Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-3753

A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with administrative privileges or physical access to a system may be able to run specially crafted code that can allow them to bypass system protections such as Device Guard and Hyper-V.

Published

2017-08-10T00:29:00.230

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 6.8 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-94
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lenovo ideacentre_300-20ish_firmware - Yes
Hardware lenovo ideacentre_300-20ish - No
Operating System lenovo ideacentre_300s-11ish_firmware - Yes
Hardware lenovo ideacentre_300s-11ish - No
Operating System lenovo ideacentre_510s-08ish_firmware - Yes
Hardware lenovo ideacentre_510s-08ish - No
Operating System lenovo ideacentre_700_firmware - Yes
Hardware lenovo ideacentre_700 - No
Operating System lenovo 63_firmware fckt78a Yes
Hardware lenovo 63 - No
Operating System lenovo h50-30g_firmware fckt78a Yes
Hardware lenovo h50-30g - No
Operating System lenovo m4500_firmware fckt78a Yes
Hardware lenovo m4500 - No
Operating System lenovo m4500_id_firmware fckt78a Yes
Hardware lenovo m4500_id - No
Operating System lenovo m4550_id_firmware fckt78a Yes
Hardware lenovo m4550_id - No
Operating System lenovo s500_firmware m0kkt24a Yes
Hardware lenovo s500 - No
Operating System lenovo v320-15iap_firmware - Yes
Hardware lenovo v320-15iap - No
Operating System lenovo thinkcentre_e73_firmware fckt78a Yes
Hardware lenovo thinkcentre_e73 - No
Operating System lenovo thinkcentre_e73s_firmware fckt78a Yes
Hardware lenovo thinkcentre_e73s - No
Operating System lenovo thinkcentre_e74_firmware m05kt54a Yes
Hardware lenovo thinkcentre_e74 - No
Operating System lenovo thinkcentre_e74s_firmware m05kt54a Yes
Hardware lenovo thinkcentre_e74s - No
Operating System lenovo thinkcentre_e75_t\/s_firmware - Yes
Hardware lenovo thinkcentre_e75_t\/s - No
Operating System lenovo thinkcentre_e79_firmware m0lkt12a Yes
Hardware lenovo thinkcentre_e79 - No
Operating System lenovo thinkcentre_e93_firmware fbktc5a Yes
Hardware lenovo thinkcentre_e93 - No
Operating System lenovo thinkcentre_m4500k_firmware fckt78a Yes
Hardware lenovo thinkcentre_m4500k - No
Operating System lenovo thinkcentre_m4500q_firmware fhkt66a Yes
Hardware lenovo thinkcentre_m4500q - No
Operating System lenovo thinkcentre_m4500t\/s_firmware fckt78a Yes
Hardware lenovo thinkcentre_m4500t\/s - No
Operating System lenovo thinkcentre_m4600t\/s_firmware m05kt54a Yes
Hardware lenovo thinkcentre_m4600t\/s - No
Operating System lenovo thinkcentre_m600_firmware m00kt44a Yes
Hardware lenovo thinkcentre_m600 - No
Operating System lenovo thinkcentre_m610_firmware - Yes
Hardware lenovo thinkcentre_m610 - No
Operating System lenovo thinkcentre_m6500t\/s_firmware fbktc5a Yes
Hardware lenovo thinkcentre_m6500t\/s - No
Operating System lenovo thinkcentre_m6600_firmware fwkt39a Yes
Hardware lenovo thinkcentre_m6600 - No
Operating System lenovo thinkcentre_m6600q_firmware fwkt39a Yes
Hardware lenovo thinkcentre_m6600q - No
Operating System lenovo thinkcentre_m6600t\/s_firmware fwkt39a Yes
Hardware lenovo thinkcentre_m6600t\/s - No
Operating System lenovo thinkcentre_m700_firmware m05kt54a Yes
Hardware lenovo thinkcentre_m700 - No
Operating System lenovo thinkcentre_m710t\/s_firmware - Yes
Hardware lenovo thinkcentre_m710t\/s - No
Operating System lenovo thinkcentre_m715q_firmware - Yes
Hardware lenovo thinkcentre_m715q - No
Operating System lenovo thinkcentre_m72e_firmware f1kt71a Yes
Hardware lenovo thinkcentre_m72e - No
Operating System lenovo thinkcentre_m73_firmware fckt78a Yes
Hardware lenovo thinkcentre_m73 - No
Operating System lenovo thinkcentre_m73p_firmware fbktc5a Yes
Hardware lenovo thinkcentre_m73p - No
Operating System lenovo thinkcentre_m79_firmware m0lkt12a Yes
Hardware lenovo thinkcentre_m79 - No
