CVE-2017-3753
Medium
Description
A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with administrative privileges or physical access to a system may be able to run specially crafted code that can allow them to bypass system protections such as Device Guard and Hyper-V.
SeverityMedium
CVSS6.8
Exploit probability—
ProductLenovo Ideacentre 300-20ish Firmware
PublishedAug 10, 2017
First seenAug 10, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo ideacentre_300-20ish_firmware | No range specified | — |
| lenovo ideacentre_300s-11ish_firmware | No range specified | — |
| lenovo ideacentre_510s-08ish_firmware | No range specified | — |
| lenovo ideacentre_700_firmware | No range specified | — |
| lenovo 63_firmware | fckt78a | — |
| lenovo h50-30g_firmware | fckt78a | — |
| lenovo m4500_firmware | fckt78a | — |
| lenovo m4500_id_firmware | fckt78a | — |
| lenovo m4550_id_firmware | fckt78a | — |
| lenovo s500_firmware | m0kkt24a | — |
| lenovo v320-15iap_firmware | No range specified | — |
| lenovo thinkcentre_e73_firmware | fckt78a | — |
| lenovo thinkcentre_e73s_firmware | fckt78a | — |
| lenovo thinkcentre_e74_firmware | m05kt54a | — |
| lenovo thinkcentre_e74s_firmware | m05kt54a | — |
| lenovo thinkcentre_e75_t\/s_firmware | No range specified | — |
| lenovo thinkcentre_e79_firmware | m0lkt12a | — |
| lenovo thinkcentre_e93_firmware | fbktc5a | — |
| lenovo thinkcentre_m4500k_firmware | fckt78a | — |
| lenovo thinkcentre_m4500q_firmware | fhkt66a | — |
| lenovo thinkcentre_m4500t\/s_firmware | fckt78a | — |
| lenovo thinkcentre_m4600t\/s_firmware | m05kt54a | — |
| lenovo thinkcentre_m600_firmware | m00kt44a | — |
| lenovo thinkcentre_m610_firmware | No range specified | — |
| lenovo thinkcentre_m6500t\/s_firmware | fbktc5a | — |
| lenovo thinkcentre_m6600_firmware | fwkt39a | — |
| lenovo thinkcentre_m6600q_firmware | fwkt39a | — |
| lenovo thinkcentre_m6600t\/s_firmware | fwkt39a | — |
| lenovo thinkcentre_m700_firmware | m05kt54a | — |
| lenovo thinkcentre_m710t\/s_firmware | No range specified | — |
| lenovo thinkcentre_m715q_firmware | No range specified | — |
| lenovo thinkcentre_m72e_firmware | f1kt71a | — |
| lenovo thinkcentre_m73_firmware | fckt78a | — |
| lenovo thinkcentre_m73p_firmware | fbktc5a | — |
| lenovo thinkcentre_m79_firmware | m0lkt12a | — |
| lenovo thinkcentre_m800_firmware | fwkt39a | — |
| lenovo thinkcentre_m83_firmware | fbktcga | — |
| lenovo thinkcentre_m8500t\/s_firmware | fbktc5a | — |
| lenovo thinkcentre_m8600t\/s_firmware | fwkt39a | — |
| lenovo thinkcentre_m900_firmware | fwkt39a | — |
| lenovo thinkcentre_m910t\/s_firmware | No range specified | — |
| lenovo thinkcentre_m910q_firmware | No range specified | — |
| lenovo thinkcentre_m910x_firmware | No range specified | — |
| lenovo thinkcentre_m92_firmware | 9skt95a | — |
| lenovo thinkcentre_m92p_firmware | 9skt95a | — |
| lenovo thinkcentre_m93_firmware | fbktc5a | — |
| lenovo thinkcentre_m93p_firmware | fbktc5a | — |
| lenovo yangtian_afh110_firmware | m05kt73a | — |
| lenovo yangtian_afh81_firmware | fckt80a | — |
| lenovo yangtian_afq150_firmware | fwkt57a | — |
| lenovo yangtian_mc_carrizo-l_firmware | No range specified | — |
| lenovo yangtian_mc_godavari_firmware | m0lkt13a | — |
| lenovo yangtian_mc_h110_firmware | m05kt61a | — |
