CVEvulnerability
CVE-2018-9069
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-10-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.0 HIGH — AV:N/AC:M/Au:S/C:N/I:P/A:C
- Weaknesses
- CWE-362
Description
In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.
Affected configurations
• hp 310s-14isk firmware (< 1.15)
• hp 320-15ikbra firmware (< 6jcn24ww)
• hp 320-15ikbrn firmware (< 6jcn24ww)
• hp 320-15ikbrn touch firmware (< 6jcn24ww)
• hp 320-17ikbrn (< 2.09)
• hp 320s-14ikb (< 2.09)
• hp 320s-15ikb firmware (< 2.09)
• hp 320s-15isk firmware (< 2wcn38ww)
• hp 510s-14isk firmware (< 1.15)
• hp 520-15ikbrn firmware (< 6jcn26ww)
• hp 520s-14ikb firmware (< 2.09)
• hp 710s plus-13ikb 16g firmware (< 2.55)
• hp 710s plus-3ikb firmware (< 2.55)
• hp xiaoxinair13ikbpro firmware (< 2.55)
• hp 710s plus touch-13ikb firmware (< 2.55)
• hp 720s-13ikb firmware (< 5scn38ww)
• hp b320-14ikb firmware
• lenovo e42-80 firmware (< 2wcn38ww)
• lenovo e52-80 firmware (< 2wcn38ww)
• hp flex 4-1470 firmware (< 1.15)
• hp flex 5-1470 firmware (< 2.09)
• hp flex 5-1570 firmware (< 2.09)
• hp ideapad 2in1 14 firmware
• hp lenovo ideapad 320-14ikb\(i\+a\) firmware
• hp lenovo ideapad 320-14ikb\(i\+n\) firmware
• hp lenovo ideapad 320-15abr firmware
• hp lenovo ideapad 320-15ikb\(i\+n\) firmware
• hp lenovo ideapad 320s-14ikbr firmware
• hp lenovo ideapad 320s-15ikbr firmware
• hp lenovo ideapad 520s-14ikbr firmware
• hp lenovo ideapad 720s-14ikb firmware (< 6jcn26ww)
• hp lenovo ideapad flex 5-1470 firmware (< 6jcn26ww)
• hp lenovo ideapad flex 5-1570 firmware (< 6jcn26ww)
• hp lenovo ideapad y520-15ikbn firmware
• hp lenovo tianyi 310-14ikb firmware
• hp lenovo tianyi 310-15ikb firmware
• hp lenovo y520-15ikba firmware (< 5jcn25ww)
• hp lenovo y520-15ikbm firmware (< 5jcn25ww)
• hp lenovo yoga 520-14ikb firmware (< 6jcn26ww)
• hp lenovo yoga 520-15ikb firmware (< 6jcn26ww)
• hp miix 720-12ikb (< 3scn66ww)
• hp nano110-14ikb firmware
• hp nano110-15ikb firmware (< 5xcn24ww)
• hp rescuer r720-15ikbm firmware (< 5xcn24ww)
• hp rescuer y520-15ikbm firmware (< 5xcn24ww)
• lenovo v310-14ikb firmware (< 2wcn38ww)
• lenovo v310-14isk firmware (< 4.07)
• lenovo v310-15ikb firmware (< 2wcn38ww)
• lenovo v310-15isk firmware (< 0zcn47ww)
• hp v330-14ikb firmware (< 4.07)
• hp v330-14isk firmware (< 4.07)
• lenovo v510-14ikb firmware (< 2wcn38ww)
• lenovo v510-15ikb firmware (< 2wcn38ww)
• hp yoga 310-11iap firmware (< 6.7)
• hp yoga 510-14isk firmware (< 1.15)
• hp yoga 720-13ikb firmware (< 2.05)
• hp yoga 720-13ikbr firmware (< 2.07)
• hp yoga 720-15ikb firmware (< 2.05)
• hp lenovo v720-14 firmware (< 2.12)
• hp 7000 u42 firmware (< 2.09)
… and 8 more
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- https://support.lenovo.com/us/en/solutions/LEN-20184 Vendor Advisory
- https://support.lenovo.com/us/en/solutions/LEN-20184 Vendor Advisory