CVE-2017-3775

Severity: medium (CVSS 6.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-05-04 · updated 2026-06-17
Weakness: CWE-287

Description

Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with physical access to the system could boot unsigned code.

Affected products

Lenovo Flex System X240 M5 Bios: before 2.61 — fixed in 2.61
Lenovo Flex System X280 X6 Bios: before 4.21 — fixed in 4.21
Lenovo Flex System X480 X6 Bios: before 4.21 — fixed in 4.21
Lenovo Flex System X880 Bios: before 4.21 — fixed in 4.21
Lenovo Nextscale Nx360 M5 Bios: before 2.61 — fixed in 2.61
Lenovo System X3250 M6 Bios: before 2.23 — fixed in 2.23
Lenovo System X3500 M5 Bios: before 2.61 — fixed in 2.61
Lenovo System X3550 M5 Bios: before 2.61 — fixed in 2.61
Lenovo System X3650 M5 Bios: before 2.61 — fixed in 2.61
Lenovo System X3850 X6 Bios: before 4.3 — fixed in 4.3
Lenovo System X3950 X6 Bios: before 4.3 — fixed in 4.3

How to fix

Upgrade to a fixed version: Lenovo Flex System X240 M5 Bios 2.61; Lenovo Flex System X280 X6 Bios 4.21; Lenovo Flex System X480 X6 Bios 4.21; Lenovo Flex System X880 Bios 4.21; Lenovo Nextscale Nx360 M5 Bios 2.61; Lenovo System X3250 M6 Bios 2.23; Lenovo System X3500 M5 Bios 2.61; Lenovo System X3550 M5 Bios 2.61; Lenovo System X3650 M5 Bios 2.61; Lenovo System X3850 X6 Bios 4.3; Lenovo System X3950 X6 Bios 4.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-3775 or the next vulnerability affects your stack