CVE-2017-3754

CVE-2017-3754: vulnerability in Lenovo Notebook BIOS

Published · Updated

Follow this CVE+ Monitor Notebook BIOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code.
Affected products
Lenovo Group Ltd. · Lenovo Notebook BIOS