CVE-2017-3754: High severity Lenovo BIOS vulnerability
Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3754?
CVE-2017-3754 is considered a high severity vulnerability due to the potential for unauthorized BIOS flashing.
How do I fix CVE-2017-3754?
To fix CVE-2017-3754, ensure that BIOS write protection settings are properly configured in the system BIOS.
Who is affected by CVE-2017-3754?
CVE-2017-3754 affects certain Lenovo brand notebook systems that lack proper BIOS write protections.
Can CVE-2017-3754 be exploited remotely?
No, CVE-2017-3754 requires physical or administrative access to the vulnerable system to be exploited.
What are the risks associated with CVE-2017-3754?
The risks associated with CVE-2017-3754 include the possibility of an attacker running malicious code directly from a compromised BIOS.