CVE-2018-9062

Published: Jul 19, 2018Modified: Jun 17, 2026

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: NVD

Description

In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.

Affected (42)

39 products

Miix 720 12ikb Firmware

Thinkpad L380 Firmware

Thinkpad E480 Firmware

Thinkpad E580 Firmware

Thinkpad L480 Firmware

Thinkpad L580 Firmware

Thinkpad P51 Firmware

Thinkpad P51s Firmware

Thinkpad P52 Firmware

Thinkpad P52s Firmware

Thinkpad P71 Firmware

Thinkpad P72 Firmware

Thinkpad T25 Firmware

Thinkpad T470 Firmware

Thinkpad T470p Firmware

Thinkpad T470s Firmware

Thinkpad T480 Firmware

Thinkpad T480s Firmware

Thinkpad T570 Firmware

Thinkpad T580 Firmware

Thinkpad X380 Yoga Firmware

Thinkpad Yoga 11e Firmware

Thinkpad Yoga 370 Firmware

Thinkpad S1 Firmware

Thinkpad X1 Carbon Firmware

Thinkpad X1 Tablet Firmware

Thinkpad X1 Yoga Firmware

Thinkpad X270 Firmware

Thinkpad X280 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo E42 80 Firmware	Before 2wcn40ww

Running on/with	Platform Versions
Lenovo E42 80	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo E42 80 Isk Firmware	Before 0zcn48ww

Running on/with	Platform Versions
Lenovo E42 80 Isk	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo E52 80 Firmware	Before 2wcn40ww

Running on/with	Platform Versions
Lenovo E52 80	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo E52 80 Isk Firmware	Before 0zcn48ww

Running on/with	Platform Versions
Lenovo E52 80 Isk	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Miix 720 12ikb Firmware	Before 3scn68ww

Running on/with	Platform Versions
Lenovo Miix 720 12ikb	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V310 14ikb Firmware	Before 2wcn40ww

Running on/with	Platform Versions
Lenovo V310 14ikb	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V310 14isk Firmware	Before 0zcn48ww

Running on/with	Platform Versions
Lenovo V310 14isk	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V310 15ikb Firmware	Before 2wcn40ww

Running on/with	Platform Versions
Lenovo V310 15ikb	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V310 15isk Firmware	Before 0zcn48ww

Running on/with	Platform Versions
Lenovo V310 15isk	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V510 14ikb Firmware	Before 2wcn40ww

Running on/with	Platform Versions
Lenovo V510 14ikb	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V510 15ikb Firmware	Before 2wcn40ww

Running on/with	Platform Versions
Lenovo V510 15ikb	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L380 Firmware	Before r0ret28w

Running on/with	Platform Versions
Lenovo Thinkpad L380	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E480 Firmware	Before r0pet47w

Running on/with	Platform Versions
Lenovo Thinkpad E480	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E580 Firmware	Before r0pet47w

Running on/with	Platform Versions
Lenovo Thinkpad E580	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L480 Firmware	Before r0qet47w

Running on/with	Platform Versions
Lenovo Thinkpad L480	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L580 Firmware	Before r0qet47w

Running on/with	Platform Versions
Lenovo Thinkpad L580	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P51 Firmware	Before n1uet71w

Running on/with	Platform Versions
Lenovo Thinkpad P51	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P51s Firmware	Before n1vet45w

Running on/with	Platform Versions
Lenovo Thinkpad P51s	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P52 Firmware	Before n2cet28w

Running on/with	Platform Versions
Lenovo Thinkpad P52	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P52s Firmware	Before n27et27w

Running on/with	Platform Versions
Lenovo Thinkpad P52s	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P71 Firmware	Before n1tet50w

Running on/with	Platform Versions
Lenovo Thinkpad P71	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P72 Firmware	Before n2cet28w

Running on/with	Platform Versions
Lenovo Thinkpad P72	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T25 Firmware	Before n1qet77w

Running on/with	Platform Versions
Lenovo Thinkpad T25	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T470 Firmware	Before n1qet77w

Running on/with	Platform Versions
Lenovo Thinkpad T470	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T470p Firmware	Before r0fet44w

Running on/with	Platform Versions
Lenovo Thinkpad T470p	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T470s Firmware	Before n1wet49w

Running on/with	Platform Versions
Lenovo Thinkpad T470s	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T480 Firmware	Before n24et41w

Running on/with	Platform Versions
Lenovo Thinkpad T480	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T480s Firmware	Before n22et48w

Running on/with	Platform Versions
Lenovo Thinkpad T480s	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T570 Firmware	Before n1vet45w

Running on/with	Platform Versions
Lenovo Thinkpad T570	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T580 Firmware	Before n27et27w

Running on/with	Platform Versions
Lenovo Thinkpad T580	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X380 Yoga Firmware	Before r0set29w

Running on/with	Platform Versions
Lenovo Thinkpad X380 Yoga	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad Yoga 11e Firmware	Before r0vet23w

Running on/with	Platform Versions
Lenovo Thinkpad Yoga 11e	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad Yoga 370 Firmware	Before r0het48w

Running on/with	Platform Versions
Lenovo Thinkpad Yoga 370	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad S1 Firmware	Before r0het48w

Running on/with	Platform Versions
Lenovo Thinkpad S1	All versions

Configuration I

2 platform

Running on/with	Platform Versions
Lenovo 20hq	All versions
Lenovo 20hr	All versions

Configuration J

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Carbon Firmware	Before n23et52w

Running on/with	Platform Versions
Lenovo 20k3	All versions
Lenovo 20k4	All versions

Configuration K

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Carbon Firmware	Before n1met49w

Running on/with	Platform Versions
Lenovo 20kg	All versions
Lenovo 20kh	All versions

Configuration L

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Tablet Firmware	Before n1oet45w

Running on/with	Platform Versions
Lenovo 20jb	All versions
Lenovo 20jc	All versions

Configuration M

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Tablet Firmware	Before n1zet69w

Running on/with	Platform Versions
Lenovo 20kj	All versions
Lenovo 20kk	All versions

Configuration N

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Yoga Firmware	Before n1net42w

Running on/with	Platform Versions
Lenovo 20jd	All versions
Lenovo 20je	All versions
Lenovo 20jf	All versions
Lenovo 20jg	All versions

Configuration O

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Yoga Firmware	Before n25et38w

Running on/with	Platform Versions
Lenovo 20ld	All versions
Lenovo 20le	All versions
Lenovo 20lf	All versions
Lenovo 20lg	All versions

Configuration P

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X270 Firmware	Before r0iet53w

Running on/with	Platform Versions
Lenovo 20hm	All versions
Lenovo 20hn	All versions
Lenovo 20k5	All versions
Lenovo 20k6	All versions

Configuration Q

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X280 Firmware	Before n20et33w

Running on/with	Platform Versions
Lenovo 20ke	All versions
Lenovo 20kf	All versions

Related CWEs

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

References (4)

http://www.securityfocus.com/bid/105387

Source: psirt@lenovo.com

Third Party AdvisoryVDB Entry

https://support.lenovo.com/us/en/solutions/LEN-20527

Source: psirt@lenovo.com

PatchVendor Advisory

http://www.securityfocus.com/bid/105387

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://support.lenovo.com/us/en/solutions/LEN-20527

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.