| lenovo yangtian_mc_h81_firmware | fckt80a | — |
| lenovo yangtian_me\/we_h110_firmware | m05kt61a | — |
| lenovo yangtian_mf\/wf_h81_firmware | fckt80a | — |
| lenovo ideacentre_510s-23isu_firmware | o2ekt24a | — |
| lenovo s200z_firmware | m09kt33a | — |
| lenovo thinkcentre_e73z_\(aio\)_firmware | fgkt49a | — |
| lenovo thinkcentre_e74z_firmware | fvkt48a | — |
| lenovo thinkcentre_e93z_\(aio\)_firmware | ffkt43a | — |
| lenovo thinkcentre_edge_62z_firmware | f8kt40a | — |
| lenovo thinkcentre_m700z_firmware | fvkt48a | — |
| lenovo thinkcentre_m7200z_firmware | fgkt46a | — |
| lenovo thinkcentre_m7250z_firmware | fgkt46a | — |
| lenovo thinkcentre_m7300z_firmware | fvkt42a | — |
| lenovo thinkcentre_m73z_\(aio\)_firmware | fgkt46a | — |
| lenovo thinkcentre_m800z_firmware | fvkt42a | — |
| lenovo thinkcentre_m810z_firmware | No range specified | — |
| lenovo thinkcentre_m8200z_firmware | fgkt46a | — |
| lenovo thinkcentre_m8250z_firmware | fgkt46a | — |
| lenovo thinkcentre_m8300z_firmware | fvkt42a | — |
| lenovo thinkcentre_m8350z_firmware | fvkt42a | — |
| lenovo thinkcentre_m83z_\(aio\)_firmware | fvkt42a | — |
| lenovo thinkcentre_m900z_firmware | fukt39a | — |
| lenovo thinkcentre_m9500z_firmware | fukt44a | — |
| lenovo thinkcentre_m9550z_firmware | fukt44a | — |
| lenovo thinkcentre_x1_aio_firmware | m0hkt32a | — |
| lenovo yangtian_s3040_firmware | fgkt49a | — |
| lenovo yangtian_s800_firmware | ffkt43a | — |
| lenovo thinkserver_rd340_firmware | No range specified | — |
| lenovo thinkserver_rd440_firmware | a0tsb5a | — |
| lenovo thinkserver_rd540_firmware | a1tsb5a | — |
| lenovo thinkserver_rd640_firmware | a1tsb5a | — |
| lenovo thinkserver_rq750_firmware | 7.05 | — |
| lenovo thinkserver_rs140_firmware | fbkt91c | — |
| lenovo thinkserver_td340_firmware | a3tsb5a | — |
| lenovo thinkserver_ts140_firmware | fbktc3a | — |
| lenovo thinkserver_ts150_firmware | fbktc3a | — |
| lenovo thinkserver_ts240_firmware | fbktc3a | — |
| lenovo thinkserver_ts250_firmware | No range specified | — |
| lenovo thinkserver_ts450_firmware | No range specified | — |
| lenovo thinkserver_ts550_firmware | No range specified | — |
| lenovo thinkstation_c30_\(1136\)_firmware | a1kt57a | — |
| lenovo thinkstation_d30_\(4353\)_firmware | a3kt57a | — |
| lenovo thinkstation_e31_firmware | 9skt97a | — |
| lenovo thinkstation_e32_firmware | fbktc6a | — |
| lenovo thinkstation_p300_firmware | fbktc6a | — |
| lenovo thinkstation_p310_firmware | fwkt57a | — |
| lenovo thinkstation_p320_firmware | No range specified | — |
| lenovo thinkstation_p410_firmware | No range specified | — |
| lenovo thinkstation_p500_firmware | a4kt86a | — |
| lenovo thinkstation_p510_firmware | No range specified | — |
| lenovo thinkstation_p700_firmware | a5kt86a | — |
| lenovo thinkstation_p710_firmware | No range specified | — |
| lenovo thinkstation_p900_firmware | a6kt86a | — |
| lenovo thinkstation_p910_firmware | No range specified | — |
| lenovo thinkstation_s30_\(4351\)_firmware | a2kt54a | — |
| lenovo thinkstation_c30_\(1137\)_firmware | a1kt57a | — |
| lenovo thinkstation_s30_\(4352\)_firmware | a2kt54a | — |
| lenovo thinkstation_d30_\(4354\)_firmware | a3kt57a | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.