BIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack - US

Lenovo Security Advisory: LEN-20527 Potential Impact: Elevation of privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-9062, CVE-2018-12169 Summary Description: An attacker with unfettered physical access to a system and the skill to disassemble it, may attach a...

CVE-2018-9062 BIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack

In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code...

CVE-2018-9062

Summary: CVE-2018-9062 affects Lenovo ThinkPad BIOS modules where one BIOS region is not properly included in Intel Boot Guard checks, enabling potential arbitrary code injection with physical access. The Lenovo security advisory LEN-20527 describes two related issues (the CVE-2018-9062 flaw and ...