Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-3754

Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code.

Published

2017-07-17T19:29:00.323

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 6.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lenovo bios - Yes
Hardware lenovo 710s-13ikb\/xiaoxin_air_13ikb - No
Hardware lenovo 710s-13isk\/xiaoxin_air_13 - No
Hardware lenovo k21-80 - No
Hardware lenovo k22-80\/lenovo_v720-12 - No
Hardware lenovo k41-80 - No
Hardware lenovo lenovo_ideapad_110-14ast - No
Hardware lenovo lenovo_ideapad_110-15ast - No
Hardware lenovo lenovo_ideapad_320-14ast - No
Hardware lenovo lenovo_ideapad_320-15ast - No
Hardware lenovo lenovo_xiaoxin_rui7000 - No
Hardware lenovo miix_710-12ikb - No
Hardware lenovo miix_720-12ikb - No
Hardware lenovo notebook_320-17ast - No
Hardware lenovo rescuer_e520-15ikb - No
Hardware lenovo v110-14iap - No
Hardware lenovo v110-15iap - No
Hardware lenovo v110-15ikb - No
Hardware lenovo v110-15isk - No
Hardware lenovo yoga_710-11ikb - No
References