Lenovo Nextscale NX360 m5 BIOS vulnerabilities

2 CVEs affecting Lenovo Nextscale NX360 m5 BIOS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-3775, published 2018-05-04.

More from Lenovo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-8226, published 2017-01-26. Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days. The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure.
• CVE-2017-3775, published 2018-05-04. Medium severity, CVSS 6.4. EPSS: 0.3% chance of exploitation in the next 30 days. Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it. As a result, an attacker with…