW | DKCN54WW |
| V140-15IWL | ATCN46WW | ATCN46WW | ATCN46WW |
| V15 G1-IML Laptop (Lenovo) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| V15 G2-ALC Laptop (Lenovo) | GLCN43WW | GLCN43WW | GLCN43WW |
| V15 G2-ITL Laptop (Lenovo) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| V15-ADA Laptop (Lenovo) | E8CN33WW | E8CN33WW | E8CN33WW |
| V15-IGL Laptop (Lenovo) | DVCN23WW | DVCN23WW | DVCN23WW |
| V15-IIL Laptop (Lenovo) | DKCN54WW | DKCN54WW | DKCN54WW |
| V17 G2-ITL Laptop (Lenovo) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| V17-IIL Laptop (Lenovo) | EMCN52WW | EMCN52WW | EMCN52WW |
| V340-17IWL Laptop (Lenovo) | ATCN46WW | ATCN46WW | ATCN46WW |
| Yoga 7-14ACN6 Laptop (ideapad) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| Yoga C740-14IML Laptop (Lenovo) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| Yoga C740-15IML Laptop (Lenovo) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| Yoga C940-14IIL Laptop (ideapad) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| Yoga Slim 7 Pro-14ACH5 D | HECN24WW | HECN24WW | HECN24WW |
| Yoga Slim 7 Pro-14ACH5 Laptop (ideapad) | Target availability 2022-05-10 | Target availability 2022-05-10 | Target availability 2022-05-10 |
| Yoga Slim 7 Pro-14ACH5 O Laptop (ideapad) | Target availability 2022-05-10 | Target availability 2022-05-10 | Target availability 2022-05-10 |
| Yoga Slim 7 Pro-14ACH5 OD | HECN24WW | HECN24WW | HECN24WW |
| Yoga Slim 7 Pro-14ARH5 Laptop (ideapad) | G7CN21WW | Not Affected | G7CN21WW |
| Yoga Slim 7 Pro-14IHU5 Laptop (ideapad) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| Yoga Slim 7 Pro-14IHU5 O Laptop (ideapad) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| Yoga Slim 7 Pro-14ITL5 Laptop (ideapad) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| Yoga Slim 9-14ITL05 Laptop (ideapad) | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| ideapad 3-14IGL05 Laptop | DVCN23WW | DVCN23WW | DVCN23WW |
| ideapad 3-14IIL05 Laptop | EMCN52WW | EMCN52WW | EMCN52WW |
| ideapad 3-14IML05 Laptop | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| ideapad 3-14ITL05 Laptop | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| ideapad 3-14ITL6 Laptop | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| ideapad 3-15IIL05 Laptop | EMCN52WW | EMCN52WW | EMCN52WW |
| ideapad 3-15IML05 Laptop | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| ideapad 3-15ITL05 Laptop | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| ideapad 3-15ITL6 Laptop | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| ideapad 3-17IML05 Laptop | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| ideapad 5-15ARE05 Laptop | E7CN44WW | E7CN44WW | E7CN44WW |
| ideapad 5-15IIL05 Laptop | Target availability 2022-05-10 | Not Affected | Target availability 2022-05-10 |
| ideapad Creator 5-15IMH05 Laptop | EGCN36WW | EGCN36WW | EGCN36WW |
| ideapad Gaming 3-15ARH05 Laptop | FCCN17WW | FCCN17WW | FCCN17WW |
| ideapad Gaming 3-15IMH05 Laptop | EGCN36WW | EGCN36WW | EGCN36WW |