medium6.8
CVE-2018-9062
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
Impact
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | E42-80 Firmware | before 2wcn40ww |
| Lenovo | E42-80 Isk Firmware | before 0zcn48ww |
| Lenovo | E52-80 Firmware | before 2wcn40ww |
| Lenovo | E52-80 Isk Firmware | before 0zcn48ww |
| Lenovo | Miix 720-12ikb Firmware | before 3scn68ww |
| Lenovo | V310-14ikb Firmware | before 2wcn40ww |
| Lenovo | V310-14isk Firmware | before 0zcn48ww |
| Lenovo | V310-15ikb Firmware | before 2wcn40ww |
| Lenovo | V310-15isk Firmware | before 0zcn48ww |
| Lenovo | V510-14ikb Firmware | before 2wcn40ww |
| Lenovo | V510-15ikb Firmware | before 2wcn40ww |
| Lenovo | Thinkpad L380 Firmware | before r0ret28w |