CVE-2017-3771
High
Description
System boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because systems were shipped from factory without completing BIOS/UEFI initialization process.
SeverityHigh
CVSS7.5
Exploit probability—
ProductLenovo Thinkcentre M710s Firmware
PublishedOct 26, 2017
First seenOct 26, 2017
How to fix
Update
- lenovo thinkcentre_m710s_firmwarem16kt40a or later
- lenovo thinkcentre_m710t_firmwarem16kt40a or later
- lenovo aio_e95_firmwarem16kt40a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo thinkcentre_m710s_firmware | v < m16kt40a | m16kt40a |
| lenovo thinkcentre_m710t_firmware | v < m16kt40a | m16kt40a |
| lenovo aio_e95_firmware | v < m16kt40a | m16kt40a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.