CVE-2017-3775

6.4MEDIUM

Key Information:

Vendor
Lenovo
Status
Some Lenovo Flex System And Lenovo System X Products
Vendor
CVE Published:
4 May 2018

Summary

Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with physical access to the system could boot unsigned code.

Affected Version(s)

Some Lenovo Flex System and Lenovo System x products Affected BIOS version varies by product

References

https://support.lenovo.com/us/en/solutions/LEN-20241
x_refsource_CONFIRM

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.