CVE-2018-9062
Summary
| CVE | CVE-2018-9062 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-07-19 19:29:00 UTC |
| Updated | 2019-10-15 18:03:00 UTC |
| Description | In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code. |
Risk And Classification
Problem Types: CWE-74
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Lenovo | 20hm | - | All | All | All |
| Hardware | Lenovo | 20hm | - | All | All | All |
| Hardware | Lenovo | 20hn | - | All | All | All |
| Hardware | Lenovo | 20hn | - | All | All | All |
| Hardware | Lenovo | 20hq | - | All | All | All |
| Hardware | Lenovo | 20hq | - | All | All | All |
| Hardware | Lenovo | 20hr | - | All | All | All |
| Hardware | Lenovo | 20hr | - | All | All | All |
| Hardware | Lenovo | 20jb | - | All | All | All |
| Hardware | Lenovo | 20jb | - | All | All | All |
| Hardware | Lenovo | 20jc | - | All | All | All |
| Hardware | Lenovo | 20jc | - | All | All | All |
| Hardware | Lenovo | 20jd | - | All | All | All |
| Hardware | Lenovo | 20jd | - | All | All | All |
| Hardware | Lenovo | 20je | - | All | All | All |
| Hardware | Lenovo | 20je | - | All | All | All |
| Hardware | Lenovo | 20jf | - | All | All | All |
| Hardware | Lenovo | 20jf | - | All | All | All |
| Hardware | Lenovo | 20jg | - | All | All | All |
| Hardware | Lenovo | 20jg | - | All | All | All |
| Hardware | Lenovo | 20k3 | - | All | All | All |
| Hardware | Lenovo | 20k3 | - | All | All | All |
| Hardware | Lenovo | 20k4 | - | All | All | All |
| Hardware | Lenovo | 20k4 | - | All | All | All |
| Hardware | Lenovo | 20k5 | - | All | All | All |
| Hardware | Lenovo | 20k5 | - | All | All | All |
| Hardware | Lenovo | 20k6 | - | All | All | All |
| Hardware | Lenovo | 20k6 | - | All | All | All |
| Hardware | Lenovo | 20ke | - | All | All | All |
| Hardware | Lenovo | 20ke | - | All | All | All |
| Hardware | Lenovo | 20kf | - | All | All | All |
| Hardware | Lenovo | 20kf | - | All | All | All |
| Hardware | Lenovo | 20kg | - | All | All | All |
| Hardware | Lenovo | 20kg | - | All | All | All |
| Hardware | Lenovo | 20kh | - | All | All | All |
| Hardware | Lenovo | 20kh | - | All | All | All |
| Hardware | Lenovo | 20kj | - | All | All | All |
| Hardware | Lenovo | 20kj | - | All | All | All |
| Hardware | Lenovo | 20kk | - | All | All | All |
| Hardware | Lenovo | 20kk | - | All | All | All |
| Hardware | Lenovo | 20ld | - | All | All | All |
| Hardware | Lenovo | 20ld | - | All | All | All |
| Hardware | Lenovo | 20le | - | All | All | All |
| Hardware | Lenovo | 20le | - | All | All | All |
| Hardware | Lenovo | 20lf | - | All | All | All |
| Hardware | Lenovo | 20lf | - | All | All | All |
| Hardware | Lenovo | 20lg | - | All | All | All |
| Hardware | Lenovo | 20lg | - | All | All | All |
| Hardware | Lenovo | E42-80 | - | All | All | All |
| Hardware | Lenovo | E42-80 | - | All | All | All |
| Operating System | Lenovo | E42-80 Firmware | All | All | All | All |
| Operating System | Lenovo | E42-80 Firmware | All | All | All | All |
| Hardware | Lenovo | E42-80 Isk | - | All | All | All |
| Hardware | Lenovo | E42-80 Isk | - | All | All | All |
| Operating System | Lenovo | E42-80 Isk Firmware | All | All | All | All |
| Operating System | Lenovo | E42-80 Isk Firmware | All | All | All | All |
| Hardware | Lenovo | E52-80 | - | All | All | All |
| Hardware | Lenovo | E52-80 | - | All | All | All |
| Operating System | Lenovo | E52-80 Firmware | All | All | All | All |
| Operating System | Lenovo | E52-80 Firmware | All | All | All | All |
| Hardware | Lenovo | E52-80 Isk | - | All | All | All |
| Hardware | Lenovo | E52-80 Isk | - | All | All | All |
| Operating System | Lenovo | E52-80 Isk Firmware | All | All | All | All |
| Operating System | Lenovo | E52-80 Isk Firmware | All | All | All | All |
| Hardware | Lenovo | Miix 720-12ikb | - | All | All | All |
| Hardware | Lenovo | Miix 720-12ikb | - | All | All | All |
| Operating System | Lenovo | Miix 720-12ikb Firmware | All | All | All | All |
| Operating System | Lenovo | Miix 720-12ikb Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad E480 | - | All | All | All |
