CVE-2017-3754
First published: Mon Jul 17 2017(Updated: )
Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code.
Credit: psirt@lenovo.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Lenovo Bios | ||
| Lenovo 710s-13ikb\/xiaoxin Air 13ikb | ||
| Lenovo 710s-13isk\/xiaoxin Air 13 | ||
| Lenovo K21-80 | ||
| Lenovo K22-80\/lenovo V720-12 | ||
| Lenovo K41-80 | ||
| Lenovo Lenovo Ideapad 110-14ast | ||
| Lenovo Lenovo Ideapad 110-15ast | ||
| Lenovo Lenovo Ideapad 320-14ast | ||
| Lenovo Lenovo Ideapad 320-15ast | ||
| Lenovo Lenovo Xiaoxin Rui7000 | ||
| Lenovo Miix 710-12ikb | ||
| Lenovo Miix 720-12ikb | ||
| Lenovo Notebook 320-17ast | ||
| Lenovo Rescuer E520-15ikb | ||
| Lenovo V110-14iap | ||
| Lenovo V110-15iap | ||
| Lenovo V110-15ikb | ||
| Lenovo V110-15isk | ||
| Lenovo Yoga 710-11ikb |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- vendor/lenovo
- canonical/lenovo bios
- canonical/lenovo 710s-13ikb\/xiaoxin air 13ikb
- canonical/lenovo 710s-13isk\/xiaoxin air 13
- canonical/lenovo k21-80
- canonical/lenovo k22-80\/lenovo v720-12
- canonical/lenovo k41-80
- canonical/lenovo lenovo ideapad 110-14ast
- canonical/lenovo lenovo ideapad 110-15ast
- canonical/lenovo lenovo ideapad 320-14ast
- canonical/lenovo lenovo ideapad 320-15ast
- canonical/lenovo lenovo xiaoxin rui7000
- canonical/lenovo miix 710-12ikb
- canonical/lenovo miix 720-12ikb
- canonical/lenovo notebook 320-17ast
- canonical/lenovo rescuer e520-15ikb
- canonical/lenovo v110-14iap
- canonical/lenovo v110-15iap
- canonical/lenovo v110-15ikb
- canonical/lenovo v110-15isk
- canonical/lenovo yoga 710-11ikb