CVE-2017-3771

System boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because systems were shipped from factory without completing BIOS/UEFI initialization process.

Published: Oct 26, 2017
Updated: Apr 13, 2023
CVE: CVE-2017-3771
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
lenovo / thinkcentre_m710s_firmware	-	m16kt40a
lenovo / thinkcentre_m710t_firmware	-	m16kt40a
lenovo / aio_e95_firmware	-	m16kt40a

https://support.lenovo.com/us/en/product_security/LEN-17417

Vulnerability Database

289,697

CVE-2017-3771