CVE-2018-9085

Summary

A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.

Affected Software

VendorProductVersion RangeStatus
LenovoSystem x UEFIunspecified < variesaffected
IBMSystem x UEFIunspecified < variesaffected

Weaknesses

  • Denial of service

ADP Enrichment

CVE Program Container

Additional References

References