CVE-2017-3775
04.05.2018, 17:29
Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with physical access to the system could boot unsigned code.Enginsight
| Vendor | Product | Version |
|---|---|---|
| lenovo | flex_system_x240_m5_bios | 𝑥 < 2.61 |
| lenovo | flex_system_x280_x6_bios | 𝑥 < 4.21 |
| lenovo | flex_system_x480_x6_bios | 𝑥 < 4.21 |
| lenovo | flex_system_x880_bios | 𝑥 < 4.21 |
| lenovo | nextscale_nx360_m5_bios | 𝑥 < 2.61 |
| lenovo | system_x3250_m6_bios | 𝑥 < 2.23 |
| lenovo | system_x3500_m5_bios | 𝑥 < 2.61 |
| lenovo | system_x3550_m5_bios | 𝑥 < 2.61 |
| lenovo | system_x3650_m5_bios | 𝑥 < 2.61 |
| lenovo | system_x3850_x6_bios | 𝑥 < 4.3 |
| lenovo | system_x3950_x6_bios | 𝑥 < 4.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration