CVEvulnerability
CVE-2018-9062
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-07-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-74
Description
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
Affected configurations
• lenovo e42-80 firmware (< 2wcn40ww)
• lenovo e42-80 isk firmware (< 0zcn48ww)
• lenovo e52-80 firmware (< 2wcn40ww)
• lenovo e52-80 isk firmware (< 0zcn48ww)
• lenovo miix 720-12ikb firmware (< 3scn68ww)
• lenovo v310-14ikb firmware (< 2wcn40ww)
• lenovo v310-14isk firmware (< 0zcn48ww)
• lenovo v310-15ikb firmware (< 2wcn40ww)
• lenovo v310-15isk firmware (< 0zcn48ww)
• lenovo v510-14ikb firmware (< 2wcn40ww)
• lenovo v510-15ikb firmware (< 2wcn40ww)
• lenovo thinkpad l380 firmware (< r0ret28w)
• lenovo thinkpad e480 firmware (< r0pet47w)
• lenovo thinkpad e580 firmware (< r0pet47w)
• lenovo thinkpad l480 firmware (< r0qet47w)
• lenovo thinkpad l580 firmware (< r0qet47w)
• lenovo thinkpad p51 firmware (< n1uet71w)
• lenovo thinkpad p51s firmware (< n1vet45w)
• lenovo thinkpad p52 firmware (< n2cet28w)
• lenovo thinkpad p52s firmware (< n27et27w)
• lenovo thinkpad p71 firmware (< n1tet50w)
• lenovo thinkpad p72 firmware (< n2cet28w)
• lenovo thinkpad t25 firmware (< n1qet77w)
• lenovo thinkpad t470 firmware (< n1qet77w)
• lenovo thinkpad t470p firmware (< r0fet44w)
• lenovo thinkpad t470s firmware (< n1wet49w)
• lenovo thinkpad t480 firmware (< n24et41w)
• lenovo thinkpad t480s firmware (< n22et48w)
• lenovo thinkpad t570 firmware (< n1vet45w)
• lenovo thinkpad t580 firmware (< n27et27w)
• lenovo thinkpad x380 yoga firmware (< r0set29w)
• lenovo thinkpad yoga 11e firmware (< r0vet23w)
• lenovo thinkpad yoga 370 firmware (< r0het48w)
• lenovo thinkpad s1 firmware (< r0het48w)
• lenovo thinkpad x1 carbon firmware (< n1met49w)
• lenovo thinkpad x1 carbon firmware (< n23et52w)
• lenovo thinkpad x1 tablet firmware (< n1oet45w)
• lenovo thinkpad x1 tablet firmware (< n1zet69w)
• lenovo thinkpad x1 yoga firmware (< n1net42w)
• lenovo thinkpad x1 yoga firmware (< n25et38w)
• lenovo thinkpad x270 firmware (< r0iet53w)
• lenovo thinkpad x280 firmware (< n20et33w)
Related
Weakness · CWE (1)
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness
References
- http://www.securityfocus.com/bid/105387 Third Party Advisory, VDB Entry
- https://support.lenovo.com/us/en/solutions/LEN-20527 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/105387 Third Party Advisory, VDB Entry
- https://support.lenovo.com/us/en/solutions/LEN-20527 Patch, Vendor Advisory