← CVE Intelligence

CVE-2018-9085

Missing System x Flash Memory Write Protection Lock Bit PUBLISHED

Description (CNA)

A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.

Affected (CNA)

Vendor / productVersions
Lenovo / System x UEFIaffected unspecified before varies
IBM / System x UEFIaffected unspecified before varies

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.