Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2017-3775 Details
Description
Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with physical access to the system could boot unsigned code.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://support.lenovo.com/us/en/solutions/LEN-20241 | CVE | PatchVendor Advisory |
| https://support.lenovo.com/us/en/solutions/LEN-20241 | [email protected] | PatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-287 | Improper Authentication | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| lenovo flex system x240 m5 bios | < 2.61 |
CPE
Remediation
| |
| lenovo flex system x240 m5 | All versions |
CPE
Remediation
| |
| lenovo flex system x280 x6 bios | < 4.21 |
CPE
Remediation
| |
| lenovo flex system x280 x6 | All versions |
CPE
Remediation
| |
| lenovo flex system x480 x6 bios | < 4.21 |
CPE
Remediation
| |
| lenovo flex system x480 x6 | All versions |
CPE
Remediation
| |
| lenovo flex system x880 bios | < 4.21 |
CPE
Remediation
| |
| lenovo flex system x880 | All versions |
CPE
Remediation
| |
| lenovo nextscale nx360 m5 bios | < 2.61 |
CPE
Remediation
| |
| lenovo nextscale nx360 m5 | All versions |
CPE
Remediation
| |
| lenovo system x3250 m6 bios | < 2.23 |
CPE
Remediation
| |
| lenovo system x3250 m6 | All versions |
CPE
Remediation
| |
| lenovo system x3500 m5 bios | < 2.61 |
CPE
Remediation
| |
| lenovo system x3500 m5 | All versions |
CPE
Remediation
| |
| lenovo system x3550 m5 bios | < 2.61 |
CPE
Remediation
| |
| lenovo system x3550 m5 | All versions |
CPE
Remediation
| |
| lenovo system x3650 m5 bios | < 2.61 |
CPE
Remediation
| |
| lenovo system x3650 m5 | All versions |
CPE
Remediation
| |
| lenovo system x3850 x6 bios | < 4.3 |
CPE
Remediation
| |
| lenovo system x3850 x6 | All versions |
CPE
Remediation
| |
| lenovo system x3950 x6 bios | < 4.3 |
CPE
Remediation
| |
| lenovo system x3950 x6 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jun 13, 2018 | Initial Analysis | [email protected] |