CVE-2017-3753

Severity: medium (CVSS 6.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-08-10 · updated 2026-06-17
Weakness: CWE-94

Description

A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with administrative privileges or physical access to a system may be able to run specially crafted code that can allow them to bypass system protections such as Device Guard and Hyper-V.

Affected products

Lenovo 63 Firmware: fckt78a
Lenovo H50-30G Firmware: fckt78a
Lenovo Ideacentre 300-20Ish Firmware: all versions
Lenovo Ideacentre 300S-11Ish Firmware: all versions
Lenovo Ideacentre 510S-08Ish Firmware: all versions
Lenovo Ideacentre 510S-23Isu Firmware: o2ekt24a
Lenovo Ideacentre 700 Firmware: all versions
Lenovo M4500 Firmware: fckt78a
Lenovo M4500 Id Firmware: fckt78a
Lenovo M4550 Id Firmware: fckt78a
Lenovo S200Z Firmware: m09kt33a
Lenovo S500 Firmware: m0kkt24a
Lenovo Thinkcentre E73 Firmware: fckt78a
Lenovo Thinkcentre E73S Firmware: fckt78a
Lenovo Thinkcentre E73Z (Aio) Firmware: fgkt49a
Lenovo Thinkcentre E74 Firmware: m05kt54a
Lenovo Thinkcentre E74S Firmware: m05kt54a
Lenovo Thinkcentre E74Z Firmware: fvkt48a
Lenovo Thinkcentre E75 T/S Firmware: all versions
Lenovo Thinkcentre E79 Firmware: m0lkt12a
Lenovo Thinkcentre E93 Firmware: fbktc5a
Lenovo Thinkcentre E93Z (Aio) Firmware: ffkt43a
Lenovo Thinkcentre Edge 62Z Firmware: f8kt40a
Lenovo Thinkcentre M4500K Firmware: fckt78a
Lenovo Thinkcentre M4500Q Firmware: fhkt66a
Lenovo Thinkcentre M4500T/S Firmware: fckt78a
Lenovo Thinkcentre M4600T/S Firmware: m05kt54a
Lenovo Thinkcentre M600 Firmware: m00kt44a
Lenovo Thinkcentre M610 Firmware: all versions
Lenovo Thinkcentre M6500T/S Firmware: fbktc5a

References

Get alerted when CVE-2017-3753 or the next vulnerability affects your stack