Medium severity6.4NVD Advisory· Published May 4, 2018· Updated Jun 17, 2026

CVE-2017-3775

Description

Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with physical access to the system could boot unsigned code.

Affected products

Lenovo/Flex System X240 M5 BIOS
cpe:2.3:o:lenovo:flex_system_x240_m5_bios:*:*:*:*:*:*:*:*
Range: <2.61
Lenovo/Flex System X280 X6 BIOS
cpe:2.3:o:lenovo:flex_system_x280_x6_bios:*:*:*:*:*:*:*:*
Range: <4.21
Lenovo/Flex System X480 X6 BIOS
cpe:2.3:o:lenovo:flex_system_x480_x6_bios:*:*:*:*:*:*:*:*
Range: <4.21
Lenovo/Flex System X880 BIOS
cpe:2.3:o:lenovo:flex_system_x880_bios:*:*:*:*:*:*:*:*
Range: <4.21
Lenovo/Nextscale Nx360 M5 BIOS
cpe:2.3:o:lenovo:nextscale_nx360_m5_bios:*:*:*:*:*:*:*:*
Range: <2.61
Lenovo/System X3250 M6 BIOS
cpe:2.3:o:lenovo:system_x3250_m6_bios:*:*:*:*:*:*:*:*
Range: <2.23
Lenovo/System X3500 M5 BIOS
cpe:2.3:o:lenovo:system_x3500_m5_bios:*:*:*:*:*:*:*:*
Range: <2.61
Lenovo/System X3550 M5 BIOS
cpe:2.3:o:lenovo:system_x3550_m5_bios:*:*:*:*:*:*:*:*
Range: <2.61
Lenovo/System X3650 M5 BIOS
cpe:2.3:o:lenovo:system_x3650_m5_bios:*:*:*:*:*:*:*:*
Range: <2.61
Lenovo/System X3950 X6 BIOS2 versions
cpe:2.3:o:lenovo:system_x3850_x6_bios:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:lenovo:system_x3850_x6_bios:*:*:*:*:*:*:*:*range: <4.3
- cpe:2.3:o:lenovo:system_x3950_x6_bios:*:*:*:*:*:*:*:*range: <4.3
Lenovo Group Ltd./Some Lenovo Flex System and Lenovo System x productsv5
Range: Affected BIOS version varies by product

cvss	0.416
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2017-3775

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions