CVE-2017-3754

N/A
Published: July 17, 2017 at 07:00 PM UTC
Updated: June 17, 2026 at 01:18 AM UTC
20 products affected across 1 vendorBIOSMiix 720-12IkbV110-15Ikb

Using Lenovo Notebook BIOS by Lenovo Group Ltd.?

Get instant alerts when new vulnerabilities affect Lenovo Notebook BIOS - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.3%

Description

Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

All versions
lenovo-710s-13ikb-xiaoxin-air-13ikb (environment) · lenovo-710s-13isk-xiaoxin-air-13 (environment) · lenovo-k21-80 (environment) · lenovo-k22-80-lenovo-v720-12 (environment) · lenovo-k41-80 (environment) · lenovo-lenovo-ideapad-110-14ast (environment) · lenovo-lenovo-ideapad-110-15ast (environment) · lenovo-lenovo-ideapad-320-14ast (environment) · lenovo-lenovo-ideapad-320-15ast (environment) · lenovo-lenovo-xiaoxin-rui7000 (environment) · lenovo-miix-710-12ikb (environment) · lenovo-miix-720-12ikb (environment) · lenovo-notebook-320-17ast (environment) · lenovo-rescuer-e520-15ikb (environment) · lenovo-v110-14iap (environment) · lenovo-v110-15iap (environment) · lenovo-v110-15ikb (environment) · lenovo-v110-15isk (environment) · lenovo-yoga-710-11ikb (environment)
All versions
All versions
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

References (1)

CVSS

Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card