Lenovo described the potential impact of the three flaws as privilege escalation and defined them as follows: CVE-2021-3970 is caused by an insufficient validation in the LenovoVariable SMI. InsydeH2O UEFI BIOS Optimized for 2nd Generation AMD RyzenDesktop Processor as well as. The PC manufacturer was notified about the three Lenovo UEFI firmware vulnerabilities on October 11, 2021, and patches were released on April 12, 2022. Really wish they'd switch to something more logical like the British (D-M-Y) or Chinese (Y-M-D). Insyde Software Ships on Latest Dell Inspiron Gaming Desktop.
If anyone finds this, it works! Alas, it appears my battery really is dead (or at least, updating to 3531 A03 didn't fix the system not detecting it properly, if it's not the battery itself, we'll see when I get a replacement).Īlso, the American date system is so darn counterintuitive. I was about to abandon all hope when luckily I stumbled onto this thread. Paradoxically, the Dell update utility wouldn't run due to the lack of charged battery, and platforms.ini kept correcting itself upon launch (and wouldn't launch at all if the file was put in read-only), so I tried to run it from a USB boot (in itself another headache, apparently there was no Win10 installation media eligible for download with this OEM laptop), but it told me the BIOS update was 'not compatible with this version of Windows'
The battery (a Dell original) was being detected as a dead third-party fake, so I coudn't update the BIOS (which I thought was the problem, having read others with this same issue elsewhere). Thanks Grungecow, this worked!! Brought me to the end of a real headache of an afternoon trying to fix my Inspirion 15-3531.