medium5.9
CVE-2018-9069
In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially a…
Impact
In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | 310s-14isk Firmware | before 1.15 |
| Hp | 320-15ikbra Firmware | before 6jcn24ww |
| Hp | 320-15ikbrn Firmware | before 6jcn24ww |
| Hp | 320-15ikbrn Touch Firmware | before 6jcn24ww |
| Hp | 320-17ikbrn | before 2.09 |
| Hp | 320s-14ikb | before 2.09 |
| Hp | 320s-15ikb Firmware | before 2.09 |
| Hp | 320s-15isk Firmware | before 2wcn38ww |
| Hp | 510s-14isk Firmware | before 1.15 |
| Hp | 520-15ikbrn Firmware | before 6jcn26ww |
| Hp | 520s-14ikb Firmware | before 2.09 |
| Hp | 710s Plus-13ikb 16g Firmware | before 2.55 |