Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-3775
HistoryMay 04, 2018 - 5:29 p.m.

CVE-2017-3775

2018-05-0417:29:00
CWE-287
[email protected]
web.nvd.nist.gov
5

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

6.4

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

30.2%

JSON

Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with physical access to the system could boot unsigned code.

Affected configurations

Nvd
Node
lenovoflex_system_x240_m5Match-
AND
lenovoflex_system_x240_m5_biosRange<2.61
Node
lenovoflex_system_x280_x6Match-
AND
lenovoflex_system_x280_x6_biosRange<4.21
Node
lenovoflex_system_x480_x6Match-
AND
lenovoflex_system_x480_x6_biosRange<4.21
Node
lenovoflex_system_x880Match-
AND
lenovoflex_system_x880_biosRange<4.21
Node
lenovonextscale_nx360_m5Match-
AND
lenovonextscale_nx360_m5_biosRange<2.61
Node
lenovosystem_x3250_m6Match-
AND
lenovosystem_x3250_m6_biosRange<2.23
Node
lenovosystem_x3500_m5Match-
AND
lenovosystem_x3500_m5_biosRange<2.61
Node
lenovosystem_x3550_m5Match-
AND
lenovosystem_x3550_m5_biosRange<2.61
Node
lenovosystem_x3650_m5_biosRange<2.61
AND
lenovosystem_x3650_m5Match-
Node
lenovosystem_x3850_x6_biosRange<4.3
AND
lenovosystem_x3850_x6Match-
Node
lenovosystem_x3950_x6_biosRange<4.3
AND
lenovosystem_x3950_x6Match-
VendorProductVersionCPE
lenovoflex_system_x240_m5-cpe:2.3:h:lenovo:flex_system_x240_m5:-:*:*:*:*:*:*:*
lenovoflex_system_x240_m5_bios*cpe:2.3:o:lenovo:flex_system_x240_m5_bios:*:*:*:*:*:*:*:*
lenovoflex_system_x280_x6-cpe:2.3:h:lenovo:flex_system_x280_x6:-:*:*:*:*:*:*:*
lenovoflex_system_x280_x6_bios*cpe:2.3:o:lenovo:flex_system_x280_x6_bios:*:*:*:*:*:*:*:*
lenovoflex_system_x480_x6-cpe:2.3:h:lenovo:flex_system_x480_x6:-:*:*:*:*:*:*:*
lenovoflex_system_x480_x6_bios*cpe:2.3:o:lenovo:flex_system_x480_x6_bios:*:*:*:*:*:*:*:*
lenovoflex_system_x880-cpe:2.3:h:lenovo:flex_system_x880:-:*:*:*:*:*:*:*
lenovoflex_system_x880_bios*cpe:2.3:o:lenovo:flex_system_x880_bios:*:*:*:*:*:*:*:*
lenovonextscale_nx360_m5-cpe:2.3:h:lenovo:nextscale_nx360_m5:-:*:*:*:*:*:*:*
lenovonextscale_nx360_m5_bios*cpe:2.3:o:lenovo:nextscale_nx360_m5_bios:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 221

Related

lenovo 2
cvelist 1
cve 1
prion 1
threatpost 1
lenovo
lenovo
System x Secure Boot Vulnerability - Lenovo Support US
2019-01-12 19:48:43
System x Secure Boot Vulnerability - US
2019-01-12 19:48:43
cvelist
cvelist
CVE-2017-3775
2018-05-04 16:00:00
cve
cve
CVE-2017-3775
2018-05-04 17:29:00
prion
prion
Code injection
2018-05-04 17:29:00
threatpost
threatpost
Lenovo Patches Arbitrary Code Execution Flaw
2018-05-07 14:14:19

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

6.4

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

30.2%

JSON
Related for NVD:CVE-2017-3775
lenovo2cvelist1cve1prion1threatpost1