| Hardware | Lenovo | Thinkpad E480 | - | All | All | All |
| Operating System | Lenovo | Thinkpad E480 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad E480 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad E580 | - | All | All | All |
| Hardware | Lenovo | Thinkpad E580 | - | All | All | All |
| Operating System | Lenovo | Thinkpad E580 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad E580 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad L380 | - | All | All | All |
| Hardware | Lenovo | Thinkpad L380 | - | All | All | All |
| Operating System | Lenovo | Thinkpad L380 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad L380 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad L480 | - | All | All | All |
| Hardware | Lenovo | Thinkpad L480 | - | All | All | All |
| Operating System | Lenovo | Thinkpad L480 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad L480 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad L580 | - | All | All | All |
| Hardware | Lenovo | Thinkpad L580 | - | All | All | All |
| Operating System | Lenovo | Thinkpad L580 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad L580 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad P51 | - | All | All | All |
| Hardware | Lenovo | Thinkpad P51 | - | All | All | All |
| Hardware | Lenovo | Thinkpad P51s | - | All | All | All |
| Hardware | Lenovo | Thinkpad P51s | - | All | All | All |
| Operating System | Lenovo | Thinkpad P51s Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad P51s Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad P51 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad P51 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad P52 | - | All | All | All |
| Hardware | Lenovo | Thinkpad P52 | - | All | All | All |
| Hardware | Lenovo | Thinkpad P52s | - | All | All | All |
| Hardware | Lenovo | Thinkpad P52s | - | All | All | All |
| Operating System | Lenovo | Thinkpad P52s Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad P52s Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad P52 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad P52 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad P71 | - | All | All | All |
| Hardware | Lenovo | Thinkpad P71 | - | All | All | All |
| Operating System | Lenovo | Thinkpad P71 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad P71 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad P72 | - | All | All | All |
| Hardware | Lenovo | Thinkpad P72 | - | All | All | All |
| Operating System | Lenovo | Thinkpad P72 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad P72 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad S1 | - | All | All | All |
| Hardware | Lenovo | Thinkpad S1 | - | All | All | All |
| Operating System | Lenovo | Thinkpad S1 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad S1 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad T25 | - | All | All | All |
| Hardware | Lenovo | Thinkpad T25 | - | All | All | All |
| Operating System | Lenovo | Thinkpad T25 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad T25 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad T470 | - | All | All | All |
| Hardware | Lenovo | Thinkpad T470 | - | All | All | All |
| Hardware | Lenovo | Thinkpad T470p | - | All | All | All |
| Hardware | Lenovo | Thinkpad T470p | - | All | All | All |
| Operating System | Lenovo | Thinkpad T470p Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad T470p Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad T470s | - | All | All | All |
| Hardware | Lenovo | Thinkpad T470s | - | All | All | All |
| Operating System | Lenovo | Thinkpad T470s Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad T470s Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad T470 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad T470 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad T480 | - | All | All | All |
| Hardware | Lenovo | Thinkpad T480 | - | All | All | All |
| Hardware | Lenovo | Thinkpad T480s | - | All | All | All |
