Details of VAR-201807-1678

ID

VAR-201807-1678

CVE

CVE-2018-9062

TITLE

plural Lenovo Product Injection Vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2018-016727

DESCRIPTION

In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code. E42-80 firmware, e42-80 isk firmware, e52-80 firmware etc. Lenovo The product contains an injection vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Intel Bootgaurd is prone to a local security-bypass vulnerability. Successful exploits will allow local attackers to bypass certain security restrictions. Other attacks are also possible

Trust: 1.89

sources: NVD: CVE-2018-9062 // JVNDB: JVNDB-2018-016727 // BID: 105387

AFFECTED PRODUCTS

vendor:	lenovo	model:	thinkpad l580	scope:	lt	version:	r0qet47w	Trust: 1.0
vendor:	lenovo	model:	thinkpad x380 yoga	scope:	lt	version:	r0set29w	Trust: 1.0
vendor:	lenovo	model:	thinkpad p71	scope:	lt	version:	n1tet50w	Trust: 1.0
vendor:	lenovo	model:	thinkpad t580	scope:	lt	version:	n27et27w	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 yoga	scope:	lt	version:	n1net42w	Trust: 1.0
vendor:	lenovo	model:	e52-80	scope:	lt	version:	2wcn40ww	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 tablet	scope:	lt	version:	n1oet45w	Trust: 1.0
vendor:	lenovo	model:	thinkpad x280	scope:	lt	version:	n20et33w	Trust: 1.0
vendor:	lenovo	model:	thinkpad s1	scope:	lt	version:	r0het48w	Trust: 1.0
vendor:	lenovo	model:	thinkpad t470p	scope:	lt	version:	r0fet44w	Trust: 1.0
vendor:	lenovo	model:	thinkpad p51s	scope:	lt	version:	n1vet45w	Trust: 1.0
vendor:	lenovo	model:	miix 720-12ikb	scope:	lt	version:	3scn68ww	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 370	scope:	lt	version:	r0het48w	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 carbon	scope:	lt	version:	n1met49w	Trust: 1.0
vendor:	lenovo	model:	thinkpad x270	scope:	lt	version:	r0iet53w	Trust: 1.0
vendor:	lenovo	model:	thinkpad t470	scope:	lt	version:	n1qet77w	Trust: 1.0
vendor:	lenovo	model:	v310-14isk	scope:	lt	version:	0zcn48ww	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 tablet	scope:	lt	version:	n1zet69w	Trust: 1.0
vendor:	lenovo	model:	v310-15isk	scope:	lt	version:	0zcn48ww	Trust: 1.0
vendor:	lenovo	model:	thinkpad l480	scope:	lt	version:	r0qet47w	Trust: 1.0
vendor:	lenovo	model:	thinkpad e480	scope:	lt	version:	r0pet47w	Trust: 1.0
vendor:	lenovo	model:	v510-14ikb	scope:	lt	version:	2wcn40ww	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 yoga	scope:	lt	version:	n25et38w	Trust: 1.0
vendor:	lenovo	model:	v310-15ikb	scope:	lt	version:	2wcn40ww	Trust: 1.0
vendor:	lenovo	model:	v310-14ikb	scope:	lt	version:	2wcn40ww	Trust: 1.0
vendor:	lenovo	model:	thinkpad p52s	scope:	lt	version:	n27et27w	Trust: 1.0
vendor:	lenovo	model:	thinkpad e580	scope:	lt	version:	r0pet47w	Trust: 1.0
vendor:	lenovo	model:	thinkpad p72	scope:	lt	version:	n2cet28w	Trust: 1.0
vendor:	lenovo	model:	e42-80 isk	scope:	lt	version:	0zcn48ww	Trust: 1.0
vendor:	lenovo	model:	v510-15ikb	scope:	lt	version:	2wcn40ww	Trust: 1.0
vendor:	lenovo	model:	e52-80 isk	scope:	lt	version:	0zcn48ww	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 11e	scope:	lt	version:	r0vet23w	Trust: 1.0
vendor:	lenovo	model:	thinkpad t25	scope:	lt	version:	n1qet77w	Trust: 1.0
vendor:	lenovo	model:	thinkpad t570	scope:	lt	version:	n1vet45w	Trust: 1.0
vendor:	lenovo	model:	thinkpad t470s	scope:	lt	version:	n1wet49w	Trust: 1.0
vendor:	lenovo	model:	thinkpad p52	scope:	lt	version:	n2cet28w	Trust: 1.0
vendor:	lenovo	model:	thinkpad t480	scope:	lt	version:	n24et41w	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 carbon	scope:	lt	version:	n23et52w	Trust: 1.0
vendor:	lenovo	model:	e42-80	scope:	lt	version:	2wcn40ww	Trust: 1.0
vendor:	lenovo	model:	thinkpad t480s	scope:	lt	version:	n22et48w	Trust: 1.0
vendor:	lenovo	model:	thinkpad l380	scope:	lt	version:	r0ret28w	Trust: 1.0
vendor:	lenovo	model:	thinkpad p51	scope:	lt	version:	n1uet71w	Trust: 1.0
vendor:	lenovo	model:	v310-14isk	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	v310-15isk	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad p51s	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	e42-80	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	v310-15ikb	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	v510-14ikb	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	miix 720-12ikb	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	v310-14ikb	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad l580	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad l380	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e580	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad p51	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e480	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad p52	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	v510-15ikb	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	e52-80	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	e42-80 isk	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad l480	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	e52-80 isk	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad p52s	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	8th generation core processors	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	7th generation core processors	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	6th generation core processors	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	5th generation core processors	scope:	eq	version:	0	Trust: 0.3
vendor:	intel	model:	4th generation core processors	scope:	eq	version:	0	Trust: 0.3

