First published: Fri May 04 2018(Updated: )
Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with physical access to the system could boot unsigned code.
Credit: psirt@lenovo.com
Affected Software | Affected Version | How to fix |
---|---|---|
Lenovo Flex System X240 M5 Bios | <2.61 | |
Lenovo Flex System X240 M5 | ||
Lenovo Flex System X280 X6 Bios | <4.21 | |
Lenovo Flex System X280 X6 | ||
Lenovo Flex System X480 X6 Bios | <4.21 | |
Lenovo Flex System X480 X6 | ||
Lenovo Flex System X880 Bios | <4.21 | |
Lenovo Flex System X880 | ||
Lenovo Nextscale Nx360 M5 Bios | <2.61 | |
Lenovo Nextscale Nx360 M5 | ||
Lenovo System X3250 M6 Bios | <2.23 | |
Lenovo System X3250 M6 | ||
Lenovo System X3500 M5 Bios | <2.61 | |
Lenovo System X3500 M5 | ||
Lenovo System X3550 M5 Bios | <2.61 | |
Lenovo System X3550 M5 | ||
Lenovo System X3650 M5 Bios | <2.61 | |
Lenovo System X3650 M5 | ||
Lenovo System X3850 X6 Bios | <4.3 | |
Lenovo System X3850 X6 | ||
Lenovo System X3950 X6 Bios | <4.3 | |
Lenovo System X3950 X6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.