CVEvulnerability

CVE-2017-3753

6.8 MEDIUM Published 2017-08-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.8 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with administrative privileges or physical access to a system may be able to run specially crafted code that can allow them to bypass system protections such as Device Guard and Hyper-V.

Affected configurations

• lenovo ideacentre 300-20ish firmware • lenovo ideacentre 300s-11ish firmware • lenovo ideacentre 510s-08ish firmware • lenovo ideacentre 700 firmware • lenovo 63 firmware fckt78a • lenovo h50-30g firmware fckt78a • lenovo m4500 firmware fckt78a • lenovo m4500 id firmware fckt78a • lenovo m4550 id firmware fckt78a • lenovo s500 firmware m0kkt24a • lenovo v320-15iap firmware • lenovo thinkcentre e73 firmware fckt78a • lenovo thinkcentre e73s firmware fckt78a • lenovo thinkcentre e74 firmware m05kt54a • lenovo thinkcentre e74s firmware m05kt54a • lenovo thinkcentre e75 t\/s firmware • lenovo thinkcentre e79 firmware m0lkt12a • lenovo thinkcentre e93 firmware fbktc5a • lenovo thinkcentre m4500k firmware fckt78a • lenovo thinkcentre m4500q firmware fhkt66a • lenovo thinkcentre m4500t\/s firmware fckt78a • lenovo thinkcentre m4600t\/s firmware m05kt54a • lenovo thinkcentre m600 firmware m00kt44a • lenovo thinkcentre m610 firmware • lenovo thinkcentre m6500t\/s firmware fbktc5a • lenovo thinkcentre m6600 firmware fwkt39a • lenovo thinkcentre m6600q firmware fwkt39a • lenovo thinkcentre m6600t\/s firmware fwkt39a • lenovo thinkcentre m700 firmware m05kt54a • lenovo thinkcentre m710t\/s firmware • lenovo thinkcentre m715q firmware • lenovo thinkcentre m72e firmware f1kt71a • lenovo thinkcentre m73 firmware fckt78a • lenovo thinkcentre m73p firmware fbktc5a • lenovo thinkcentre m79 firmware m0lkt12a • lenovo thinkcentre m800 firmware fwkt39a • lenovo thinkcentre m83 firmware fbktcga • lenovo thinkcentre m8500t\/s firmware fbktc5a • lenovo thinkcentre m8600t\/s firmware fwkt39a • lenovo thinkcentre m900 firmware fwkt39a • lenovo thinkcentre m910t\/s firmware • lenovo thinkcentre m910q firmware • lenovo thinkcentre m910x firmware • lenovo thinkcentre m92 firmware 9skt95a • lenovo thinkcentre m92p firmware 9skt95a • lenovo thinkcentre m93 firmware fbktc5a • lenovo thinkcentre m93p firmware fbktc5a • lenovo yangtian afh110 firmware m05kt73a • lenovo yangtian afh81 firmware fckt80a • lenovo yangtian afq150 firmware fwkt57a • lenovo yangtian mc carrizo-l firmware • lenovo yangtian mc godavari firmware m0lkt13a • lenovo yangtian mc h110 firmware m05kt61a • lenovo yangtian mc h81 firmware fckt80a • lenovo yangtian me\/we h110 firmware m05kt61a • lenovo yangtian mf\/wf h81 firmware fckt80a • lenovo ideacentre 510s-23isu firmware o2ekt24a • lenovo s200z firmware m09kt33a • lenovo thinkcentre e73z \(aio\) firmware fgkt49a • lenovo thinkcentre e74z firmware fvkt48a … and 51 more

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References