Code injection

2018-07-1919:29:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.8%

JSON

In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.

CPENameOperatorVersion
e42-80_firmwareeq< 2wcn40ww
e42-80_isk_firmwareeq< 0zcn48ww
e52-80_firmwareeq< 2wcn40ww
e52-80_isk_firmwareeq< 0zcn48ww
miix_720-12ikb_firmwareeq< 3scn68ww
thinkpad_e480_firmwareeq< r0pet47w
thinkpad_e580_firmwareeq< r0pet47w
thinkpad_l380_firmwareeq< r0ret28w
thinkpad_l480_firmwareeq< r0qet47w
thinkpad_l580_firmwareeq< r0qet47w

Name	Operator	Version
e42-80_firmware	eq	< 2wcn40ww
e42-80_isk_firmware	eq	< 0zcn48ww
e52-80_firmware	eq	< 2wcn40ww
e52-80_isk_firmware	eq	< 0zcn48ww
miix_720-12ikb_firmware	eq	< 3scn68ww
thinkpad_e480_firmware	eq	< r0pet47w
thinkpad_e580_firmware	eq	< r0pet47w
thinkpad_l380_firmware	eq	< r0ret28w
thinkpad_l480_firmware	eq	< r0qet47w
thinkpad_l580_firmware	eq	< r0qet47w