Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-9069

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.

Published

2018-10-02T13:29:00.443

Last Modified

2024-11-21T04:14:54.590

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:N/I:P/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: COMPLETE
Exploitability Score

6.8

Impact Score

7.8

Weaknesses
  • Type: Primary
    CWE-362
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System hp 310s-14isk_firmware < 1.15 Yes
Hardware hp 310s-14isk - No
Operating System hp 320-15ikbra_firmware < 6jcn24ww Yes
Hardware hp 320-15ikbra - No
Operating System hp 320-15ikbrn_firmware < 6jcn24ww Yes
Hardware hp 320-15ikbrn - No
Operating System hp 320-15ikbrn_touch_firmware < 6jcn24ww Yes
Hardware hp 320-15ikbrn_touch - No
Hardware hp 320-17ikbrn < 2.09 Yes
Hardware hp 320-17ikbrn - No
Hardware hp 320s-14ikb < 2.09 Yes
Hardware hp 320s-14ikb - No
Operating System hp 320s-15ikb_firmware < 2.09 Yes
Hardware hp 320s-15ikb - No
Operating System hp 320s-15isk_firmware < 2wcn38ww Yes
Hardware hp 320s-15isk - No
Operating System hp 510s-14isk_firmware < 1.15 Yes
Hardware hp 510s-14isk - No
Operating System hp 520-15ikbrn_firmware < 6jcn26ww Yes
Hardware hp 520-15ikbrn - No
Operating System hp 520s-14ikb_firmware < 2.09 Yes
Hardware hp 520s-14ikb - No
Operating System hp 710s_plus-13ikb_16g_firmware < 2.55 Yes
Hardware hp 710s_plus-13ikb_16g - No
Operating System hp 710s_plus-3ikb_firmware < 2.55 Yes
Hardware hp 710s_plus-3ikb - No
Operating System hp xiaoxinair13ikbpro_firmware < 2.55 Yes
Hardware hp xiaoxinair13ikbpro - No
Operating System hp 710s_plus_touch-13ikb_firmware < 2.55 Yes
Hardware hp 710s_plus_touch-13ikb - No
Operating System hp 720s-13ikb_firmware < 5scn38ww Yes
Hardware hp 720s-13ikb - No
Operating System hp b320-14ikb_firmware - Yes
Hardware hp b320-14ikb - No
Operating System lenovo e42-80_firmware < 2wcn38ww Yes
Hardware hp e42-80 - No
Operating System lenovo e52-80_firmware < 2wcn38ww Yes
Hardware hp e52-80 - No
Operating System hp flex_4-1470_firmware < 1.15 Yes
Hardware hp flex_4-1470 - No
Operating System hp flex_5-1470_firmware < 2.09 Yes
Hardware hp flex_5-1470 - No
Operating System hp flex_5-1570_firmware < 2.09 Yes
Hardware hp flex_5-1570 - No
Operating System hp ideapad_2in1_14_firmware - Yes
Hardware hp ideapad_2in1_14 - No
Operating System hp lenovo_ideapad_320-14ikb\(i\+a\)_firmware - Yes
Hardware hp lenovo_ideapad_320-14ikb\(i\+a\) - No
Operating System hp lenovo_ideapad_320-14ikb\(i\+n\)_firmware - Yes
Hardware hp lenovo_ideapad_320-14ikb\(i\+n\) - No
Operating System hp lenovo_ideapad_320-15abr_firmware - Yes
Hardware hp lenovo_ideapad_320-15abr - No
Operating System hp lenovo_ideapad_320-15ikb\(i\+n\)_firmware - Yes
Hardware hp lenovo_ideapad_320-15ikb\(i\+n\) - No
Operating System hp lenovo_ideapad_320s-14ikbr_firmware - Yes
Hardware hp lenovo_ideapad_320s-14ikbr - No
Operating System hp lenovo_ideapad_320s-15ikbr_firmware - Yes
Hardware hp lenovo_ideapad_320s-15ikbr - No
Operating System hp lenovo_ideapad_520s-14ikbr_firmware - Yes
Hardware hp lenovo_ideapad_520s-14ikbr - No
Operating System hp lenovo_ideapad_720s-14ikb_firmware < 6jcn26ww Yes
Hardware hp lenovo_ideapad_720s-14ikb - No
Operating System hp lenovo_ideapad_flex_5-1470_firmware < 6jcn26ww Yes
