CVE-2018-9062 : In some Lenovo ThinkPad products, one BIOS region is not properly included in th

In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.

Published 2018-07-19 19:29:01

Updated 2019-10-15 18:04:00

Source Lenovo Group Ltd.

View at NVD, CVE.org

Products affected by CVE-2018-9062

Lenovo » Thinkpad T470 Firmware
Versions before (<) n1qet77w
cpe:2.3:o:lenovo:thinkpad_t470_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad T470 » Version: N/A
Lenovo » Thinkpad T470s Firmware
Versions before (<) n1wet49w
cpe:2.3:o:lenovo:thinkpad_t470s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad T470s » Version: N/A
Lenovo » Thinkpad T570 Firmware
Versions before (<) n1vet45w
cpe:2.3:o:lenovo:thinkpad_t570_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad T570 » Version: N/A
Lenovo » Thinkpad T580 Firmware
Versions before (<) n27et27w
cpe:2.3:o:lenovo:thinkpad_t580_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad T580 » Version: N/A
Lenovo » Thinkpad X1 Carbon Firmware
Versions before (<) n1met49w
cpe:2.3:o:lenovo:thinkpad_x1_carbon_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » 20hq » Version: N/A
When used together with: Lenovo » 20hr » Version: N/A
Lenovo » Thinkpad X1 Carbon Firmware
Versions before (<) n23et52w
cpe:2.3:o:lenovo:thinkpad_x1_carbon_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » 20k3 » Version: N/A
When used together with: Lenovo » 20k4 » Version: N/A
Lenovo » Thinkpad X1 Yoga Firmware
Versions before (<) n1net42w
cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » 20jd » Version: N/A
When used together with: Lenovo » 20je » Version: N/A
When used together with: Lenovo » 20jf » Version: N/A
When used together with: Lenovo » 20jg » Version: N/A
Lenovo » Thinkpad X1 Yoga Firmware
Versions before (<) n25et38w
cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » 20ld » Version: N/A
When used together with: Lenovo » 20le » Version: N/A
When used together with: Lenovo » 20lf » Version: N/A
When used together with: Lenovo » 20lg » Version: N/A
Lenovo » Thinkpad X280 Firmware
Versions before (<) n20et33w
cpe:2.3:o:lenovo:thinkpad_x280_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » 20ke » Version: N/A
When used together with: Lenovo » 20kf » Version: N/A
Lenovo » Thinkpad Yoga 11e Firmware
Versions before (<) r0vet23w
cpe:2.3:o:lenovo:thinkpad_yoga_11e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad Yoga 11e » Version: N/A
Lenovo » Thinkpad E480 Firmware
Versions before (<) r0pet47w
cpe:2.3:o:lenovo:thinkpad_e480_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad E480 » Version: N/A
Lenovo » Thinkpad E580 Firmware
Versions before (<) r0pet47w
cpe:2.3:o:lenovo:thinkpad_e580_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad E580 » Version: N/A
Lenovo » Thinkpad L380 Firmware
Versions before (<) r0ret28w
cpe:2.3:o:lenovo:thinkpad_l380_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L380 » Version: N/A
Lenovo » Thinkpad L480 Firmware
Versions before (<) r0qet47w
cpe:2.3:o:lenovo:thinkpad_l480_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L480 » Version: N/A
Lenovo » Thinkpad L580 Firmware
Versions before (<) r0qet47w
cpe:2.3:o:lenovo:thinkpad_l580_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad L580 » Version: N/A
Lenovo » Thinkpad T470p Firmware
Versions before (<) r0fet44w
cpe:2.3:o:lenovo:thinkpad_t470p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad T470p » Version: N/A
Lenovo » Thinkpad X270 Firmware
Versions before (<) r0iet53w
cpe:2.3:o:lenovo:thinkpad_x270_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » 20hm » Version: N/A
When used together with: Lenovo » 20hn » Version: N/A
When used together with: Lenovo » 20k5 » Version: N/A
When used together with: Lenovo » 20k6 » Version: N/A
Lenovo » Thinkpad X380 Yoga Firmware
Versions before (<) r0set29w
cpe:2.3:o:lenovo:thinkpad_x380_yoga_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad X380 Yoga » Version: N/A
Lenovo » Thinkpad Yoga 370 Firmware
Versions before (<) r0het48w
cpe:2.3:o:lenovo:thinkpad_yoga_370_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad Yoga 370 » Version: N/A
Lenovo » E42-80 Firmware
Versions before (<) 2wcn40ww
cpe:2.3:o:lenovo:e42-80_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » E42-80 » Version: N/A
Lenovo » E42-80 Isk Firmware
Versions before (<) 0zcn48ww
cpe:2.3:o:lenovo:e42-80_isk_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » E42-80 Isk » Version: N/A
Lenovo » E52-80 Firmware
Versions before (<) 2wcn40ww
