CVE-2018-9085

CVE-2018-9085: vulnerability in IBM System x UEFI

Missing System x Flash Memory Write Protection Lock Bit

Published · Updated

Follow this CVE+ Monitor System x UEFI+ Monitor System x UEFI

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.
Affected products
IBM · System x UEFILenovo · System x UEFI