Description
A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with administrative privileges or physical access to a system may be able to run specially crafted code that can allow them to bypass system protections such as Device Guard and Hyper-V.
Published: 2017-08-10
Score: 6.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2017-12870 A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with administrative privileges or physical access to a system may be able to run specially crafted code that can allow them to bypass system protections such as Device Guard and Hyper-V.
History

No history.

Subscriptions

Lenovo 63 63 Firmware H50-30g H50-30g Firmware Ideacentre 300-20ish Ideacentre 300-20ish Firmware Ideacentre 300s-11ish Ideacentre 300s-11ish Firmware Ideacentre 510s-08ish Ideacentre 510s-08ish Firmware Ideacentre 510s-23isu Ideacentre 510s-23isu Firmware Ideacentre 700 Ideacentre 700 Firmware M4500 M4500 Firmware M4500 Id M4500 Id Firmware M4550 Id M4550 Id Firmware S200z S200z Firmware S500 S500 Firmware Thinkcentre E73 Thinkcentre E73 Firmware Thinkcentre E73s Thinkcentre E73s Firmware Thinkcentre E73z \(aio\) Thinkcentre E73z \(aio\) Firmware Thinkcentre E74 Thinkcentre E74 Firmware Thinkcentre E74s Thinkcentre E74s Firmware Thinkcentre E74z Thinkcentre E74z Firmware Thinkcentre E75 T\/s Thinkcentre E75 T\/s Firmware Thinkcentre E79 Thinkcentre E79 Firmware Thinkcentre E93 Thinkcentre E93 Firmware Thinkcentre E93z \(aio\) Thinkcentre E93z \(aio\) Firmware Thinkcentre Edge 62z Thinkcentre Edge 62z Firmware Thinkcentre M4500k Thinkcentre M4500k Firmware Thinkcentre M4500q Thinkcentre M4500q Firmware Thinkcentre M4500t\/s Thinkcentre M4500t\/s Firmware Thinkcentre M4600t\/s Thinkcentre M4600t\/s Firmware Thinkcentre M600 Thinkcentre M600 Firmware Thinkcentre M610 Thinkcentre M610 Firmware Thinkcentre M6500t\/s Thinkcentre M6500t\/s Firmware Thinkcentre M6600 Thinkcentre M6600 Firmware Thinkcentre M6600q Thinkcentre M6600q Firmware Thinkcentre M6600t\/s Thinkcentre M6600t\/s Firmware Thinkcentre M700 Thinkcentre M700 Firmware Thinkcentre M700z Thinkcentre M700z Firmware Thinkcentre M710t\/s Thinkcentre M710t\/s Firmware Thinkcentre M715q Thinkcentre M715q Firmware Thinkcentre M7200z Thinkcentre M7200z Firmware Thinkcentre M7250z Thinkcentre M7250z Firmware Thinkcentre M72e Thinkcentre M72e Firmware Thinkcentre M73 Thinkcentre M7300z Thinkcentre M7300z Firmware Thinkcentre M73 Firmware Thinkcentre M73p Thinkcentre M73p Firmware Thinkcentre M73z \(aio\) Thinkcentre M73z \(aio\) Firmware Thinkcentre M79 Thinkcentre M79 Firmware Thinkcentre M800 Thinkcentre M800 Firmware Thinkcentre M800z Thinkcentre M800z Firmware Thinkcentre M810z Thinkcentre M810z Firmware Thinkcentre M8200z Thinkcentre M8200z Firmware Thinkcentre M8250z Thinkcentre M8250z Firmware Thinkcentre M83 Thinkcentre M8300z Thinkcentre M8300z Firmware Thinkcentre M8350z Thinkcentre M8350z Firmware Thinkcentre M83 Firmware Thinkcentre M83z \(aio\) Thinkcentre M83z \(aio\) Firmware Thinkcentre M8500t\/s Thinkcentre M8500t\/s Firmware Thinkcentre M8600t\/s Thinkcentre M8600t\/s Firmware Thinkcentre M900 Thinkcentre M900 Firmware Thinkcentre M900z Thinkcentre M900z Firmware Thinkcentre M910q Thinkcentre M910q Firmware Thinkcentre M910t\/s Thinkcentre M910t\/s Firmware Thinkcentre M910x Thinkcentre M910x Firmware Thinkcentre M92 Thinkcentre M92 Firmware Thinkcentre M92p Thinkcentre M92p Firmware Thinkcentre M93 Thinkcentre M93 Firmware Thinkcentre M93p Thinkcentre M93p Firmware Thinkcentre M9500z Thinkcentre M9500z Firmware Thinkcentre M9550z Thinkcentre M9550z Firmware Thinkcentre X1 Aio Thinkcentre X1 Aio Firmware Thinkserver Rd340 Thinkserver Rd340 Firmware Thinkserver Rd440 Thinkserver Rd440 Firmware Thinkserver Rd540 Thinkserver Rd540 Firmware Thinkserver Rd640 Firmware Thinkserver Rq750 Thinkserver Rq750 Firmware Thinkserver Rs140 Thinkserver Rs140 Firmware Thinkserver Td340 Thinkserver Td340 Firmware Thinkserver Ts140 Thinkserver Ts140 Firmware Thinkserver Ts150 Thinkserver Ts150 Firmware Thinkserver Ts240 Thinkserver Ts240 Firmware Thinkserver Ts250 Thinkserver Ts250 Firmware Thinkserver Ts450 Thinkserver Ts450 Firmware Thinkserver Ts550 Thinkserver Ts550 Firmware Thinkstation C30 \(1136\) Thinkstation C30 \(1136\) Firmware Thinkstation C30 \(1137\) Thinkstation C30 \(1137\) Firmware Thinkstation D30 \(4353\) Thinkstation D30 \(4353\) Firmware Thinkstation D30 \(4354\) Thinkstation D30 \(4354\) Firmware Thinkstation E31 Thinkstation E31 Firmware Thinkstation E32 Thinkstation E32 Firmware Thinkstation P300 Thinkstation P300 Firmware Thinkstation P310 Thinkstation P310 Firmware Thinkstation P320 Thinkstation P320 Firmware Thinkstation P410 Thinkstation P410 Firmware Thinkstation P500 Thinkstation P500 Firmware Thinkstation P510 Thinkstation P510 Firmware Thinkstation P700 Thinkstation P700 Firmware Thinkstation P710 Thinkstation P710 Firmware Thinkstation P900 Thinkstation P900 Firmware Thinkstation P910 Thinkstation P910 Firmware Thinkstation S30 \(4351\) Thinkstation S30 \(4351\) Firmware Thinkstation S30 \(4352\) Thinkstation S30 \(4352\) Firmware V320-15iap V320-15iap Firmware Yangtian Afh110 Yangtian Afh110 Firmware Yangtian Afh81 Yangtian Afh81 Firmware Yangtian Afq150 Yangtian Afq150 Firmware Yangtian Mc Carrizo-l Yangtian Mc Carrizo-l Firmware Yangtian Mc Godavari Yangtian Mc Godavari Firmware Yangtian Mc H110 Yangtian Mc H110 Firmware Yangtian Mc H81 Yangtian Mc H81 Firmware Yangtian Me\/we H110 Firmware Yangtian Mf\/wf H81 Yangtian Mf\/wf H81 Firmware Yangtian S3040 Yangtian S3040 Firmware Yangtian S800 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2024-09-16T20:47:47.220Z

Reserved: 2016-12-16T00:00:00.000Z

Link: CVE-2017-3753

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2017-08-10T00:29:00.230

Modified: 2025-04-20T01:37:25.860

Link: CVE-2017-3753

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses