CVEvulnerability

CVE-2018-9069

5.9 MEDIUM Published 2018-10-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0 ([email protected])
7.0 HIGH — AV:N/AC:M/Au:S/C:N/I:P/A:C
Weaknesses
CWE-362

Description

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.

Affected configurations

• hp 310s-14isk firmware (< 1.15) • hp 320-15ikbra firmware (< 6jcn24ww) • hp 320-15ikbrn firmware (< 6jcn24ww) • hp 320-15ikbrn touch firmware (< 6jcn24ww) • hp 320-17ikbrn (< 2.09) • hp 320s-14ikb (< 2.09) • hp 320s-15ikb firmware (< 2.09) • hp 320s-15isk firmware (< 2wcn38ww) • hp 510s-14isk firmware (< 1.15) • hp 520-15ikbrn firmware (< 6jcn26ww) • hp 520s-14ikb firmware (< 2.09) • hp 710s plus-13ikb 16g firmware (< 2.55) • hp 710s plus-3ikb firmware (< 2.55) • hp xiaoxinair13ikbpro firmware (< 2.55) • hp 710s plus touch-13ikb firmware (< 2.55) • hp 720s-13ikb firmware (< 5scn38ww) • hp b320-14ikb firmware • lenovo e42-80 firmware (< 2wcn38ww) • lenovo e52-80 firmware (< 2wcn38ww) • hp flex 4-1470 firmware (< 1.15) • hp flex 5-1470 firmware (< 2.09) • hp flex 5-1570 firmware (< 2.09) • hp ideapad 2in1 14 firmware • hp lenovo ideapad 320-14ikb\(i\+a\) firmware • hp lenovo ideapad 320-14ikb\(i\+n\) firmware • hp lenovo ideapad 320-15abr firmware • hp lenovo ideapad 320-15ikb\(i\+n\) firmware • hp lenovo ideapad 320s-14ikbr firmware • hp lenovo ideapad 320s-15ikbr firmware • hp lenovo ideapad 520s-14ikbr firmware • hp lenovo ideapad 720s-14ikb firmware (< 6jcn26ww) • hp lenovo ideapad flex 5-1470 firmware (< 6jcn26ww) • hp lenovo ideapad flex 5-1570 firmware (< 6jcn26ww) • hp lenovo ideapad y520-15ikbn firmware • hp lenovo tianyi 310-14ikb firmware • hp lenovo tianyi 310-15ikb firmware • hp lenovo y520-15ikba firmware (< 5jcn25ww) • hp lenovo y520-15ikbm firmware (< 5jcn25ww) • hp lenovo yoga 520-14ikb firmware (< 6jcn26ww) • hp lenovo yoga 520-15ikb firmware (< 6jcn26ww) • hp miix 720-12ikb (< 3scn66ww) • hp nano110-14ikb firmware • hp nano110-15ikb firmware (< 5xcn24ww) • hp rescuer r720-15ikbm firmware (< 5xcn24ww) • hp rescuer y520-15ikbm firmware (< 5xcn24ww) • lenovo v310-14ikb firmware (< 2wcn38ww) • lenovo v310-14isk firmware (< 4.07) • lenovo v310-15ikb firmware (< 2wcn38ww) • lenovo v310-15isk firmware (< 0zcn47ww) • hp v330-14ikb firmware (< 4.07) • hp v330-14isk firmware (< 4.07) • lenovo v510-14ikb firmware (< 2wcn38ww) • lenovo v510-15ikb firmware (< 2wcn38ww) • hp yoga 310-11iap firmware (< 6.7) • hp yoga 510-14isk firmware (< 1.15) • hp yoga 720-13ikb firmware (< 2.05) • hp yoga 720-13ikbr firmware (< 2.07) • hp yoga 720-15ikb firmware (< 2.05) • hp lenovo v720-14 firmware (< 2.12) • hp 7000 u42 firmware (< 2.09) … and 8 more

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References