CVE-2018-9085
Medium
Description
A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.
SeverityMedium
CVSS4.9
Exploit probability—
Product
Lenovo System X3750 M4 Firmware
PublishedNov 16, 2018
First seenNov 16, 2018
How to fix
Update
- lenovo system_x3750_m4_firmwarea5e124b or later
- lenovo flex_system_x240_m4_firmwarea3e122b or later
- lenovo flex_system_x440_m4_firmwarecge122b or later
- ibm bladecenter_hs23_firmwaretke160c or later
- ibm bladecenter_hs23e_firmwareahe160c or later
- ibm flex_system_x220_m4_firmwarekse158c or later
- ibm flex_system_x222_m4_firmwarecce160c or later
- ibm flex_system_x240_m4_firmwareahe160c or later
- ibm flex_system_x280_x6_firmwaren3e132w or later
- ibm flex_system_x440_m4_firmwarecne162d or later
- ibm flex_system_x480_x6_firmwaren3e132w or later
- ibm flex_system_x880_x6_firmwaren2e130e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo system_x3750_m4_firmware | v < a5e124b | a5e124b |
| lenovo flex_system_x240_m4_firmware | v < a3e122b | a3e122b |
| lenovo flex_system_x440_m4_firmware | v < cge122b | cge122b |
| ibm bladecenter_hs23_firmware | v < tke160c | tke160c |
| ibm bladecenter_hs23e_firmware | v < ahe160c | ahe160c |
| ibm flex_system_x220_m4_firmware | v < kse158c | kse158c |
| ibm flex_system_x222_m4_firmware | v < cce160c | cce160c |
| ibm flex_system_x240_m4_firmware | v < ahe160c | ahe160c |
| ibm flex_system_x280_x6_firmware | v < n3e132w | n3e132w |
| ibm flex_system_x440_m4_firmware | v < cne162d | cne162d |
| ibm flex_system_x480_x6_firmware | v < n3e132w | n3e132w |
| ibm flex_system_x880_x6_firmware | v < n2e130e | n2e130e |
| ibm idataplex_dx360_m4_firmware | v < fhe120d | fhe120d |
| ibm idataplex_dx360_m4_water_cooled_firmware | v < fhe120d | fhe120d |
| ibm system_x3100_m4_firmware | v < jqe184c | jqe184c |
| ibm system_x3100_m5_firmware | v < j9e134c | j9e134c |
| ibm system_x3250_m4_firmware | v < jqe184c | jqe184c |
| ibm system_x3250_m5_firmware | v < jue134c | jue134c |
| ibm system_x3300_m4_firmware | v < yae156c | yae156c |
| ibm system_x3500_m4_firmware | v < y5e158c | y5e158c |
| ibm system_x3530_m4_firmware | v < bee164c | bee164c |
| ibm system_x3550_m4_firmware | v < d7e166d | d7e166d |
| ibm system_x3630_m4_firmware | v < vve162c | vve162c |
| ibm system_x3650_m4_firmware | v < vve160c | vve160c |
| ibm system_x3650_m4_bd_firmware | v < vve160c | vve160c |
| ibm system_x3650_m4_hd_firmware | v < vve160c | vve160c |
| ibm system_x3750_m4_firmware | v < koe160c | koe160c |
| ibm system_x3850_x6_firmware | v < a8e128c | a8e128c |
| ibm system_x3950_x6_firmware | v < bee164c | bee164c |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.