BIOS Configuration Flaw in Lenovo Notebook Systems Exposes Users to BIOS Code Manipulation
CVE-2017-3754

6.7MEDIUM

Key Information:

Vendor

Lenovo
Status
Lenovo Notebook BiOS
Vendor
CVE Published:
17 July 2017

What is CVE-2017-3754?

Certain Lenovo notebook systems are vulnerable due to improper BIOS write protection settings, allowing a potential attacker with physical or administrative access to overwrite the BIOS with unauthorized images. This can lead to the execution of malicious code within the BIOS environment, undermining the integrity of the system and posing significant risks to user data and system security.

Affected Version(s)

Lenovo Notebook BIOS Various

References

https://support.lenovo.com/us/en/product_security/LEN-15084
x_refsource_CONFIRM

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.