Operating System lenovo thinkcentre_m800_firmware fwkt39a Yes
Hardware lenovo thinkcentre_m800 - No
Operating System lenovo thinkcentre_m83_firmware fbktcga Yes
Hardware lenovo thinkcentre_m83 - No
Operating System lenovo thinkcentre_m8500t\/s_firmware fbktc5a Yes
Hardware lenovo thinkcentre_m8500t\/s - No
Operating System lenovo thinkcentre_m8600t\/s_firmware fwkt39a Yes
Hardware lenovo thinkcentre_m8600t\/s - No
Operating System lenovo thinkcentre_m900_firmware fwkt39a Yes
Hardware lenovo thinkcentre_m900 - No
Operating System lenovo thinkcentre_m910t\/s_firmware - Yes
Hardware lenovo thinkcentre_m910t\/s - No
Operating System lenovo thinkcentre_m910q_firmware - Yes
Hardware lenovo thinkcentre_m910q - No
Operating System lenovo thinkcentre_m910x_firmware - Yes
Hardware lenovo thinkcentre_m910x - No
Operating System lenovo thinkcentre_m92_firmware 9skt95a Yes
Hardware lenovo thinkcentre_m92 - No
Operating System lenovo thinkcentre_m92p_firmware 9skt95a Yes
Hardware lenovo thinkcentre_m92p - No
Operating System lenovo thinkcentre_m93_firmware fbktc5a Yes
Hardware lenovo thinkcentre_m93 - No
Operating System lenovo thinkcentre_m93p_firmware fbktc5a Yes
Hardware lenovo thinkcentre_m93p - No
Operating System lenovo yangtian_afh110_firmware m05kt73a Yes
Hardware lenovo yangtian_afh110 - No
Operating System lenovo yangtian_afh81_firmware fckt80a Yes
Hardware lenovo yangtian_afh81 - No
Operating System lenovo yangtian_afq150_firmware fwkt57a Yes
Hardware lenovo yangtian_afq150 - No
Operating System lenovo yangtian_mc_carrizo-l_firmware - Yes
Hardware lenovo yangtian_mc_carrizo-l - No
Operating System lenovo yangtian_mc_godavari_firmware m0lkt13a Yes
Hardware lenovo yangtian_mc_godavari - No
Operating System lenovo yangtian_mc_h110_firmware m05kt61a Yes
Hardware lenovo yangtian_mc_h110 - No
Operating System lenovo yangtian_mc_h81_firmware fckt80a Yes
Hardware lenovo yangtian_mc_h81 - No
Operating System lenovo yangtian_me\/we_h110_firmware m05kt61a Yes
Hardware lenovo yangtian_mc_h110 - No
Operating System lenovo yangtian_mf\/wf_h81_firmware fckt80a Yes
Hardware lenovo yangtian_mf\/wf_h81 - No
Operating System lenovo ideacentre_510s-23isu_firmware o2ekt24a Yes
Hardware lenovo ideacentre_510s-23isu - No
Operating System lenovo s200z_firmware m09kt33a Yes
Hardware lenovo s200z - No
Operating System lenovo thinkcentre_e73z_\(aio\)_firmware fgkt49a Yes
Hardware lenovo thinkcentre_e73z_\(aio\) - No
Operating System lenovo thinkcentre_e74z_firmware fvkt48a Yes
Hardware lenovo thinkcentre_e74z - No
Operating System lenovo thinkcentre_e93z_\(aio\)_firmware ffkt43a Yes
Hardware lenovo thinkcentre_e93z_\(aio\) - No
Operating System lenovo thinkcentre_edge_62z_firmware f8kt40a Yes
Hardware lenovo thinkcentre_edge_62z - No
Operating System lenovo thinkcentre_m700z_firmware fvkt48a Yes
Hardware lenovo thinkcentre_m700z - No
Operating System lenovo thinkcentre_m7200z_firmware fgkt46a Yes
Hardware lenovo thinkcentre_m7200z - No
Operating System lenovo thinkcentre_m7250z_firmware fgkt46a Yes
Hardware lenovo thinkcentre_m7250z - No
Operating System lenovo thinkcentre_m7300z_firmware fvkt42a Yes
Hardware lenovo thinkcentre_m7300z - No
Operating System lenovo thinkcentre_m73z_\(aio\)_firmware fgkt46a Yes
Hardware lenovo thinkcentre_m73z_\(aio\) - No
Operating System lenovo thinkcentre_m800z_firmware fvkt42a Yes
Hardware lenovo thinkcentre_m800z - No
Operating System lenovo thinkcentre_m810z_firmware - Yes
Hardware lenovo thinkcentre_m810z - No
Operating System lenovo thinkcentre_m8200z_firmware fgkt46a Yes
Hardware lenovo thinkcentre_m8200z - No
Operating System lenovo thinkcentre_m8250z_firmware fgkt46a Yes
Hardware lenovo thinkcentre_m8250z - No
Operating System lenovo thinkcentre_m8300z_firmware fvkt42a Yes
Hardware lenovo thinkcentre_m8300z - No
Operating System lenovo thinkcentre_m8350z_firmware fvkt42a Yes
Hardware lenovo thinkcentre_m8350z - No
