CVE:CVE-2017-3775
CNNVD:CNNVD-201805-184
Lenovo Flex System x240 M5等都是中国联想（Lenovo）公司的服务器设备。
多款Lenovo产品中存在安全漏洞，该漏洞源于程序在运行签名的代码之前，没有正确的进行身份验证。物理位置临近的攻击者可利用该漏洞运行未签名的代码。以下产品和版本受到影响：Lenovo Flex System x240 M5 BIOS/UEFI 2.61之前版本；Flex System x280 X6 BIOS/UEFI 4.21之前版本；Flex System x480 X6 BIOS/UEFI 4.21之前版本；Flex System x880 BIOS/UEFI 4.21之前版本；NeXtScale nx360 M5 BIOS/UEFI 2.61之前版本；System x3250 M6 BIOS/UEFI 2.23之前版本；System x3500 M5 BIOS/UEFI 2.61之前版本；System x3550 M5 BIOS/UEFI 2.6之前版本1；System x3650 M5 BIOS/UEFI 2.61之前版本；System x3850 X6 BIOS/UEFI 4.3之前版本；System x3950 X6 BIOS/UEFI 4.3之前版本。
solution:Upgrade lenovo flex_system_x240_m5_bios to a higher version than 2.61,and avoid the version (,2.61); Upgrade lenovo flex_system_x280_x6_bios to a higher version than 4.21,and avoid the version (,4.21); Upgrade lenovo flex_system_x480_x6_bios to a higher version than 4.21,and avoid the version (,4.21); Upgrade lenovo flex_system_x880_bios to a higher version than 4.21,and avoid the version (,4.21); Upgrade lenovo nextscale_nx360_m5_bios to a higher version than 2.61,and avoid the version (,2.61); Upgrade lenovo system_x3250_m6_bios to a higher version than 2.23,and avoid the version (,2.23); Upgrade lenovo system_x3500_m5_bios to a higher version than 2.61,and avoid the version (,2.61); Upgrade lenovo system_x3550_m5_bios to a higher version than 2.61,and avoid the version (,2.61); Upgrade lenovo system_x3650_m5_bios to a higher version than 2.61,and avoid the version (,2.61); Upgrade lenovo system_x3850_x6_bios to a higher version than 4.3,and avoid the version (,4.3); Upgrade lenovo system_x3950_x6_bios to a higher version than 4.3,and avoid the version (,4.3)