CVE-2018-9085 Missing System x Flash Memory Write Protection Lock Bit
Administrators can bypass flash write protection to modify Intel SPS and system descriptors on Lenovo and IBM System x servers.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-9085?
CVE-2018-9085 is a medium-severity vulnerability in IBM System x UEFI, published on 16 Nov 2018. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.
Weakness: CWE-276
Which versions are affected by CVE-2018-9085?
It affects 29 products.
Products include Ibm Bladecenter Hs23 Firmware, Ibm Bladecenter Hs23e Firmware, Ibm Flex System X220 M4 Firmware, Ibm Flex System X222 M4 Firmware, Ibm Flex System X240 M4 Firmware, Ibm Flex System X280 X6 Firmware and 23 more.
How do I fix CVE-2018-9085?
No fix has been published for CVE-2018-9085 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-9085 being exploited?
There is no known exploitation of CVE-2018-9085 in the wild and no public exploit code.
Other vulnerabilities in IBM System x UEFI
Sources
Also known as GHSA-r2wg-439c-8pcq.