CVE-2017-3753

EPSS 0.52%
Veröffentlicht 10.08.2017 00:29:00
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with administrative privileges or physical access to a system may be able to run specially crafted code that can allow them to bypass system protections such as Device Guard and Hyper-V.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 90 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Lenovo ≫ Ideacentre 300-20ish Firmware Version -

Lenovo ≫ Ideacentre 300-20ish Version -

Lenovo ≫ Ideacentre 300s-11ish Firmware Version -

Lenovo ≫ Ideacentre 300s-11ish Version -

Lenovo ≫ Ideacentre 510s-08ish Firmware Version -

Lenovo ≫ Ideacentre 510s-08ish Version -

Lenovo ≫ Ideacentre 700 Firmware Version -

Lenovo ≫ Ideacentre 700 Version -

Lenovo ≫ 63 Firmware Version fckt78a

Lenovo ≫ 63 Version -

Lenovo ≫ H50-30g Firmware Version fckt78a

Lenovo ≫ H50-30g Version -

Lenovo ≫ M4500 Firmware Version fckt78a

Lenovo ≫ M4500 Version -

Lenovo ≫ M4500 Id Firmware Version fckt78a

Lenovo ≫ M4500 Id Version -

Lenovo ≫ M4550 Id Firmware Version fckt78a

Lenovo ≫ M4550 Id Version -

Lenovo ≫ S500 Firmware Version m0kkt24a

Lenovo ≫ S500 Version -

Lenovo ≫ V320-15iap Firmware Version -

Lenovo ≫ V320-15iap Version -

Lenovo ≫ Thinkcentre E73 Firmware Version fckt78a

Lenovo ≫ Thinkcentre E73 Version -

Lenovo ≫ Thinkcentre E73s Firmware Version fckt78a

Lenovo ≫ Thinkcentre E73s Version -

Lenovo ≫ Thinkcentre E74 Firmware Version m05kt54a

Lenovo ≫ Thinkcentre E74 Version -

Lenovo ≫ Thinkcentre E74s Firmware Version m05kt54a

Lenovo ≫ Thinkcentre E74s Version -

Lenovo ≫ Thinkcentre E79 Firmware Version m0lkt12a

Lenovo ≫ Thinkcentre E79 Version -

Lenovo ≫ Thinkcentre E93 Firmware Version fbktc5a

Lenovo ≫ Thinkcentre E93 Version -

Lenovo ≫ Thinkcentre M4500k Firmware Version fckt78a

Lenovo ≫ Thinkcentre M4500k Version -

Lenovo ≫ Thinkcentre M4500q Firmware Version fhkt66a

Lenovo ≫ Thinkcentre M4500q Version -

Lenovo ≫ Thinkcentre M600 Firmware Version m00kt44a

Lenovo ≫ Thinkcentre M600 Version -

Lenovo ≫ Thinkcentre M610 Firmware Version -

Lenovo ≫ Thinkcentre M610 Version -

Lenovo ≫ Thinkcentre M6600 Firmware Version fwkt39a

Lenovo ≫ Thinkcentre M6600 Version -

Lenovo ≫ Thinkcentre M6600q Firmware Version fwkt39a

Lenovo ≫ Thinkcentre M6600q Version -

Lenovo ≫ Thinkcentre M700 Firmware Version m05kt54a

Lenovo ≫ Thinkcentre M700 Version -

Lenovo ≫ Thinkcentre M715q Firmware Version -

Lenovo ≫ Thinkcentre M715q Version -

Lenovo ≫ Thinkcentre M72e Firmware Version f1kt71a

Lenovo ≫ Thinkcentre M72e Version -

Lenovo ≫ Thinkcentre M73 Firmware Version fckt78a

Lenovo ≫ Thinkcentre M73 Version -

Lenovo ≫ Thinkcentre M73p Firmware Version fbktc5a

Lenovo ≫ Thinkcentre M73p Version -

Lenovo ≫ Thinkcentre M79 Firmware Version m0lkt12a

Lenovo ≫ Thinkcentre M79 Version -

Lenovo ≫ Thinkcentre M800 Firmware Version fwkt39a

Lenovo ≫ Thinkcentre M800 Version -

