7.2
CVE-2018-9062
- EPSS 0.15%
- Veröffentlicht 19.07.2018 19:29:00
- Zuletzt bearbeitet 21.11.2024 04:14:53
- Quelle psirt@lenovo.com
- Teams Watchlist Login
- Unerledigt Login
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ E42-80 Firmware Version < 2wcn40ww
Lenovo ≫ E42-80 Isk Firmware Version < 0zcn48ww
Lenovo ≫ E52-80 Firmware Version < 2wcn40ww
Lenovo ≫ E52-80 Isk Firmware Version < 0zcn48ww
Lenovo ≫ Miix 720-12ikb Firmware Version < 3scn68ww
Lenovo ≫ V310-14ikb Firmware Version < 2wcn40ww
Lenovo ≫ V310-14isk Firmware Version < 0zcn48ww
Lenovo ≫ V310-15ikb Firmware Version < 2wcn40ww
Lenovo ≫ V310-15isk Firmware Version < 0zcn48ww
Lenovo ≫ V510-14ikb Firmware Version < 2wcn40ww
Lenovo ≫ V510-15ikb Firmware Version < 2wcn40ww
Lenovo ≫ Thinkpad L380 Firmware Version < r0ret28w
Lenovo ≫ Thinkpad E480 Firmware Version < r0pet47w
Lenovo ≫ Thinkpad E580 Firmware Version < r0pet47w
Lenovo ≫ Thinkpad L480 Firmware Version < r0qet47w
Lenovo ≫ Thinkpad L580 Firmware Version < r0qet47w
Lenovo ≫ Thinkpad P51 Firmware Version < n1uet71w
Lenovo ≫ Thinkpad P51s Firmware Version < n1vet45w
Lenovo ≫ Thinkpad P52 Firmware Version < n2cet28w
Lenovo ≫ Thinkpad P52s Firmware Version < n27et27w
Lenovo ≫ Thinkpad P71 Firmware Version < n1tet50w
Lenovo ≫ Thinkpad P72 Firmware Version < n2cet28w
Lenovo ≫ Thinkpad T25 Firmware Version < n1qet77w
Lenovo ≫ Thinkpad T470 Firmware Version < n1qet77w
Lenovo ≫ Thinkpad T470p Firmware Version < r0fet44w
Lenovo ≫ Thinkpad T470s Firmware Version < n1wet49w
Lenovo ≫ Thinkpad T480 Firmware Version < n24et41w
Lenovo ≫ Thinkpad T480s Firmware Version < n22et48w
Lenovo ≫ Thinkpad T570 Firmware Version < n1vet45w
Lenovo ≫ Thinkpad T580 Firmware Version < n27et27w
Lenovo ≫ Thinkpad X380 Yoga Firmware Version < r0set29w
Lenovo ≫ Thinkpad Yoga 11e Firmware Version < r0vet23w
Lenovo ≫ Thinkpad Yoga 370 Firmware Version < r0het48w
Lenovo ≫ Thinkpad S1 Firmware Version < r0het48w
Lenovo ≫ Thinkpad X1 Carbon Firmware Version < n1met49w
Lenovo ≫ Thinkpad X1 Carbon Firmware Version < n23et52w
Lenovo ≫ Thinkpad X1 Carbon Firmware Version < n1met49w
Lenovo ≫ Thinkpad X1 Tablet Firmware Version < n1oet45w
Lenovo ≫ Thinkpad X1 Tablet Firmware Version < n1zet69w
Lenovo ≫ Thinkpad X1 Yoga Firmware Version < n1net42w
Lenovo ≫ Thinkpad X1 Yoga Firmware Version < n25et38w
Lenovo ≫ Thinkpad X270 Firmware Version < r0iet53w
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.317 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 0.9 | 5.9 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.2 | 3.9 | 10 |
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.