PT-2018-7267 · Lenovo · Lenovo System X Server Bios/Uefi

Publicado 2018-05-04 · Atualizado 2018-06-13 · CVE-2017-3775

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Lenovo System x server BIOS/UEFI (affected versions not specified)

Description: The issue concerns the improper authentication of signed code before booting when Secure Boot mode is enabled. This could allow an attacker with physical access to the system to boot unsigned code.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-3775

Produtos afetados

Lenovo System X Server Bios/Uefi

Referências · 3

• https://support.lenovo.com/us/en/solutions/LEN-20241 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-3775 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-3775 · Nota de Segurança