CVE-2017-3771
Severity Score
7.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
System boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because systems were shipped from factory without completing BIOS/UEFI initialization process.
No se ha asegurado adecuadamente el proceso de arranque del sistema en Lenovo E95 y ThinkCentre M710s/M710t debido a que los sistemas salían de fábrica sin haber completado el proceso de inicialización BIOS/UEFI.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2016-12-16 CVE Reserved
- 2017-10-26 CVE Published
- 2024-07-08 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-17417 | 2019-10-03 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Lenovo Search vendor "Lenovo" | Thinkcentre M710s Firmware Search vendor "Lenovo" for product "Thinkcentre M710s Firmware" | < m16kt40a Search vendor "Lenovo" for product "Thinkcentre M710s Firmware" and version " < m16kt40a" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkcentre M710s Search vendor "Lenovo" for product "Thinkcentre M710s" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkcentre M710t Firmware Search vendor "Lenovo" for product "Thinkcentre M710t Firmware" | < m16kt40a Search vendor "Lenovo" for product "Thinkcentre M710t Firmware" and version " < m16kt40a" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkcentre M710t Search vendor "Lenovo" for product "Thinkcentre M710t" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Aio E95 Firmware Search vendor "Lenovo" for product "Aio E95 Firmware" | < m16kt40a Search vendor "Lenovo" for product "Aio E95 Firmware" and version " < m16kt40a" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Aio E95 Search vendor "Lenovo" for product "Aio E95" | - | - |
Safe
|