Hardware hp lenovo_ideapad_flex_5-1470 - No
Operating System hp lenovo_ideapad_flex_5-1570_firmware < 6jcn26ww Yes
Hardware hp lenovo_ideapad_flex_5-1570 - No
Operating System hp lenovo_ideapad_y520-15ikbn_firmware - Yes
Hardware hp lenovo_ideapad_y520-15ikbn - No
Operating System hp lenovo_tianyi_310-14ikb_firmware - Yes
Hardware hp lenovo_tianyi_310-14ikb - No
Operating System hp lenovo_tianyi_310-15ikb_firmware - Yes
Hardware hp lenovo_tianyi_310-15ikb - No
Operating System hp lenovo_y520-15ikba_firmware < 5jcn25ww Yes
Hardware hp lenovo_y520-15ikba - No
Operating System hp lenovo_y520-15ikbm_firmware < 5jcn25ww Yes
Hardware hp lenovo_y520-15ikbm - No
Operating System hp lenovo_yoga_520-14ikb_firmware < 6jcn26ww Yes
Hardware hp lenovo_yoga_520-14ikb - No
Operating System hp lenovo_yoga_520-15ikb_firmware < 6jcn26ww Yes
Hardware hp lenovo_yoga_520-15ikb - No
Hardware hp miix_720-12ikb < 3scn66ww Yes
Hardware hp miix_720-12ikb - No
Operating System hp nano110-14ikb_firmware - Yes
Hardware hp nano110-14ikb - No
Operating System hp nano110-15ikb_firmware < 5xcn24ww Yes
Hardware hp nano110-15ikb - No
Operating System hp rescuer_r720-15ikbm_firmware < 5xcn24ww Yes
Hardware hp rescuer_r720-15ikbm - No
Operating System hp rescuer_y520-15ikbm_firmware < 5xcn24ww Yes
Hardware hp rescuer_y520-15ikbm - No
Operating System lenovo v310-14ikb_firmware < 2wcn38ww Yes
Hardware hp v310-14ikb - No
Operating System lenovo v310-14isk_firmware < 4.07 Yes
Hardware hp v310-14isk - No
Operating System lenovo v310-15ikb_firmware < 2wcn38ww Yes
Hardware hp v310-15ikb - No
Operating System lenovo v310-15isk_firmware < 0zcn47ww Yes
Hardware hp v310-15isk - No
Operating System hp v330-14ikb_firmware < 4.07 Yes
Hardware hp v330-14ikb - No
Operating System hp v330-14isk_firmware < 4.07 Yes
Hardware hp v330-14isk - No
Operating System lenovo v510-14ikb_firmware < 2wcn38ww Yes
Hardware hp v510-14ikb - No
Operating System lenovo v510-15ikb_firmware < 2wcn38ww Yes
Hardware hp v510-15ikb - No
Operating System hp yoga_310-11iap_firmware < 6.7 Yes
Hardware hp yoga_310-11iap - No
Operating System hp yoga_510-14isk_firmware < 1.15 Yes
Hardware hp yoga_510-14isk - No
Operating System hp yoga_720-13ikb_firmware < 2.05 Yes
Hardware hp yoga_720-13ikb - No
Operating System hp yoga_720-13ikbr_firmware < 2.07 Yes
Hardware hp yoga_720-13ikbr - No
Operating System hp yoga_720-15ikb_firmware < 2.05 Yes
Hardware hp yoga_720-15ikb - No
Operating System hp lenovo_v720-14_firmware < 2.12 Yes
Hardware hp lenovo_v720-14 - No
Operating System hp 7000_u42_firmware < 2.09 Yes
Hardware hp 7000_u42 - No
Operating System hp 7000-15_u42_firmware < 2.09 Yes
Hardware hp 7000-15_u42 - No
Operating System hp r720-15ikba_firmware < 5jcn25ww Yes
Hardware hp r720-15ikba - No
Operating System hp y520-15ikba_firmware < 5jcn25ww Yes
Hardware hp y520-15ikba - No
Operating System hp r720-15ikbn_firmware < 4gcn38ww Yes
Hardware hp r720-15ikbn - No
Operating System hp y520-15ikbn_firmware < 4gcn38ww Yes
Hardware hp y520-15ikbn - No
Operating System hp y720-15ikb_firmware < 4gcn38ww Yes
Hardware hp y720-15ikb - No
Operating System hp lenovo_y720-15ikb_firmware < 4gcn38ww Yes
Hardware hp lenovo_y720-15ikb - No
Operating System hp e43-80_kbl_firmware < 4.07 Yes
Hardware hp e43-80_kbl - No
References