CVE-2018-9062: BIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack

First published: Thu Jul 19 2018(Updated: )

In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.

Credit: psirt@lenovo.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/references
• agent/type
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/remedy
• agent/title
• agent/author
• agent/weakness
• agent/severity
• agent/description
• agent/first-publish-date
• agent/event
• agent/source
• agent/softwarecombine
• agent/tags
• collector/nvd-index
• agent/software-canonical-lookup-request
• vendor/lenovo
• canonical/lenovo e42-80 firmware
• canonical/lenovo e42-80
• canonical/lenovo e42-80 isk
• canonical/lenovo e42-80 isk firmware
• canonical/lenovo e52-80 firmware
• canonical/lenovo e52-80
• canonical/lenovo e52-80 isk firmware
• canonical/lenovo miix 720-12ikb firmware
• canonical/lenovo miix 720-12ikb
• canonical/lenovo v310-14ikb firmware
• canonical/lenovo v310-14ikb
• canonical/lenovo v310-14isk firmware
• canonical/lenovo v310-14isk
• canonical/lenovo v310-15ikb firmware
• canonical/lenovo v310-15ikb
• canonical/lenovo v310-15isk firmware
• canonical/lenovo v310-15isk
• canonical/lenovo v510-14ikb firmware
• canonical/lenovo v510-14ikb
• canonical/lenovo v510-15ikb firmware
• canonical/lenovo v510-15ikb
• canonical/lenovo thinkpad l380 firmware
• canonical/lenovo thinkpad l380
• canonical/lenovo thinkpad e480 firmware
• canonical/lenovo thinkpad e480
• canonical/lenovo thinkpad e580 firmware
• canonical/lenovo thinkpad e580
• canonical/lenovo thinkpad l480 firmware
• canonical/lenovo thinkpad l480
• canonical/lenovo thinkpad l580 firmware
• canonical/lenovo thinkpad l580
• canonical/lenovo thinkpad p51 firmware
• canonical/lenovo thinkpad p51
• canonical/lenovo thinkpad p51s firmware
• canonical/lenovo thinkpad p52 firmware
• canonical/lenovo thinkpad p52
• canonical/lenovo thinkpad p52s firmware
• canonical/lenovo thinkpad p71 firmware
• canonical/lenovo thinkpad p71
• canonical/lenovo thinkpad p72 firmware
• canonical/lenovo thinkpad p72
• canonical/lenovo thinkpad t25 firmware
• canonical/lenovo thinkpad t25
• canonical/lenovo thinkpad t470 firmware
• canonical/lenovo thinkpad t470
• canonical/lenovo thinkpad t470p firmware
• canonical/lenovo thinkpad t470p
• canonical/lenovo thinkpad t470s firmware
• canonical/lenovo thinkpad t470s
• canonical/lenovo thinkpad t480 firmware
• canonical/lenovo thinkpad t480
• canonical/lenovo thinkpad t480s firmware
• canonical/lenovo thinkpad t480s
• canonical/lenovo thinkpad t570 firmware
• canonical/lenovo thinkpad t570
• canonical/lenovo thinkpad t580 firmware
• canonical/lenovo thinkpad t580
• canonical/lenovo thinkpad x380 yoga firmware
• canonical/lenovo thinkpad x380 yoga
• canonical/lenovo thinkpad yoga 11e firmware
• canonical/lenovo thinkpad yoga 11e
• canonical/lenovo thinkpad yoga 370 firmware
• canonical/lenovo thinkpad yoga 370
• canonical/lenovo thinkpad s1 firmware
• canonical/lenovo thinkpad s1
• canonical/lenovo thinkpad x1 carbon firmware
• canonical/lenovo 20hq
• canonical/lenovo 20hr
• canonical/lenovo 20k3
• canonical/lenovo 20k4
• canonical/lenovo 20kg
• canonical/lenovo 20kh
• canonical/lenovo thinkpad x1 tablet firmware
• canonical/lenovo 20jb
• canonical/lenovo 20jc
• canonical/lenovo 20kj
• canonical/lenovo 20kk
• canonical/lenovo thinkpad x1 yoga firmware
• canonical/lenovo 20jd
• canonical/lenovo 20je
• canonical/lenovo 20jf
• canonical/lenovo 20jg
• canonical/lenovo 20ld
• canonical/lenovo 20le
• canonical/lenovo 20lf
• canonical/lenovo 20lg
• canonical/lenovo thinkpad x270 firmware
• canonical/lenovo 20hm
• canonical/lenovo 20hn
• canonical/lenovo 20k5
• canonical/lenovo 20k6
• canonical/lenovo thinkpad x280 firmware
• canonical/lenovo 20ke
• canonical/lenovo 20kf