Description
A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | System x UEFI | unspecified – < varies | varies |
| IBM | System x UEFI | unspecified – < varies | varies |