Lenovo ≫ Thinkcentre M83 Firmware Version fbktcga

Lenovo ≫ Thinkcentre M83 Version -

Lenovo ≫ Thinkcentre M900 Firmware Version fwkt39a

Lenovo ≫ Thinkcentre M900 Version -

Lenovo ≫ Thinkcentre M910q Firmware Version -

Lenovo ≫ Thinkcentre M910q Version -

Lenovo ≫ Thinkcentre M910x Firmware Version -

Lenovo ≫ Thinkcentre M910x Version -

Lenovo ≫ Thinkcentre M92 Firmware Version 9skt95a

Lenovo ≫ Thinkcentre M92 Version -

Lenovo ≫ Thinkcentre M92p Firmware Version 9skt95a

Lenovo ≫ Thinkcentre M92p Version -

Lenovo ≫ Thinkcentre M93 Firmware Version fbktc5a

Lenovo ≫ Thinkcentre M93 Version -

Lenovo ≫ Thinkcentre M93p Firmware Version fbktc5a

Lenovo ≫ Thinkcentre M93p Version -

Lenovo ≫ Yangtian Afh110 Firmware Version m05kt73a

Lenovo ≫ Yangtian Afh110 Version -

Lenovo ≫ Yangtian Afh81 Firmware Version fckt80a

Lenovo ≫ Yangtian Afh81 Version -

Lenovo ≫ Yangtian Afq150 Firmware Version fwkt57a

Lenovo ≫ Yangtian Afq150 Version -

Lenovo ≫ Yangtian Mc Carrizo-l Firmware Version -

Lenovo ≫ Yangtian Mc Carrizo-l Version -

Lenovo ≫ Yangtian Mc Godavari Firmware Version m0lkt13a

Lenovo ≫ Yangtian Mc Godavari Version -

Lenovo ≫ Yangtian Mc H110 Firmware Version m05kt61a

Lenovo ≫ Yangtian Mc H110 Version -

Lenovo ≫ Yangtian Mc H81 Firmware Version fckt80a

Lenovo ≫ Yangtian Mc H81 Version -

Lenovo ≫ Ideacentre 510s-23isu Firmware Version o2ekt24a

Lenovo ≫ Ideacentre 510s-23isu Version -

Lenovo ≫ S200z Firmware Version m09kt33a

Lenovo ≫ S200z Version -

Lenovo ≫ Thinkcentre E74z Firmware Version fvkt48a

Lenovo ≫ Thinkcentre E74z Version -

Lenovo ≫ Thinkcentre Edge 62z Firmware Version f8kt40a

Lenovo ≫ Thinkcentre Edge 62z Version -

Lenovo ≫ Thinkcentre M700z Firmware Version fvkt48a

Lenovo ≫ Thinkcentre M700z Version -

Lenovo ≫ Thinkcentre M7200z Firmware Version fgkt46a

Lenovo ≫ Thinkcentre M7200z Version -

Lenovo ≫ Thinkcentre M7250z Firmware Version fgkt46a

Lenovo ≫ Thinkcentre M7250z Version -

Lenovo ≫ Thinkcentre M7300z Firmware Version fvkt42a

Lenovo ≫ Thinkcentre M7300z Version -

Lenovo ≫ Thinkcentre M800z Firmware Version fvkt42a

Lenovo ≫ Thinkcentre M800z Version -

Lenovo ≫ Thinkcentre M810z Firmware Version -

Lenovo ≫ Thinkcentre M810z Version -

Lenovo ≫ Thinkcentre M8200z Firmware Version fgkt46a

Lenovo ≫ Thinkcentre M8200z Version -

Lenovo ≫ Thinkcentre M8250z Firmware Version fgkt46a

Lenovo ≫ Thinkcentre M8250z Version -

Lenovo ≫ Thinkcentre M8300z Firmware Version fvkt42a

Lenovo ≫ Thinkcentre M8300z Version -

Lenovo ≫ Thinkcentre M8350z Firmware Version fvkt42a

Lenovo ≫ Thinkcentre M8350z Version -

Lenovo ≫ Thinkcentre M900z Firmware Version fukt39a

Lenovo ≫ Thinkcentre M900z Version -

Lenovo ≫ Thinkcentre M9500z Firmware Version fukt44a

Lenovo ≫ Thinkcentre M9500z Version -

Lenovo ≫ Thinkcentre M9550z Firmware Version fukt44a

Lenovo ≫ Thinkcentre M9550z Version -

Lenovo ≫ Thinkcentre X1 Aio Firmware Version m0hkt32a

