Medium severity5.9NVD Advisory· Published Oct 2, 2018· Updated Jun 17, 2026
CVE-2018-9069
CVE-2018-9069
Description
In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.
Affected products
70- cpe:2.3:o:hp:320-15ikbrn_touch_firmware:*:*:*:*:*:*:*:*Range: <6jcn24ww
- cpe:2.3:o:hp:710s_plus-13ikb_16g_firmware:*:*:*:*:*:*:*:*Range: <2.55
- cpe:2.3:o:hp:710s_plus_touch-13ikb_firmware:*:*:*:*:*:*:*:*Range: <2.55
- cpe:2.3:o:hp:b320-14ikb_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hp:ideapad_2in1_14_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hp:lenovo_ideapad_320-14ikb\(i\+a\)_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hp:lenovo_ideapad_320-14ikb\(i\+n\)_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hp:lenovo_ideapad_320-15abr_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hp:lenovo_ideapad_320-15ikb\(i\+n\)_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hp:lenovo_ideapad_320s-14ikbr_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hp:lenovo_ideapad_320s-15ikbr_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hp:lenovo_ideapad_520s-14ikbr_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hp:lenovo_ideapad_720s-14ikb_firmware:*:*:*:*:*:*:*:*Range: <6jcn26ww
- cpe:2.3:o:hp:lenovo_ideapad_flex_5-1470_firmware:*:*:*:*:*:*:*:*Range: <6jcn26ww
- cpe:2.3:o:hp:lenovo_ideapad_flex_5-1570_firmware:*:*:*:*:*:*:*:*Range: <6jcn26ww
- cpe:2.3:o:hp:lenovo_ideapad_y520-15ikbn_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hp:lenovo_tianyi_310-14ikb_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hp:lenovo_tianyi_310-15ikb_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hp:lenovo_y520-15ikba_firmware:*:*:*:*:*:*:*:*Range: <5jcn25ww
- cpe:2.3:o:hp:lenovo_y520-15ikbm_firmware:*:*:*:*:*:*:*:*Range: <5jcn25ww
- cpe:2.3:o:hp:lenovo_y720-15ikb_firmware:*:*:*:*:*:*:*:*Range: <4gcn38ww
- cpe:2.3:o:hp:lenovo_yoga_520-14ikb_firmware:*:*:*:*:*:*:*:*Range: <6jcn26ww
- cpe:2.3:o:hp:lenovo_yoga_520-15ikb_firmware:*:*:*:*:*:*:*:*Range: <6jcn26ww
- cpe:2.3:o:hp:nano110-14ikb_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hp:nano110-15ikb_firmware:*:*:*:*:*:*:*:*Range: <5xcn24ww
- cpe:2.3:o:hp:rescuer_r720-15ikbm_firmware:*:*:*:*:*:*:*:*Range: <5xcn24ww
- cpe:2.3:o:hp:rescuer_y520-15ikbm_firmware:*:*:*:*:*:*:*:*Range: <5xcn24ww
- cpe:2.3:o:hp:xiaoxinair13ikbpro_firmware:*:*:*:*:*:*:*:*Range: <2.55
- cpe:2.3:o:hp:yoga_720-13ikbr_firmware:*:*:*:*:*:*:*:*Range: <2.07
Patches
Vulnerability mechanics
References
1- support.lenovo.com/us/en/solutions/LEN-20184nvdVendor Advisory
News mentions
0No linked articles in our index yet.