Race Condition Vulnerability in Lenovo IdeaPad BIOS Flash Device Locking Mechanism

CVE-2018-9069 · MEDIUM Severity

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.

Learn more about our Cis Benchmark Audit For Apple Ios.