Lenovo ≫ Thinkcentre X1 Aio Version -

Lenovo ≫ Yangtian S3040 Firmware Version fgkt49a

Lenovo ≫ Yangtian S3040 Version -

Lenovo ≫ Yangtian S800 Firmware Version ffkt43a

Lenovo ≫ Yangtian S3040 Version -

Lenovo ≫ Thinkserver Rd340 Firmware Version -

Lenovo ≫ Thinkserver Rd340 Version -

Lenovo ≫ Thinkserver Rd440 Firmware Version a0tsb5a

Lenovo ≫ Thinkserver Rd440 Version -

Lenovo ≫ Thinkserver Rd540 Firmware Version a1tsb5a

Lenovo ≫ Thinkserver Rd540 Version -

Lenovo ≫ Thinkserver Rd640 Firmware Version a1tsb5a

Lenovo ≫ Thinkserver Rd540 Version -

Lenovo ≫ Thinkserver Rq750 Firmware Version 7.05

Lenovo ≫ Thinkserver Rq750 Version -

Lenovo ≫ Thinkserver Rs140 Firmware Version fbkt91c

Lenovo ≫ Thinkserver Rs140 Version -

Lenovo ≫ Thinkserver Td340 Firmware Version a3tsb5a

Lenovo ≫ Thinkserver Td340 Version -

Lenovo ≫ Thinkserver Ts140 Firmware Version fbktc3a

Lenovo ≫ Thinkserver Ts140 Version -

Lenovo ≫ Thinkserver Ts150 Firmware Version fbktc3a

Lenovo ≫ Thinkserver Ts150 Version -

Lenovo ≫ Thinkserver Ts240 Firmware Version fbktc3a

Lenovo ≫ Thinkserver Ts240 Version -

Lenovo ≫ Thinkserver Ts250 Firmware Version -

Lenovo ≫ Thinkserver Ts250 Version -

Lenovo ≫ Thinkserver Ts450 Firmware Version -

Lenovo ≫ Thinkserver Ts450 Version -

Lenovo ≫ Thinkserver Ts550 Firmware Version -

Lenovo ≫ Thinkserver Ts550 Version -

Lenovo ≫ Thinkstation E31 Firmware Version 9skt97a

Lenovo ≫ Thinkstation E31 Version -

Lenovo ≫ Thinkstation E32 Firmware Version fbktc6a

Lenovo ≫ Thinkstation E32 Version -

Lenovo ≫ Thinkstation P300 Firmware Version fbktc6a

Lenovo ≫ Thinkstation P300 Version -

Lenovo ≫ Thinkstation P310 Firmware Version fwkt57a

Lenovo ≫ Thinkstation P310 Version -

Lenovo ≫ Thinkstation P320 Firmware Version -

Lenovo ≫ Thinkstation P320 Version -

Lenovo ≫ Thinkstation P410 Firmware Version -

Lenovo ≫ Thinkstation P410 Version -

Lenovo ≫ Thinkstation P500 Firmware Version a4kt86a

Lenovo ≫ Thinkstation P500 Version -

Lenovo ≫ Thinkstation P510 Firmware Version -

Lenovo ≫ Thinkstation P510 Version -

Lenovo ≫ Thinkstation P700 Firmware Version a5kt86a

Lenovo ≫ Thinkstation P700 Version -

Lenovo ≫ Thinkstation P710 Firmware Version -

Lenovo ≫ Thinkstation P710 Version -

Lenovo ≫ Thinkstation P900 Firmware Version a6kt86a

Lenovo ≫ Thinkstation P900 Version -

Lenovo ≫ Thinkstation P910 Firmware Version -

Lenovo ≫ Thinkstation P910 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.52%	0.398

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.8	0.9	5.9	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

https://support.lenovo.com/us/en/product_security/LEN-14695

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2017-3753

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-3753

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-3753

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2017-3753