Skip to content
OpenAdvisories
Unscored CVE-2018-9069 EUVD-2018-20672GHSA-p7mj-q6cv-6qw2

BIOS Write Protection Race Condition

Published Oct 2, 2018 · Updated Aug 5, 2024 · Assigned by lenovo

Description

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.

Affected products

VendorProductAffectedFixed
Lenovo Group IdeaPad various – < various various

References