CVE-2018-9062
BIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
- Record
CVE-2018-9062- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-74
- Updated
- 2026-11-02
CVE List No score
BIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
- Record
CVE-2018-9062- Updated
- 2026-11-02
EUVDEUVD-2018-20665 No score
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
- Record
EUVD-2018-20665- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4w9p-jrr8-ffxf
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks,...
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
- Record
GHSA-4w9p-jrr8-ffxf- CVSS 3.1
- 6.8 Medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-74
- Updated
- 2026-11-02
Affected products
- lenovo e42-80 firmware
- lenovo e42-80 isk firmware
- lenovo e52-80 firmware
- lenovo e52-80 isk firmware
- lenovo miix 720-12ikb firmware
- lenovo thinkpad e480 firmware
- lenovo thinkpad e580 firmware
- lenovo thinkpad l380 firmware
- lenovo thinkpad l480 firmware
- lenovo thinkpad l580 firmware
- lenovo thinkpad p51 firmware
- lenovo thinkpad p51s firmware
Show 28 moreShow less
- lenovo thinkpad p52 firmware
- lenovo thinkpad p52s firmware
- lenovo thinkpad p71 firmware
- lenovo thinkpad p72 firmware
- lenovo thinkpad s1 firmware
- lenovo thinkpad t25 firmware
- lenovo thinkpad t470 firmware
- lenovo thinkpad t470p firmware
- lenovo thinkpad t470s firmware
- lenovo thinkpad t480 firmware
- lenovo thinkpad t480s firmware
- lenovo thinkpad t570 firmware
- lenovo thinkpad t580 firmware
- lenovo thinkpad x1 carbon firmware
- lenovo thinkpad x1 tablet firmware
- lenovo thinkpad x1 yoga firmware
- lenovo thinkpad x270 firmware
- lenovo thinkpad x280 firmware
- lenovo thinkpad x380 yoga firmware
- lenovo thinkpad yoga 11e firmware
- lenovo thinkpad yoga 370 firmware
- lenovo v310-14ikb firmware
- lenovo v310-14isk firmware
- lenovo v310-15ikb firmware
- lenovo v310-15isk firmware
- lenovo v510-14ikb firmware
- lenovo v510-15ikb firmware
- lenovo group ltd. some lenovo thinkpads
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-9062 is a medium vulnerability (CVSS 6.8) in Lenovo E42-80 Firmware, published July 19, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.53%, the 44th percentile. No source names a fixed version.