← Vulnerability feed

Vulnerability record · CVE-2021-3718 · published 12 November 2021

CVE-2021-3718: Lenovo thinkpad 11e 3rd gen firmware vulnerability

Lenovo · Thinkpad 11e 3rd Gen Firmware

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.

4.6 CVSS 3.1 Medium EPSS 0.22% · top 88.7% CWE-232 · CWE-232
4.6CVSS 3.1 base score, v2 4.7
0.22%EPSS exploitation probability, 30 days
NoNot in CISA KEV
39Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

39 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.lenovo.com/us/en/product_security/LEN-72619 Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-72619 Vendor Advisory

Track CVE-2021-3718 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.7CVE-2021-3843Lenovo thinkpad 11e 3rd gen firmware improper input validation vulnerabilityA potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privilege…EPSS 0.28%6.7CVE-2021-3599Lenovo thinkpad x380 yoga firmware improper input validation vulnerabilityA potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access an…EPSS 0.29%5.5CVE-2021-3786Lenovo thinkpad x380 yoga firmware improper input validation vulnerabilityA potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak …EPSS 0.23%

Source: NIST National Vulnerability Database (record CVE-2021-3718), CISA KEV, FIRST EPSS (scores of 2026-10-17). This page is refreshed as NVD updates the record.