Design/Logic Flaw

2018-11-1614:29:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.9%

JSON

A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.

CPENameOperatorVersion
bladecenter_hs23_firmwareeq< tke160c
bladecenter_hs23e_firmwareeq< ahe160c
flex_system_x220_m4_firmwareeq< kse158c
flex_system_x222_m4_firmwareeq< cce160c
flex_system_x240_m4_firmwareeq< ahe160c
flex_system_x280_x6_firmwareeq< n3e132w
flex_system_x440_m4_firmwareeq< cne162d
flex_system_x480_x6_firmwareeq< n3e132w
flex_system_x880_x6_firmwareeq< n2e130e
idataplex_dx360_m4_firmwareeq< fhe120d

Name	Operator	Version
bladecenter_hs23_firmware	eq	< tke160c
bladecenter_hs23e_firmware	eq	< ahe160c
flex_system_x220_m4_firmware	eq	< kse158c
flex_system_x222_m4_firmware	eq	< cce160c
flex_system_x240_m4_firmware	eq	< ahe160c
flex_system_x280_x6_firmware	eq	< n3e132w
flex_system_x440_m4_firmware	eq	< cne162d
flex_system_x480_x6_firmware	eq	< n3e132w
flex_system_x880_x6_firmware	eq	< n2e130e
idataplex_dx360_m4_firmware	eq	< fhe120d