sources: BID: 105387 // JVNDB: JVNDB-2018-016727 // NVD: CVE-2018-9062

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-9062
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2018-9062
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201809-1172
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2018-9062
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8

nvd@nist.gov:	CVE-2018-9062
baseSeverity:	MEDIUM
baseScore:	6.8
vectorString:	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	PHYSICAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	0.9
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2018-9062
baseSeverity:	MEDIUM
baseScore:	6.8
vectorString:	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	PHYSICAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2018-016727 // CNNVD: CNNVD-201809-1172 // NVD: CVE-2018-9062

PROBLEMTYPE DATA

problemtype:	CWE-74	Trust: 1.0
problemtype:	injection (CWE-74) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2018-016727 // NVD: CVE-2018-9062

THREAT TYPE

local

Trust: 0.3

sources: BID: 105387

TYPE

injection

Trust: 0.6

sources: CNNVD: CNNVD-201809-1172

PATCH

title:

Multiple Lenovo Thinkpad Product security vulnerabilities

url:

http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=85206

Trust: 0.6

sources: CNNVD: CNNVD-201809-1172

EXTERNAL IDS

db:	NVD	id:	CVE-2018-9062	Trust: 3.5
db:	LENOVO	id:	LEN-20527	Trust: 2.7
db:	BID	id:	105387	Trust: 2.7
db:	JVNDB	id:	JVNDB-2018-016727	Trust: 0.8
db:	CNNVD	id:	CNNVD-201809-1172	Trust: 0.6

sources: BID: 105387 // JVNDB: JVNDB-2018-016727 // CNNVD: CNNVD-201809-1172 // NVD: CVE-2018-9062

REFERENCES

url:	https://support.lenovo.com/us/en/solutions/len-20527	Trust: 2.7
url:	http://www.securityfocus.com/bid/105387	Trust: 2.4
url:	https://nvd.nist.gov/vuln/detail/cve-2018-9062	Trust: 0.8
url:	http://www.intel.com/	Trust: 0.3
url:	https://edk2-docs.gitbooks.io/security-advisory/content/unauthenticated-firmware-chain-of-trust-bypass.html	Trust: 0.3

sources: BID: 105387 // JVNDB: JVNDB-2018-016727 // CNNVD: CNNVD-201809-1172 // NVD: CVE-2018-9062

CREDITS

Trammell Hudson

Trust: 0.3

sources: BID: 105387

SOURCES

db:	BID	id:	105387
db:	JVNDB	id:	JVNDB-2018-016727
db:	CNNVD	id:	CNNVD-201809-1172
db:	NVD	id:	CVE-2018-9062

LAST UPDATE DATE

2024-11-23T22:34:09.340000+00:00

SOURCES UPDATE DATE

db:	BID	id:	105387	date:	2018-09-20T00:00:00
db:	JVNDB	id:	JVNDB-2018-016727	date:	2024-07-24T06:46:00
db:	CNNVD	id:	CNNVD-201809-1172	date:	2019-10-17T00:00:00
db:	NVD	id:	CVE-2018-9062	date:	2024-11-21T04:14:53.653

SOURCES RELEASE DATE

db:	BID	id:	105387	date:	2018-09-20T00:00:00
db:	JVNDB	id:	JVNDB-2018-016727	date:	2024-07-24T00:00:00
db:	CNNVD	id:	CNNVD-201809-1172	date:	2018-09-27T00:00:00
db:	NVD	id:	CVE-2018-9062	date:	2018-07-19T19:29:00.607