Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-9085

Missing System x Flash Memory Write Protection Lock Bit

Description

A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo System x UEFI

  • unspecified to < variesaffected

IBM System x UEFI

  • unspecified to < variesaffected

References