CVSS 3.1
5.9 mediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:HCVE-2018-9069
Medium (5.9) in hp. EPSS 0.5% chance of exploitation in the next 30 days.
In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
- CWE
- CWE-362
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hp:310s-14isk_firmware
- hp:320-15ikbra_firmware
- hp:320-15ikbrn_firmware
- hp:320-15ikbrn_touch_firmware
- hp:320-17ikbrn
- hp:320s-14ikb
- hp:320s-15ikb_firmware
- hp:320s-15isk_firmware
- hp:510s-14isk_firmware
- hp:520-15ikbrn_firmware
- hp:520s-14ikb_firmware
- hp:7000-15_u42_firmware
- hp:7000_u42_firmware
- hp:710s_plus-13ikb_16g_firmware
- hp:710s_plus-3ikb_firmware
- hp:710s_plus_touch-13ikb_firmware
- hp:720s-13ikb_firmware
- hp:b320-14ikb_firmware
- hp:e43-80_kbl_firmware
- hp:flex_4-1470_firmware
- hp:flex_5-1470_firmware
- hp:flex_5-1570_firmware
- hp:ideapad_2in1_14_firmware
- hp:lenovo_ideapad_320-14ikb\(i\+a\)_firmware
- hp:lenovo_ideapad_320-14ikb\(i\+n\)_firmware
- hp:lenovo_ideapad_320-15abr_firmware
- hp:lenovo_ideapad_320-15ikb\(i\+n\)_firmware
- hp:lenovo_ideapad_320s-14ikbr_firmware
- hp:lenovo_ideapad_320s-15ikbr_firmware
- hp:lenovo_ideapad_520s-14ikbr_firmware
- hp:lenovo_ideapad_720s-14ikb_firmware
- hp:lenovo_ideapad_flex_5-1470_firmware
- hp:lenovo_ideapad_flex_5-1570_firmware
- hp:lenovo_ideapad_y520-15ikbn_firmware
- hp:lenovo_tianyi_310-14ikb_firmware
- hp:lenovo_tianyi_310-15ikb_firmware
- hp:lenovo_v720-14_firmware
- hp:lenovo_y520-15ikba_firmware
- hp:lenovo_y520-15ikbm_firmware
- hp:lenovo_y720-15ikb_firmware
- hp:lenovo_yoga_520-14ikb_firmware
- hp:lenovo_yoga_520-15ikb_firmware
- hp:miix_720-12ikb
- hp:nano110-14ikb_firmware
- hp:nano110-15ikb_firmware
- hp:r720-15ikba_firmware
- hp:r720-15ikbn_firmware
- hp:rescuer_r720-15ikbm_firmware
- hp:rescuer_y520-15ikbm_firmware
- hp:v330-14ikb_firmware