CVEvulnerability

CVE-2018-9062

6.8 MEDIUM Published 2018-07-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-07-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-74

Description

In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.

Affected configurations

• lenovo e42-80 firmware (< 2wcn40ww) • lenovo e42-80 isk firmware (< 0zcn48ww) • lenovo e52-80 firmware (< 2wcn40ww) • lenovo e52-80 isk firmware (< 0zcn48ww) • lenovo miix 720-12ikb firmware (< 3scn68ww) • lenovo v310-14ikb firmware (< 2wcn40ww) • lenovo v310-14isk firmware (< 0zcn48ww) • lenovo v310-15ikb firmware (< 2wcn40ww) • lenovo v310-15isk firmware (< 0zcn48ww) • lenovo v510-14ikb firmware (< 2wcn40ww) • lenovo v510-15ikb firmware (< 2wcn40ww) • lenovo thinkpad l380 firmware (< r0ret28w) • lenovo thinkpad e480 firmware (< r0pet47w) • lenovo thinkpad e580 firmware (< r0pet47w) • lenovo thinkpad l480 firmware (< r0qet47w) • lenovo thinkpad l580 firmware (< r0qet47w) • lenovo thinkpad p51 firmware (< n1uet71w) • lenovo thinkpad p51s firmware (< n1vet45w) • lenovo thinkpad p52 firmware (< n2cet28w) • lenovo thinkpad p52s firmware (< n27et27w) • lenovo thinkpad p71 firmware (< n1tet50w) • lenovo thinkpad p72 firmware (< n2cet28w) • lenovo thinkpad t25 firmware (< n1qet77w) • lenovo thinkpad t470 firmware (< n1qet77w) • lenovo thinkpad t470p firmware (< r0fet44w) • lenovo thinkpad t470s firmware (< n1wet49w) • lenovo thinkpad t480 firmware (< n24et41w) • lenovo thinkpad t480s firmware (< n22et48w) • lenovo thinkpad t570 firmware (< n1vet45w) • lenovo thinkpad t580 firmware (< n27et27w) • lenovo thinkpad x380 yoga firmware (< r0set29w) • lenovo thinkpad yoga 11e firmware (< r0vet23w) • lenovo thinkpad yoga 370 firmware (< r0het48w) • lenovo thinkpad s1 firmware (< r0het48w) • lenovo thinkpad x1 carbon firmware (< n1met49w) • lenovo thinkpad x1 carbon firmware (< n23et52w) • lenovo thinkpad x1 tablet firmware (< n1oet45w) • lenovo thinkpad x1 tablet firmware (< n1zet69w) • lenovo thinkpad x1 yoga firmware (< n1net42w) • lenovo thinkpad x1 yoga firmware (< n25et38w) • lenovo thinkpad x270 firmware (< r0iet53w) • lenovo thinkpad x280 firmware (< n20et33w)

Related

Weakness · CWE (1)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness

References