CVE-2017-3754

2017-07-1300:00:00

lenovo

www.cve.org

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code.

CNA Affected

[
  {
    "product": "Lenovo Notebook BIOS",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Various"
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-15084