Operating System lenovo thinkcentre_m83z_\(aio\)_firmware fvkt42a Yes
Hardware lenovo thinkcentre_m83z_\(aio\) - No
Operating System lenovo thinkcentre_m900z_firmware fukt39a Yes
Hardware lenovo thinkcentre_m900z - No
Operating System lenovo thinkcentre_m9500z_firmware fukt44a Yes
Hardware lenovo thinkcentre_m9500z - No
Operating System lenovo thinkcentre_m9550z_firmware fukt44a Yes
Hardware lenovo thinkcentre_m9550z - No
Operating System lenovo thinkcentre_x1_aio_firmware m0hkt32a Yes
Hardware lenovo thinkcentre_x1_aio - No
Operating System lenovo yangtian_s3040_firmware fgkt49a Yes
Hardware lenovo yangtian_s3040 - No
Operating System lenovo yangtian_s800_firmware ffkt43a Yes
Hardware lenovo yangtian_s3040 - No
Operating System lenovo thinkserver_rd340_firmware - Yes
Hardware lenovo thinkserver_rd340 - No
Operating System lenovo thinkserver_rd440_firmware a0tsb5a Yes
Hardware lenovo thinkserver_rd440 - No
Operating System lenovo thinkserver_rd540_firmware a1tsb5a Yes
Hardware lenovo thinkserver_rd540 - No
Operating System lenovo thinkserver_rd640_firmware a1tsb5a Yes
Hardware lenovo thinkserver_rd540 - No
Operating System lenovo thinkserver_rq750_firmware 7.05 Yes
Hardware lenovo thinkserver_rq750 - No
Operating System lenovo thinkserver_rs140_firmware fbkt91c Yes
Hardware lenovo thinkserver_rs140 - No
Operating System lenovo thinkserver_td340_firmware a3tsb5a Yes
Hardware lenovo thinkserver_td340 - No
Operating System lenovo thinkserver_ts140_firmware fbktc3a Yes
Hardware lenovo thinkserver_ts140 - No
Operating System lenovo thinkserver_ts150_firmware fbktc3a Yes
Hardware lenovo thinkserver_ts150 - No
Operating System lenovo thinkserver_ts240_firmware fbktc3a Yes
Hardware lenovo thinkserver_ts240 - No
Operating System lenovo thinkserver_ts250_firmware - Yes
Hardware lenovo thinkserver_ts250 - No
Operating System lenovo thinkserver_ts450_firmware - Yes
Hardware lenovo thinkserver_ts450 - No
Operating System lenovo thinkserver_ts550_firmware - Yes
Hardware lenovo thinkserver_ts550 - No
Operating System lenovo thinkstation_c30_\(1136\)_firmware a1kt57a Yes
Hardware lenovo thinkstation_c30_\(1136\) - No
Operating System lenovo thinkstation_d30_\(4353\)_firmware a3kt57a Yes
Hardware lenovo thinkstation_d30_\(4353\) - No
Operating System lenovo thinkstation_e31_firmware 9skt97a Yes
Hardware lenovo thinkstation_e31 - No
Operating System lenovo thinkstation_e32_firmware fbktc6a Yes
Hardware lenovo thinkstation_e32 - No
Operating System lenovo thinkstation_p300_firmware fbktc6a Yes
Hardware lenovo thinkstation_p300 - No
Operating System lenovo thinkstation_p310_firmware fwkt57a Yes
Hardware lenovo thinkstation_p310 - No
Operating System lenovo thinkstation_p320_firmware - Yes
Hardware lenovo thinkstation_p320 - No
Operating System lenovo thinkstation_p410_firmware - Yes
Hardware lenovo thinkstation_p410 - No
Operating System lenovo thinkstation_p500_firmware a4kt86a Yes
Hardware lenovo thinkstation_p500 - No
Operating System lenovo thinkstation_p510_firmware - Yes
Hardware lenovo thinkstation_p510 - No
Operating System lenovo thinkstation_p700_firmware a5kt86a Yes
Hardware lenovo thinkstation_p700 - No
Operating System lenovo thinkstation_p710_firmware - Yes
Hardware lenovo thinkstation_p710 - No
Operating System lenovo thinkstation_p900_firmware a6kt86a Yes
Hardware lenovo thinkstation_p900 - No
Operating System lenovo thinkstation_p910_firmware - Yes
Hardware lenovo thinkstation_p910 - No
Operating System lenovo thinkstation_s30_\(4351\)_firmware a2kt54a Yes
Hardware lenovo thinkstation_s30_\(4351\) - No
Operating System lenovo thinkstation_c30_\(1137\)_firmware a1kt57a Yes
Hardware lenovo thinkstation_c30_\(1137\) - No
Operating System lenovo thinkstation_s30_\(4352\)_firmware a2kt54a Yes
Hardware lenovo thinkstation_s30_\(4352\) - No
Operating System lenovo thinkstation_d30_\(4354\)_firmware a3kt57a Yes
Hardware lenovo thinkstation_d30_\(4354\) - No
References