Medium severity · published Nov 16, 2018
CVE-2018-9085
Missing System x Flash Memory Write Protection Lock Bit
4.9
CVSS
0.7%
EPSS
No
On KEV
Description
A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SX
System x UEFI · Lenovo
before varies · source: vendor
BH
Bladecenter Hs23 Firmware · Ibm
before tke160c · source: NVD
BH
Bladecenter Hs23e Firmware · Ibm
before ahe160c · source: NVD
FS
Flex System X220 M4 Firmware · Ibm
before kse158c · source: NVD
FS
Flex System X222 M4 Firmware · Ibm
before cce160c · source: NVD
FS
Flex System X240 M4 Firmware · Lenovo
before a3e122b · source: NVD
FS
Flex System X280 X6 Firmware · Ibm
before n3e132w · source: NVD
FS
Flex System X440 M4 Firmware · Lenovo
before cge122b · source: NVD
FS
Flex System X480 X6 Firmware · Ibm
before n3e132w · source: NVD
FS
Flex System X880 X6 Firmware · Ibm
before n2e130e · source: NVD
ID
Idataplex Dx360 M4 Firmware · Ibm
before fhe120d · source: NVD
ID
Idataplex Dx360 M4 Water Cooled Firmware · Ibm
before fhe120d · source: NVD