VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 16, 2018· Updated Aug 5, 2024

Missing System x Flash Memory Write Protection Lock Bit

CVE-2018-9085

Description

A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.

Affected products

3
  • Lenovo/System xllm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: unspecified
  • IBM/System x UEFIv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.