7.2

CVE-2017-3754

EPSS 0.34%
Veröffentlicht 17.07.2017 19:29:00
Zuletzt bearbeitet 13.05.2026 00:24:29
Erkennungen
Login

Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Lenovo ≫ Bios Version -

   Lenovo ≫ K21-80 Version -
   Lenovo ≫ K41-80 Version -
   Lenovo ≫ Lenovo Ideapad 110-14ast Version -
   Lenovo ≫ Lenovo Ideapad 110-15ast Version -
   Lenovo ≫ Lenovo Ideapad 320-14ast Version -
   Lenovo ≫ Lenovo Ideapad 320-15ast Version -
   Lenovo ≫ Lenovo Xiaoxin Rui7000 Version -
   Lenovo ≫ Miix 710-12ikb Version -
   Lenovo ≫ Miix 720-12ikb Version -
   Lenovo ≫ Notebook 320-17ast Version -
   Lenovo ≫ Rescuer E520-15ikb Version -
   Lenovo ≫ V110-14iap Version -
   Lenovo ≫ V110-15iap Version -
   Lenovo ≫ V110-15ikb Version -
   Lenovo ≫ V110-15isk Version -
   Lenovo ≫ Yoga 710-11ikb Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.34%	0.253

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.7	0.8	5.9	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://support.lenovo.com/us/en/product_security/LEN-15084

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2017-3754

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-3754

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-3754

EUVD