| Hardware | Lenovo | Thinkpad T480s | - | All | All | All |
| Operating System | Lenovo | Thinkpad T480s Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad T480s Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad T480 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad T480 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad T570 | - | All | All | All |
| Hardware | Lenovo | Thinkpad T570 | - | All | All | All |
| Operating System | Lenovo | Thinkpad T570 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad T570 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad T580 | - | All | All | All |
| Hardware | Lenovo | Thinkpad T580 | - | All | All | All |
| Operating System | Lenovo | Thinkpad T580 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad T580 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad X1 Carbon Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad X1 Carbon Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad X1 Tablet Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad X1 Tablet Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad X1 Yoga Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad X1 Yoga Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad X270 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad X270 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad X280 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad X280 Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad X380 Yoga | - | All | All | All |
| Hardware | Lenovo | Thinkpad X380 Yoga | - | All | All | All |
| Operating System | Lenovo | Thinkpad X380 Yoga Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad X380 Yoga Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad Yoga 11e | - | All | All | All |
| Hardware | Lenovo | Thinkpad Yoga 11e | - | All | All | All |
| Operating System | Lenovo | Thinkpad Yoga 11e Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad Yoga 11e Firmware | All | All | All | All |
| Hardware | Lenovo | Thinkpad Yoga 370 | - | All | All | All |
| Hardware | Lenovo | Thinkpad Yoga 370 | - | All | All | All |
| Operating System | Lenovo | Thinkpad Yoga 370 Firmware | All | All | All | All |
| Operating System | Lenovo | Thinkpad Yoga 370 Firmware | All | All | All | All |
| Hardware | Lenovo | V310-14ikb | - | All | All | All |
| Hardware | Lenovo | V310-14ikb | - | All | All | All |
| Operating System | Lenovo | V310-14ikb Firmware | All | All | All | All |
| Operating System | Lenovo | V310-14ikb Firmware | All | All | All | All |
| Hardware | Lenovo | V310-14isk | - | All | All | All |
| Hardware | Lenovo | V310-14isk | - | All | All | All |
| Operating System | Lenovo | V310-14isk Firmware | All | All | All | All |
| Operating System | Lenovo | V310-14isk Firmware | All | All | All | All |
| Hardware | Lenovo | V310-15ikb | - | All | All | All |
| Hardware | Lenovo | V310-15ikb | - | All | All | All |
| Operating System | Lenovo | V310-15ikb Firmware | All | All | All | All |
| Operating System | Lenovo | V310-15ikb Firmware | All | All | All | All |
| Hardware | Lenovo | V310-15isk | - | All | All | All |
| Hardware | Lenovo | V310-15isk | - | All | All | All |
| Operating System | Lenovo | V310-15isk Firmware | All | All | All | All |
| Operating System | Lenovo | V310-15isk Firmware | All | All | All | All |
| Hardware | Lenovo | V510-14ikb | - | All | All | All |
| Hardware | Lenovo | V510-14ikb | - | All | All | All |
| Operating System | Lenovo | V510-14ikb Firmware | All | All | All | All |
| Operating System | Lenovo | V510-14ikb Firmware | All | All | All | All |
| Hardware | Lenovo | V510-15ikb | - | All | All | All |
| Hardware | Lenovo | V510-15ikb | - | All | All | All |
| Operating System | Lenovo | V510-15ikb Firmware | All | All | All | All |
| Operating System | Lenovo | V510-15ikb Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| BIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack - US | CONFIRM | support.lenovo.com | Patch, Vendor Advisory |
| Intel Bootgaurd CVE-2018-12169 Local Security Bypass Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.