CVE-2018-9069
Medium
Description
In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.
SeverityMedium
CVSS5.9
Exploit probability—
ProductHp Ideapad 2in1 14 Firmware
PublishedOct 2, 2018
First seenOct 2, 2018
How to fix
Update
- hp 310s-14isk_firmware1.15 or later
- hp 320-15ikbra_firmware6jcn24ww or later
- hp 320-15ikbrn_firmware6jcn24ww or later
- hp 320-15ikbrn_touch_firmware6jcn24ww or later
- hp 320-17ikbrn2.09 or later
- hp 320s-14ikb2.09 or later
- hp 320s-15ikb_firmware2.09 or later
- hp 320s-15isk_firmware2wcn38ww or later
- hp 510s-14isk_firmware1.15 or later
- hp 520-15ikbrn_firmware6jcn26ww or later
- hp 520s-14ikb_firmware2.09 or later
- hp 710s_plus-13ikb_16g_firmware2.55 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hp ideapad_2in1_14_firmware | No range specified | — |
| hp 310s-14isk_firmware | v < 1.15 | 1.15 |
| hp 320-15ikbra_firmware | v < 6jcn24ww | 6jcn24ww |
| hp 320-15ikbrn_firmware | v < 6jcn24ww | 6jcn24ww |
| hp 320-15ikbrn_touch_firmware | v < 6jcn24ww | 6jcn24ww |
| hp 320-17ikbrn | v < 2.09 | 2.09 |
| hp 320s-14ikb | v < 2.09 | 2.09 |
| hp 320s-15ikb_firmware | v < 2.09 | 2.09 |
| hp 320s-15isk_firmware | v < 2wcn38ww | 2wcn38ww |
| hp 510s-14isk_firmware | v < 1.15 | 1.15 |
| hp 520-15ikbrn_firmware | v < 6jcn26ww | 6jcn26ww |
| hp 520s-14ikb_firmware | v < 2.09 | 2.09 |
| hp 710s_plus-13ikb_16g_firmware | v < 2.55 | 2.55 |
| hp 710s_plus-3ikb_firmware | v < 2.55 | 2.55 |
| hp xiaoxinair13ikbpro_firmware | v < 2.55 | 2.55 |
| hp 710s_plus_touch-13ikb_firmware | v < 2.55 | 2.55 |
| hp 720s-13ikb_firmware | v < 5scn38ww | 5scn38ww |
| hp b320-14ikb_firmware | No range specified | — |
| lenovo e42-80_firmware | v < 2wcn38ww | 2wcn38ww |
| lenovo e52-80_firmware | v < 2wcn38ww | 2wcn38ww |
| hp flex_4-1470_firmware | v < 1.15 | 1.15 |
| hp flex_5-1470_firmware | v < 2.09 | 2.09 |
| hp flex_5-1570_firmware | v < 2.09 | 2.09 |
| hp lenovo_ideapad_320-14ikb\(i\+a\)_firmware | No range specified | — |
| hp lenovo_ideapad_320-14ikb\(i\+n\)_firmware | No range specified | — |
| hp lenovo_ideapad_320-15abr_firmware | No range specified | — |
| hp lenovo_ideapad_320-15ikb\(i\+n\)_firmware | No range specified | — |
| hp lenovo_ideapad_320s-14ikbr_firmware | No range specified | — |
| hp lenovo_ideapad_320s-15ikbr_firmware | No range specified | — |
| hp lenovo_ideapad_520s-14ikbr_firmware | No range specified | — |
| hp lenovo_ideapad_720s-14ikb_firmware | v < 6jcn26ww | 6jcn26ww |
| hp lenovo_ideapad_flex_5-1470_firmware | v < 6jcn26ww | 6jcn26ww |
| hp lenovo_ideapad_flex_5-1570_firmware | v < 6jcn26ww | 6jcn26ww |
| hp lenovo_ideapad_y520-15ikbn_firmware | No range specified | — |
| hp lenovo_tianyi_310-14ikb_firmware | No range specified | — |
| hp lenovo_tianyi_310-15ikb_firmware | No range specified | — |
| hp lenovo_y520-15ikba_firmware | v < 5jcn25ww | 5jcn25ww |
| hp lenovo_y520-15ikbm_firmware | v < 5jcn25ww | 5jcn25ww |
| hp lenovo_yoga_520-14ikb_firmware | v < 6jcn26ww | 6jcn26ww |
| hp lenovo_yoga_520-15ikb_firmware | v < 6jcn26ww | 6jcn26ww |
| hp miix_720-12ikb | v < 3scn66ww | 3scn66ww |
| hp nano110-14ikb_firmware | No range specified | — |
| hp nano110-15ikb_firmware | v < 5xcn24ww | 5xcn24ww |
| hp rescuer_r720-15ikbm_firmware | v < 5xcn24ww | 5xcn24ww |
| hp rescuer_y520-15ikbm_firmware | v < 5xcn24ww | 5xcn24ww |
| lenovo v310-14ikb_firmware | v < 2wcn38ww | 2wcn38ww |
| lenovo v310-14isk_firmware | v < 4.07 | 4.07 |
| lenovo v310-15ikb_firmware | v < 2wcn38ww | 2wcn38ww |
| lenovo v310-15isk_firmware | v < 0zcn47ww | 0zcn47ww |
| hp v330-14ikb_firmware | v < 4.07 | 4.07 |
| hp v330-14isk_firmware | v < 4.07 | 4.07 |
| lenovo v510-14ikb_firmware | v < 2wcn38ww | 2wcn38ww |
| lenovo v510-15ikb_firmware | v < 2wcn38ww | 2wcn38ww |
| hp yoga_310-11iap_firmware | v < 6.7 | 6.7 |
| hp yoga_510-14isk_firmware | v < 1.15 | 1.15 |
| hp yoga_720-13ikb_firmware | v < 2.05 | 2.05 |
| hp yoga_720-13ikbr_firmware | v < 2.07 | 2.07 |
| hp yoga_720-15ikb_firmware | v < 2.05 | 2.05 |
| hp lenovo_v720-14_firmware | v < 2.12 | 2.12 |
| hp 7000_u42_firmware | v < 2.09 | 2.09 |
| hp 7000-15_u42_firmware | v < 2.09 | 2.09 |
| hp r720-15ikba_firmware | v < 5jcn25ww | 5jcn25ww |
| hp y520-15ikba_firmware | v < 5jcn25ww | 5jcn25ww |
| hp r720-15ikbn_firmware | v < 4gcn38ww | 4gcn38ww |
| hp y520-15ikbn_firmware | v < 4gcn38ww | 4gcn38ww |
| hp y720-15ikb_firmware | v < 4gcn38ww | 4gcn38ww |
| hp lenovo_y720-15ikb_firmware | v < 4gcn38ww | 4gcn38ww |
| hp e43-80_kbl_firmware | v < 4.07 | 4.07 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.