CVE-2018-9069

MEDIUM

HP 310s-14isk Firmware < 1.15 - Authenticated BIOS Flash Race Condition

Title source: llm
STIX 2.1

Description

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://support.lenovo.com/us/en/solutions/LEN-20184

Scores

CVSS v3 5.9
EPSS 0.0021
EPSS Percentile 43.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

Details

CWE
CWE-362
Status published
Products (50)
hp/310s-14isk_firmware < 1.15
hp/320-15ikbra_firmware < 6jcn24ww
hp/320-15ikbrn_firmware < 6jcn24ww
hp/320-15ikbrn_touch_firmware < 6jcn24ww
hp/320-17ikbrn < 2.09
hp/320s-14ikb < 2.09
hp/320s-15ikb_firmware < 2.09
hp/320s-15isk_firmware < 2wcn38ww
hp/510s-14isk_firmware < 1.15
hp/520-15ikbrn_firmware < 6jcn26ww
... and 40 more
Published Oct 02, 2018
Tracked Since Feb 18, 2026