CVE-2017-3775

2018-05-0416:00:00

lenovo

www.cve.org

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

30.2%

JSON

Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with physical access to the system could boot unsigned code.

CNA Affected

[
  {
    "product": "Some Lenovo Flex System and Lenovo System x products",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Affected BIOS version varies by product"
      }
    ]
  }
]

References

support.lenovo.com/us/en/solutions/LEN-20241