BIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack
Priority LOW 31CWE-74Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
Why it matters now
EPSS 0.00527 44th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | some Lenovo ThinkPads | various | — | No fix listed | CNA |
- some Lenovo ThinkPads VendorLenovo Affected various Fixed in — No fix listed CNA
CPE configurations NVD · 100
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:e42-80_firmware:*:*:*:*:*:*:*:* | before 2wcn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:e42-80:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:e42-80_isk_firmware:*:*:*:*:*:*:*:* | before 0zcn48ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:e42-80_isk:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:e52-80_firmware:*:*:*:*:*:*:*:* | before 2wcn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:e52-80:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:e52-80_isk_firmware:*:*:*:*:*:*:*:* | before 0zcn48ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:e52-80_isk:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:miix_720-12ikb_firmware:*:*:*:*:*:*:*:* | before 3scn68ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:miix_720-12ikb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:e42-80_firmware:*:*:*:*:*:*:*:* Versions before 2wcn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:e42-80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:e42-80_isk_firmware:*:*:*:*:*:*:*:* Versions before 0zcn48ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:e42-80_isk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:e52-80_firmware:*:*:*:*:*:*:*:* Versions before 2wcn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:e52-80:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:e52-80_isk_firmware:*:*:*:*:*:*:*:* Versions before 0zcn48ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:e52-80_isk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:miix_720-12ikb_firmware:*:*:*:*:*:*:*:* Versions before 3scn68ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:miix_720-12ikb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Show 90 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:v310-14ikb_firmware:*:*:*:*:*:*:*:* | before 2wcn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v310-14ikb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v310-14isk_firmware:*:*:*:*:*:*:*:* | before 0zcn48ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v310-14isk:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v310-15ikb_firmware:*:*:*:*:*:*:*:* | before 2wcn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v310-15ikb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v310-15isk_firmware:*:*:*:*:*:*:*:* | before 0zcn48ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v310-15isk:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v510-14ikb_firmware:*:*:*:*:*:*:*:* | before 2wcn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v510-14ikb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v510-15ikb_firmware:*:*:*:*:*:*:*:* | before 2wcn40ww | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v510-15ikb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_l380_firmware:*:*:*:*:*:*:*:* | before r0ret28w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_l380:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_e480_firmware:*:*:*:*:*:*:*:* | before r0pet47w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_e480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_e580_firmware:*:*:*:*:*:*:*:* | before r0pet47w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_e580:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_l480_firmware:*:*:*:*:*:*:*:* | before r0qet47w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_l480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_l580_firmware:*:*:*:*:*:*:*:* | before r0qet47w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_l580:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_p51_firmware:*:*:*:*:*:*:*:* | before n1uet71w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_p51:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_p51s_firmware:*:*:*:*:*:*:*:* | before n1vet45w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_p52_firmware:*:*:*:*:*:*:*:* | before n2cet28w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_p52:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_p52s_firmware:*:*:*:*:*:*:*:* | before n27et27w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_p71_firmware:*:*:*:*:*:*:*:* | before n1tet50w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_p71:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_p72_firmware:*:*:*:*:*:*:*:* | before n2cet28w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_p72:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t25_firmware:*:*:*:*:*:*:*:* | before n1qet77w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t25:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t470_firmware:*:*:*:*:*:*:*:* | before n1qet77w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t470p_firmware:*:*:*:*:*:*:*:* | before r0fet44w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t470p:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t470s_firmware:*:*:*:*:*:*:*:* | before n1wet49w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t470s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t480_firmware:*:*:*:*:*:*:*:* | before n24et41w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t480:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t480s_firmware:*:*:*:*:*:*:*:* | before n22et48w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t480s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t570_firmware:*:*:*:*:*:*:*:* | before n1vet45w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t580_firmware:*:*:*:*:*:*:*:* | before n27et27w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x380_yoga_firmware:*:*:*:*:*:*:*:* | before r0set29w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x380_yoga:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_yoga_11e_firmware:*:*:*:*:*:*:*:* | before r0vet23w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_yoga_11e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_yoga_370_firmware:*:*:*:*:*:*:*:* | before r0het48w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_yoga_370:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_s1_firmware:*:*:*:*:*:*:*:* | before r0het48w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_s1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x1_carbon_firmware:*:*:*:*:*:*:*:* | before n1met49w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:20hq:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20hr:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x1_carbon_firmware:*:*:*:*:*:*:*:* | before n23et52w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:20k3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20k4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20kg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20kh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x1_tablet_firmware:*:*:*:*:*:*:*:* | before n1oet45w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:20jb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20jc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x1_tablet_firmware:*:*:*:*:*:*:*:* | before n1zet69w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:20kj:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20kk:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:*:*:*:*:*:*:*:* | before n1net42w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:20jd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20je:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20jf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20jg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:*:*:*:*:*:*:*:* | before n25et38w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:20ld:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20le:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20lf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20lg:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x270_firmware:*:*:*:*:*:*:*:* | before