A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc
Published Aug 10, 2017
6.8
MEDIUMCVSS 3.0
EPSS 0.52%
Description
A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with administrative privileges or physical access to a system may be able to run specially crafted code that can allow them to bypass system protections such as Device Guard and Hyper-V.
Affected products
-
- Version variousStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Lenovo Group Ltd. | Desktop and Notebook BIOS | n/a |
|
Configuration 1
- n/a
Running on/with
- n/a
Configuration 2
- n/a
Running on/with
- n/a
Configuration 3
- n/a
Running on/with
- n/a
Configuration 4
- n/a
Running on/with
- n/a
Configuration 5
- fckt78a
Configuration 6
- fckt78a
Configuration 7
- fckt78a
Configuration 8
- fckt78a
Configuration 9
- fckt78a
Configuration 10
- m0kkt24a
Configuration 11
- n/a
Running on/with
- n/a
Configuration 12
- fckt78a
Running on/with
- n/a
Configuration 13
- fckt78a
Running on/with
- n/a
Configuration 14
- m05kt54a
Running on/with
- n/a
Configuration 15
- m05kt54a
Running on/with
- n/a
Configuration 16
- n/a
Running on/with
- n/a
Configuration 17
- m0lkt12a
Running on/with
- n/a
Configuration 18
- fbktc5a
Running on/with
- n/a
Configuration 19
- fckt78a
Running on/with
- n/a
Configuration 20
- fhkt66a
Running on/with
- n/a
Configuration 21
- fckt78a
Running on/with
- n/a
Configuration 22
- m05kt54a
Running on/with
- n/a
Configuration 23
- m00kt44a
Running on/with
- n/a
Configuration 24
- n/a
Running on/with
- n/a
Configuration 25
- fbktc5a
Running on/with
- n/a
Configuration 26
- fwkt39a
Running on/with
- n/a
Configuration 27
- fwkt39a
Running on/with
- n/a
Configuration 28
- fwkt39a
Running on/with
- n/a
Configuration 29
- m05kt54a
Running on/with
- n/a
Configuration 30
- n/a
Running on/with
- n/a
Configuration 31
- n/a
Running on/with
- n/a
Configuration 32
- f1kt71a
Running on/with
- n/a
Configuration 33
- fckt78a
Running on/with
- n/a
Configuration 34
- fbktc5a
Running on/with
- n/a
Configuration 35
- m0lkt12a
Running on/with
- n/a
Configuration 36
- fwkt39a
Running on/with
- n/a
Configuration 37
- fbktcga
Running on/with
- n/a
Configuration 38
- fbktc5a
Running on/with
- n/a
Configuration 39
- fwkt39a
Running on/with
- n/a
Configuration 40
- fwkt39a
Running on/with
- n/a
Configuration 41
- n/a
Running on/with
- n/a
Configuration 42
- n/a
Running on/with
- n/a
Configuration 43
- n/a
Running on/with
- n/a
Configuration 44
- 9skt95a
Running on/with
- n/a
Configuration 45
- 9skt95a
Running on/with
- n/a
Configuration 46
- fbktc5a
Running on/with
- n/a
Configuration 47
- fbktc5a
Running on/with
- n/a
Configuration 48
- m05kt73a
Running on/with
- n/a
Configuration 49
- fckt80a
Running on/with
- n/a
Configuration 50
- fwkt57a
Running on/with
- n/a
Configuration 51
- n/a
Running on/with
- n/a
Configuration 52
- m0lkt13a
Running on/with
- n/a
Configuration 53
- m05kt61a
Running on/with
- n/a
Configuration 54
- fckt80a
Running on/with
- n/a
Configuration 55
- m05kt61a
Running on/with
- n/a
Configuration 56
- fckt80a
Running on/with
- n/a
Configuration 57
- o2ekt24a
Running on/with
- n/a
Configuration 58
- m09kt33a
Configuration 59
- fgkt49a
Running on/with
- n/a
Configuration 60
- fvkt48a
Running on/with
- n/a
Configuration 61
- ffkt43a
Running on/with
- n/a
Configuration 62
- f8kt40a
Running on/with
- n/a
Configuration 63
- fvkt48a
Running on/with
- n/a
Configuration 64
- fgkt46a
Running on/with
- n/a
Configuration 65
- fgkt46a
Running on/with
- n/a
Configuration 66
- fvkt42a
Running on/with
- n/a
Configuration 67
- fgkt46a
Running on/with
- n/a
Configuration 68
- fvkt42a
Running on/with
- n/a
Configuration 69
- n/a
Running on/with
- n/a
Configuration 70
- fgkt46a
Running on/with
- n/a
Configuration 71
- fgkt46a
Running on/with
- n/a
Configuration 72
- fvkt42a
Running on/with
- n/a
Configuration 73
- fvkt42a
Running on/with
- n/a
Configuration 74
- fvkt42a
Running on/with
- n/a
Configuration 75
- fukt39a
Running on/with
- n/a
Configuration 76
- fukt44a
Running on/with
- n/a
Configuration 77
- fukt44a
Running on/with
- n/a
Configuration 78
- m0hkt32a
Running on/with
- n/a
Configuration 79
- fgkt49a
Running on/with
- n/a
Configuration 80
- ffkt43a
Running on/with
- n/a
Configuration 81
- n/a
Running on/with
- n/a
Configuration 82
- a0tsb5a
Running on/with
- n/a
Configuration 83
- a1tsb5a
Running on/with
- n/a
Configuration 84
- a1tsb5a
Running on/with
- n/a
Configuration 85
- 7.05
Running on/with
- n/a
Configuration 86
- fbkt91c
Running on/with
- n/a
Configuration 87
- a3tsb5a
Running on/with
- n/a
Configuration 88
- fbktc3a
Running on/with
- n/a
Configuration 89
- fbktc3a
Running on/with
- n/a
Configuration 90
- fbktc3a
Running on/with
- n/a
Configuration 91
- n/a
Running on/with
- n/a
Configuration 92
- n/a
Running on/with
- n/a
Configuration 93
- n/a
Running on/with
- n/a
Configuration 94
- a1kt57a
Running on/with
- n/a
Configuration 95
- a3kt57a
Running on/with
- n/a
Configuration 96
- 9skt97a
Running on/with
- n/a
Configuration 97
- fbktc6a
Running on/with
- n/a
Configuration 98
- fbktc6a
Running on/with
- n/a
Configuration 99
- fwkt57a
Running on/with
- n/a
Configuration 100
- n/a
Running on/with
- n/a
Configuration 101
- n/a
Running on/with
- n/a
Configuration 102
- a4kt86a
Running on/with
- n/a
Configuration 103
- n/a
Running on/with
- n/a
Configuration 104
- a5kt86a
Running on/with
- n/a
Configuration 105
- n/a
Running on/with
- n/a
Configuration 106
- a6kt86a
Running on/with
- n/a
Configuration 107
- n/a
Running on/with
- n/a
Configuration 108
- a2kt54a
Running on/with
- n/a
Configuration 109
- a1kt57a
Running on/with
- n/a
Configuration 110
- a2kt54a
Running on/with
- n/a
Configuration 111
- a3kt57a
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AV:L/AC:L/Au:N/C:C/I:C/A:C
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2021–2026- EPSS v1
- EPSS v5
- EPSS v2
- EPSS v3
Percentile over time
- EPSS v1
- EPSS v5
- EPSS v2
- EPSS v3
Table of values (9 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 0.52% (0.00517) | 41.83th | v5 (v2026.06.15) |
| Sep 20, 2026 | 0.52% (0.00517) | 42.96th | v5 (v2026.06.15) |
| Jul 20, 2024 | 0.07% (0.00069) | 30.72th | v3 (v2023.03.01) |
| Apr 8, 2024 | 0.07% (0.00069) | 28.84th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.06% (0.00061) | 24.05th | v3 (v2023.03.01) |
| Mar 6, 2023 | 0.89% (0.00885) | 27.89th | v2 (v2022.01.01) |
| Feb 4, 2022 | 0.89% (0.00885) | 10.50th | v2 (v2022.01.01) |
| Feb 3, 2022 | 0.42% (0.00416) | 10.04th | v5 (v2026.06.15) |
| Apr 14, 2021 | 0.42% (0.00416) | 0.00th | v1 |
References (1)
- https://support.lenovo.com/us/en/product_security/LEN-14695 x_refsource_CONFIRMMitigationVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-14695 | x_refsource_CONFIRMMitigationVendor Advisory |
Change history (0)
No recorded changes yet.