cpe:2.3:o:lenovo:e52-80_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » E52-80 » Version: N/A
Lenovo » E52-80 Isk Firmware
Versions before (<) 0zcn48ww
cpe:2.3:o:lenovo:e52-80_isk_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » E52-80 Isk » Version: N/A
Lenovo » Miix 720-12ikb Firmware
Versions before (<) 3scn68ww
cpe:2.3:o:lenovo:miix_720-12ikb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Miix 720-12ikb » Version: N/A
Lenovo » V310-14ikb Firmware
Versions before (<) 2wcn40ww
cpe:2.3:o:lenovo:v310-14ikb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » V310-14ikb » Version: N/A
Lenovo » V310-14isk Firmware
Versions before (<) 0zcn48ww
cpe:2.3:o:lenovo:v310-14isk_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » V310-14isk » Version: N/A
Lenovo » V310-15ikb Firmware
Versions before (<) 2wcn40ww
cpe:2.3:o:lenovo:v310-15ikb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » V310-15ikb » Version: N/A
Lenovo » V310-15isk Firmware
Versions before (<) 0zcn48ww
cpe:2.3:o:lenovo:v310-15isk_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » V310-15isk » Version: N/A
Lenovo » V510-14ikb Firmware
Versions before (<) 2wcn40ww
cpe:2.3:o:lenovo:v510-14ikb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » V510-14ikb » Version: N/A
Lenovo » V510-15ikb Firmware
Versions before (<) 2wcn40ww
cpe:2.3:o:lenovo:v510-15ikb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » V510-15ikb » Version: N/A
Lenovo » Thinkpad P51 Firmware
Versions before (<) n1uet71w
cpe:2.3:o:lenovo:thinkpad_p51_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad P51 » Version: N/A
Lenovo » Thinkpad P51s Firmware
Versions before (<) n1vet45w
cpe:2.3:o:lenovo:thinkpad_p51s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad P51s » Version: N/A
Lenovo » Thinkpad P52 Firmware
Versions before (<) n2cet28w
cpe:2.3:o:lenovo:thinkpad_p52_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad P52 » Version: N/A
Lenovo » Thinkpad P52s Firmware
Versions before (<) n27et27w
cpe:2.3:o:lenovo:thinkpad_p52s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad P52s » Version: N/A
Lenovo » Thinkpad P71 Firmware
Versions before (<) n1tet50w
cpe:2.3:o:lenovo:thinkpad_p71_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad P71 » Version: N/A
Lenovo » Thinkpad P72 Firmware
Versions before (<) n2cet28w
cpe:2.3:o:lenovo:thinkpad_p72_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad P72 » Version: N/A
Lenovo » Thinkpad T25 Firmware
Versions before (<) n1qet77w
cpe:2.3:o:lenovo:thinkpad_t25_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad T25 » Version: N/A
Lenovo » Thinkpad T480 Firmware
Versions before (<) n24et41w
cpe:2.3:o:lenovo:thinkpad_t480_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad T480 » Version: N/A
Lenovo » Thinkpad T480s Firmware
Versions before (<) n22et48w
cpe:2.3:o:lenovo:thinkpad_t480s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad T480s » Version: N/A
Lenovo » Thinkpad S1 Firmware
Versions before (<) r0het48w
cpe:2.3:o:lenovo:thinkpad_s1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkpad S1 » Version: N/A
Lenovo » Thinkpad X1 Tablet Firmware
Versions before (<) n1oet45w
cpe:2.3:o:lenovo:thinkpad_x1_tablet_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » 20jb » Version: N/A
When used together with: Lenovo » 20jc » Version: N/A
Lenovo » Thinkpad X1 Tablet Firmware
Versions before (<) n1zet69w
cpe:2.3:o:lenovo:thinkpad_x1_tablet_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » 20kj » Version: N/A
When used together with: Lenovo » 20kk » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-9062

EPSS FAQ

0.15%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 32 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-9062

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
6.8	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	0.9	5.9	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-9062

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-9062

http://www.securityfocus.com/bid/105387

Intel Bootgaurd CVE-2018-12169 Local Security Bypass Vulnerability
Third Party Advisory;VDB Entry

CVEs referencing this url
https://support.lenovo.com/us/en/solutions/LEN-20527

BIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack - US
Patch;Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2018-9062

Products affected by CVE-2018-9062

Exploit prediction scoring system (EPSS) score for CVE-2018-9062

CVSS scores for CVE-2018-9062

CWE ids for CVE-2018-9062

References for CVE-2018-9062