CVE-2018-9085

Missing System x Flash Memory Write Protection Lock Bit

N/A

Published: November 16, 2018 at 02:00 PM UTC

Updated: June 17, 2026 at 02:06 AM UTC

58 products affected across 2 vendorsSystem X3630 M4 FirmwareSystem X3530 M4 FirmwareSystem X3650 M4 Hd Firmware

Using System x UEFI by Lenovo?

Get instant alerts when new vulnerabilities affect System x UEFI - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.7%

Description

A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Bladecenter HS23 Firmware · IBM

95%

v < tke160c

Affected range stops below tke160c, so it looks safe — our inference, not a vendor statement

ibm-bladecenter (same device)

Bladecenter HS23E Firmware · IBM

95%

v < ahe160c

Affected range stops below ahe160c, so it looks safe — our inference, not a vendor statement

ibm-bladecenter (same device)

Flex System X220 M4 Firmware · IBM

95%

v < kse158c

Affected range stops below kse158c, so it looks safe — our inference, not a vendor statement

ibm-flex-system-x220 (same device)

Flex System X222 M4 Firmware · IBM

95%

v < cce160c

Affected range stops below cce160c, so it looks safe — our inference, not a vendor statement

ibm-flex-system-x222-m4 (same device)

Flex System X240 M4 Firmware · IBM

95%

v < ahe160c

Affected range stops below ahe160c, so it looks safe — our inference, not a vendor statement

ibm-flex-system-x240-m4 (same device)

Flex System X280 X6 Firmware · IBM

95%

v < n3e132w

Affected range stops below n3e132w, so it looks safe — our inference, not a vendor statement

ibm-flex-system-x280-x6 (same device)

Flex System X440 M4 Firmware · IBM

95%

v < cne162d

Affected range stops below cne162d, so it looks safe — our inference, not a vendor statement

ibm-flex-system-x440-m4 (same device)

Flex System X480 X6 Firmware · IBM

95%

v < n3e132w

Affected range stops below n3e132w, so it looks safe — our inference, not a vendor statement

ibm-flex-system-x480-x6 (same device)

Flex System X880 X6 Firmware · IBM

95%

v < n2e130e

Affected range stops below n2e130e, so it looks safe — our inference, not a vendor statement

ibm-flex-system-x880-x6 (same device)

Idataplex DX360 M4 Firmware · IBM

95%

v < fhe120d

Affected range stops below fhe120d, so it looks safe — our inference, not a vendor statement

ibm-idataplex-dx360-m4 (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://support.lenovo.com/us/en/solutions/LEN-24477

References (1)

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

https://support.lenovo.com/us/en/solutions/LEN-24477

CVSS

4MEDIUM[email protected]

Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-276

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card