CVE-2018-9069

BIOS Write Protection Race Condition

State: Published
Severity: Not scored
Published: Oct 2, 2018
Updated: Aug 5, 2024
Reserved: Mar 27, 2018

Description

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
IdeaPadLenovo Group LTD	various to before variousAffected

References

https://support.lenovo.com/us/en/solutions/LEN-20184

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.