Description
System boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because systems were shipped from factory without completing BIOS/UEFI initialization process.
References (1)
Core 1
Core References
Issue Tracking, Vendor Advisory x_refsource_confirm
https://support.lenovo.com/us/en/product_security/LEN-17417
Scores
CVSS v3
7.5
EPSS
0.0020
EPSS Percentile
42.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Details
Status
published
Products (4)
lenovo/aio_e95_firmware
< m16kt40a
lenovo/thinkcentre_m710s_firmware
< m16kt40a
lenovo/thinkcentre_m710t_firmware
< m16kt40a
Lenovo Group Ltd./E95, ThinkCentre M710s/M710t
Earlier than 1.3.2
Published
Oct 26, 2017
Tracked Since
Feb 18, 2026