{"id":"CVE-2017-3753","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-3753","generatedAt":"2026-10-29T00:32:59.283Z","title":"A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc.","description":"A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with administrative privileges or physical access to a system may be able to run specially crafted code that can allow them to bypass system protections such as Device Guard and Hyper-V.","published":"2017-08-10T00:29:00.000Z","lastModified":"2026-06-17T01:18:51.000Z","status":"Modified","sourceIdentifier":"psirt@lenovo.com","cvss":{"version":"3.0","score":6.8,"severity":"MEDIUM","vector":"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-94"],"affected":["lenovo/ideacentre 300-20ish firmware","lenovo/ideacentre 300s-11ish firmware","lenovo/ideacentre 510s-08ish firmware","lenovo/ideacentre 700 firmware","lenovo/63 firmware","lenovo/h50-30g firmware","lenovo/m4500 firmware","lenovo/m4500 id firmware","lenovo/m4550 id firmware","lenovo/s500 firmware","lenovo/v320-15iap firmware","lenovo/thinkcentre e73 firmware","lenovo/thinkcentre e73s firmware","lenovo/thinkcentre e74 firmware","lenovo/thinkcentre e74s firmware","lenovo/thinkcentre e75 t\\/s firmware","lenovo/thinkcentre e79 firmware","lenovo/thinkcentre e93 firmware","lenovo/thinkcentre m4500k firmware","lenovo/thinkcentre m4500q firmware","lenovo/thinkcentre m4500t\\/s firmware","lenovo/thinkcentre m4600t\\/s firmware","lenovo/thinkcentre m600 firmware","lenovo/thinkcentre m610 firmware","lenovo/thinkcentre m6500t\\/s firmware","lenovo/thinkcentre m6600 firmware","lenovo/thinkcentre m6600q firmware","lenovo/thinkcentre m6600t\\/s firmware","lenovo/thinkcentre m700 firmware","lenovo/thinkcentre m710t\\/s firmware","lenovo/thinkcentre m715q firmware","lenovo/thinkcentre m72e firmware","lenovo/thinkcentre m73 firmware","lenovo/thinkcentre m73p firmware","lenovo/thinkcentre m79 firmware","lenovo/thinkcentre m800 firmware","lenovo/thinkcentre m83 firmware","lenovo/thinkcentre m8500t\\/s firmware","lenovo/thinkcentre m8600t\\/s firmware","lenovo/thinkcentre m900 firmware","lenovo/thinkcentre m910t\\/s firmware","lenovo/thinkcentre m910q firmware","lenovo/thinkcentre m910x firmware","lenovo/thinkcentre m92 firmware","lenovo/thinkcentre m92p firmware","lenovo/thinkcentre m93 firmware","lenovo/thinkcentre m93p firmware","lenovo/yangtian afh110 firmware","lenovo/yangtian afh81 firmware","lenovo/yangtian afq150 firmware","lenovo/yangtian mc carrizo-l firmware","lenovo/yangtian mc godavari firmware","lenovo/yangtian mc h110 firmware","lenovo/yangtian mc h81 firmware","lenovo/yangtian me\\/we h110 firmware","lenovo/yangtian mf\\/wf h81 firmware","lenovo/ideacentre 510s-23isu firmware","lenovo/s200z firmware","lenovo/thinkcentre e73z \\(aio\\) firmware","lenovo/thinkcentre e74z firmware"],"epss":{"score":0.00517,"percentile":0.43792,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.52%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-14695","tags":["Mitigation","Vendor Advisory"],"source":"psirt@lenovo.com"},{"url":"https://support.lenovo.com/us/en/product_security/LEN-14695","tags":["Mitigation","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-3753","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}