CVE-2017-3775

🗓️ 04 May 2018 16:00:00Reported by lenovoType

Lenovo System x server BIOS/UEFI not authenticating signed code with Secure Boot

Reporter	Title	Published	Views	Family All 9
CNVD	Code execution vulnerability in multiple Lenovo products	8 May 201800:00	–	cnvd
Cvelist	CVE-2017-3775	4 May 201816:00	–	cvelist
EUVD	EUVD-2017-12892	7 Oct 202500:30	–	euvd
Lenovo	System x Secure Boot Vulnerability - US	12 Jan 201919:48	–	lenovo
Lenovo	System x Secure Boot Vulnerability - Lenovo Support US	12 Jan 201919:48	–	lenovo
NVD	CVE-2017-3775	4 May 201817:29	–	nvd
OSV	CVE-2017-3775	4 May 201817:29	–	osv
Prion	Code injection	4 May 201817:29	–	prion
ThreatPost	Lenovo Patches Arbitrary Code Execution Flaw	7 May 201814:14	–	threatpost

NVD

Vulners

Node

lenovo flex_system_x240_m5_biosRange<2.61

AND

lenovo flex_system_x240_m5Match-

Node

lenovo flex_system_x280_x6_biosRange<4.21

AND

lenovo flex_system_x280_x6Match-

Node

lenovo flex_system_x480_x6_biosRange<4.21

AND

lenovo flex_system_x480_x6Match-

Node

lenovo flex_system_x880_biosRange<4.21

AND

lenovo flex_system_x880Match-

Node

lenovo nextscale_nx360_m5_biosRange<2.61

AND

lenovo nextscale_nx360_m5Match-

Node

lenovo system_x3250_m6_biosRange<2.23

AND

lenovo system_x3250_m6Match-

Node

lenovo system_x3500_m5_biosRange<2.61

AND

lenovo system_x3500_m5Match-

Node

lenovo system_x3550_m5_biosRange<2.61

AND

lenovo system_x3550_m5Match-

Node

lenovo system_x3650_m5_biosRange<2.61

AND

lenovo system_x3650_m5Match-

Node

lenovo system_x3850_x6_biosRange<4.3

AND

lenovo system_x3850_x6Match-

Node

lenovo system_x3950_x6_biosRange<4.3

AND

lenovo system_x3950_x6Match-

[
  {
    "product": "Some Lenovo Flex System and Lenovo System x products",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Affected BIOS version varies by product"
      }
    ]
  }
]

Source	Link
support	www.support.lenovo.com/us/en/solutions/LEN-20241

21 Nov 2024 03:26Current

6.2Medium risk

Vulners AI Score6.2

CVSS 36.4

CVSS 26.9

EPSS0.00042

CWE-287