« Volver al listado

CVE-2017-3754

Estado: ModificadaMedia (6.7)—

Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Lenovo — Bios

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-3754",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@lenovo.com",
      "affectedData": [
        {
          "vendor": "Lenovo Group Ltd.",
          "product": "Lenovo Notebook BIOS",
          "versions": [
            {
              "status": "affected",
              "version": "Various"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-07-17T19:29:00.323",
  "references": [
    {
      "url": "https://support.lenovo.com/us/en/product_security/LEN-15084",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@lenovo.com"
    },
    {
      "url": "https://support.lenovo.com/us/en/product_security/LEN-15084",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code."
    },
    {
      "lang": "es",
      "value": "Algunos sistemas notebook de la marca Lenovo no tienen protecciones de escritura configuradas apropiadamente en el BIOS del sistema. Esto podría permitir a un atacante con acceso físico o administrativo a un sistema para ser capaz de flashear el BIOS con una imagen arbitraria y potencialmente ejecutar código BIOS malicioso."
    }
  ],
  "lastModified": "2026-06-17T01:18:51.690",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:lenovo:bios:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "61D66F0D-6C60-4CF6-A509-C6FAC2E22F95"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:710s-13ikb\\/xiaoxin_air_13ikb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "CF203824-4977-4970-93FA-311FC0726DE8"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:710s-13isk\\/xiaoxin_air_13:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FA559DCA-5395-4205-916B-62A94E078788"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:k21-80:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E56C7CE7-D4A0-4179-B65D-EA8EDA2F7299"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:k22-80\\/lenovo_v720-12:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6817BA2D-2383-428F-941D-BCAC7A476818"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:k41-80:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "BDC9595C-D1DA-4769-9401-1D2430CE69CE"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:lenovo_ideapad_110-14ast:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E63C6054-D0EE-4AED-B829-A2F676E89D86"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:lenovo_ideapad_110-15ast:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3E3F252A-E00B-40AA-8F02-7987D2102D4D"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:lenovo_ideapad_320-14ast:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0BD8431A-FFF2-4519-BCC3-80A8B76CC80E"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:lenovo_ideapad_320-15ast:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "21481398-B4A5-4C7F-BA4F-A52D6C13756B"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:lenovo_xiaoxin_rui7000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "94BA3B3C-0E21-4877-8B0D-11E5FEF12384"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:miix_710-12ikb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9BE26E1F-D6B8-4ECD-86DE-D492BBC1FE64"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:miix_720-12ikb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D0E7697B-53B4-4A2A-B285-0620962A0E4A"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:notebook_320-17ast:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "719BD6FE-DB95-4096-9829-33536AD077C8"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:rescuer_e520-15ikb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9CC1D30D-C105-4BAF-9085-7E5C8D253A23"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:v110-14iap:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FAED167E-15AF-4B45-952C-113726BCFAE0"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:v110-15iap:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "972B1468-D71C-449C-B392-4A62BA9BF835"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:v110-15ikb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9423385C-5562-4578-9602-C85ED87CB530"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:v110-15isk:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B7C41B17-C208-4A3A-BCC5-F7D4046A9249"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:yoga_710-11ikb:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A573B96D-E21C-4869-A6CE-FDB3926875CB"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@lenovo.com"
}