r0iet53w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:20hm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20hn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20k5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20k6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x280_firmware:*:*:*:*:*:*:*:* | before n20et33w | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:20ke:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:h:lenovo:20kf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:v310-14ikb_firmware:*:*:*:*:*:*:*:* Versions before 2wcn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v310-14ikb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v310-14isk_firmware:*:*:*:*:*:*:*:* Versions before 0zcn48ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v310-14isk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v310-15ikb_firmware:*:*:*:*:*:*:*:* Versions before 2wcn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v310-15ikb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v310-15isk_firmware:*:*:*:*:*:*:*:* Versions before 0zcn48ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v310-15isk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v510-14ikb_firmware:*:*:*:*:*:*:*:* Versions before 2wcn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v510-14ikb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v510-15ikb_firmware:*:*:*:*:*:*:*:* Versions before 2wcn40ww Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v510-15ikb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_l380_firmware:*:*:*:*:*:*:*:* Versions before r0ret28w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_l380:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_e480_firmware:*:*:*:*:*:*:*:* Versions before r0pet47w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_e480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_e580_firmware:*:*:*:*:*:*:*:* Versions before r0pet47w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_e580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_l480_firmware:*:*:*:*:*:*:*:* Versions before r0qet47w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_l480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_l580_firmware:*:*:*:*:*:*:*:* Versions before r0qet47w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_l580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_p51_firmware:*:*:*:*:*:*:*:* Versions before n1uet71w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_p51:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_p51s_firmware:*:*:*:*:*:*:*:* Versions before n1vet45w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_p52_firmware:*:*:*:*:*:*:*:* Versions before n2cet28w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_p52:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_p52s_firmware:*:*:*:*:*:*:*:* Versions before n27et27w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_p71_firmware:*:*:*:*:*:*:*:* Versions before n1tet50w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_p71:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_p72_firmware:*:*:*:*:*:*:*:* Versions before n2cet28w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_p72:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t25_firmware:*:*:*:*:*:*:*:* Versions before n1qet77w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t25:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t470_firmware:*:*:*:*:*:*:*:* Versions before n1qet77w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t470p_firmware:*:*:*:*:*:*:*:* Versions before r0fet44w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t470p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t470s_firmware:*:*:*:*:*:*:*:* Versions before n1wet49w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t470s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t480_firmware:*:*:*:*:*:*:*:* Versions before n24et41w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t480:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t480s_firmware:*:*:*:*:*:*:*:* Versions before n22et48w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t480s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t570_firmware:*:*:*:*:*:*:*:* Versions before n1vet45w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t580_firmware:*:*:*:*:*:*:*:* Versions before n27et27w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x380_yoga_firmware:*:*:*:*:*:*:*:* Versions before r0set29w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x380_yoga:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_yoga_11e_firmware:*:*:*:*:*:*:*:* Versions before r0vet23w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_yoga_11e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_yoga_370_firmware:*:*:*:*:*:*:*:* Versions before r0het48w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_yoga_370:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_s1_firmware:*:*:*:*:*:*:*:* Versions before r0het48w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_s1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x1_carbon_firmware:*:*:*:*:*:*:*:* Versions before n1met49w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:20hq:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20hr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x1_carbon_firmware:*:*:*:*:*:*:*:* Versions before n23et52w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:20k3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20k4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20kg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20kh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x1_tablet_firmware:*:*:*:*:*:*:*:* Versions before n1oet45w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:20jb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20jc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x1_tablet_firmware:*:*:*:*:*:*:*:* Versions before n1zet69w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:20kj:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20kk:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:*:*:*:*:*:*:*:* Versions before n1net42w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:20jd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20je:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20jf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20jg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:*:*:*:*:*:*:*:* Versions before n25et38w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:20ld:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20le:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20lf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20lg:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x270_firmware:*:*:*:*:*:*:*:* Versions before r0iet53w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:20hm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20hn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20k5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20k6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x280_firmware:*:*:*:*:*:*:*:* Versions before n20et33w Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:20ke:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:h:lenovo:20kf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-9062
- 2026-10-03 Alias added: GHSA-4w9p-jrr8-ffxf
References
More Lenovo E42-80 Firmware vulnerabilities
- TI-2019-04387 ThinkPad T460p and T470p BIOS Tamper Mechanism CVSS 3.1CRITICAL 9.8
- TI-2020-06726 A potential vulnerability in the SMI callback function used in the Legacy SD driver in… CVSS 3.1MEDIUM 6.7
- TI-2020-06725 A potential vulnerability in the SMI callback function used in the Legacy USB driver in… CVSS 3.1MEDIUM 6.7
- TI-2019-04373 A potential vulnerability in the SMI callback function used in Legacy USB driver using… CVSS 3.1MEDIUM 6.4
- TI-2019-04371 A potential vulnerability in the SMI callback function used in the Legacy USB driver… CVSS 3.1MEDIUM 6.4
- TI-2018-06585 BIOS Write Protection Race Condition CVSS 3.1MEDIUM 5.9
Sources
- CVE-2018-9062 · CVE Program
- CVE-2018-9062 · NVD
- FIRST EPSS
- GHSA-4w9p-jrr8-ffxf · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences