5.9
MEDIUM
CVE-2018-9069
Lenovo IdeaPad BIOS Firmware Corruption
Description

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.

INFO

Published Date :

Oct. 2, 2018, 1:29 p.m.

Last Modified :

Feb. 18, 2020, 8:54 p.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

5.2

Exploitability Score :

0.7
Affected Products

The following products are affected by CVE-2018-9069 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Hp 310s-14isk_firmware
2 Hp 320-15ikbra_firmware
3 Hp 320-15ikbrn_firmware
4 Hp 320-15ikbrn_touch_firmware
5 Hp 320-17ikbrn
6 Hp 320s-14ikb
7 Hp 320s-15ikb_firmware
8 Hp 320s-15isk_firmware
9 Hp 510s-14isk_firmware
10 Hp 520-15ikbrn_firmware
11 Hp 520s-14ikb_firmware
12 Hp 710s_plus-13ikb_16g_firmware
13 Hp 710s_plus-3ikb_firmware
14 Hp xiaoxinair13ikbpro_firmware
15 Hp 710s_plus_touch-13ikb_firmware
16 Hp 720s-13ikb_firmware
17 Hp b320-14ikb_firmware
18 Hp flex_4-1470_firmware
19 Hp flex_5-1470_firmware
20 Hp flex_5-1570_firmware
21 Hp ideapad_2in1_14_firmware
22 Hp lenovo_ideapad_320-14ikb\(i\+a\)_firmware
23 Hp lenovo_ideapad_320-14ikb\(i\+n\)_firmware
24 Hp lenovo_ideapad_320-15abr_firmware
25 Hp lenovo_ideapad_320-15ikb\(i\+n\)_firmware
26 Hp lenovo_ideapad_320s-14ikbr_firmware
27 Hp lenovo_ideapad_320s-15ikbr_firmware
28 Hp lenovo_ideapad_520s-14ikbr_firmware
29 Hp lenovo_ideapad_720s-14ikb_firmware
30 Hp lenovo_ideapad_flex_5-1470_firmware
31 Hp lenovo_ideapad_flex_5-1570_firmware
32 Hp lenovo_ideapad_y520-15ikbn_firmware
33 Hp lenovo_tianyi_310-14ikb_firmware
34 Hp lenovo_tianyi_310-15ikb_firmware
35 Hp lenovo_y520-15ikba_firmware
36 Hp lenovo_y520-15ikbm_firmware
37 Hp lenovo_yoga_520-14ikb_firmware
38 Hp lenovo_yoga_520-15ikb_firmware
39 Hp miix_720-12ikb
40 Hp nano110-14ikb_firmware
41 Hp nano110-15ikb_firmware
42 Hp rescuer_r720-15ikbm_firmware
43 Hp rescuer_y520-15ikbm_firmware
44 Hp v330-14ikb_firmware
45 Hp v330-14isk_firmware
46 Hp yoga_310-11iap_firmware
47 Hp yoga_510-14isk_firmware
48 Hp yoga_720-13ikb_firmware
49 Hp yoga_720-13ikbr_firmware
50 Hp yoga_720-15ikb_firmware
51 Hp lenovo_v720-14_firmware
52 Hp 7000_u42_firmware
53 Hp 7000-15_u42_firmware
54 Hp r720-15ikba_firmware
55 Hp y520-15ikba_firmware
56 Hp r720-15ikbn_firmware
57 Hp y520-15ikbn_firmware
58 Hp y720-15ikb_firmware
59 Hp lenovo_y720-15ikb_firmware
60 Hp e43-80_kbl_firmware
1 Lenovo e42-80_firmware
2 Lenovo e52-80_firmware
3 Lenovo v310-14ikb_firmware
4 Lenovo v310-14isk_firmware
5 Lenovo v310-15ikb_firmware
6 Lenovo v310-15isk_firmware
7 Lenovo v510-14ikb_firmware
8 Lenovo v510-15ikb_firmware
: Total Affected Vendor : 2 | Products : 68
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2018-9069.

URL Resource
https://support.lenovo.com/us/en/solutions/LEN-20184 Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2018-9069 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2018-9069 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • Reanalysis by [email protected]

    Feb. 18, 2020

    Action Type Old Value New Value
    Removed CVSS V3 NIST AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
    Added CVSS V3.1 NIST AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
    Removed CPE Configuration AND
    Removed CPE Configuration AND OR *cpe:2.3:o:lenovo:xx_chao5000-ikbra_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6jcn26ww
    Removed CPE Configuration AND OR *cpe:2.3:o:lenovo:yoga_520-14ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.09
    Removed CPE Configuration AND OR *cpe:2.3:o:lenovo:zhaoyang_k42-80_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.12
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:hp:zhaoyang_k42-80_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2.12 OR *cpe:2.3:o:lenovo:zhaoyang_k42-80_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2.12
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:hp:yoga_520-14ikb_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2.09 OR *cpe:2.3:o:lenovo:yoga_520-14ikb_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2.09
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:hp:xx_chao5000-ikbra_firmware:*:*:*:*:*:*:*:* versions from (excluding) 6jcn26ww OR *cpe:2.3:o:lenovo:xx_chao5000-ikbra_firmware:*:*:*:*:*:*:*:* versions from (excluding) 6jcn26ww
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:hp:v510-15ikb_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2wcn38ww OR *cpe:2.3:o:lenovo:v510-15ikb_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2wcn38ww
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:hp:v510-14ikb_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2wcn38ww OR *cpe:2.3:o:lenovo:v510-14ikb_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2wcn38ww
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:hp:v310-15isk_firmware:*:*:*:*:*:*:*:* versions from (excluding) 0zcn47ww OR *cpe:2.3:o:lenovo:v310-15isk_firmware:*:*:*:*:*:*:*:* versions from (excluding) 0zcn47ww
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:hp:v310-15ikb_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2wcn38ww OR *cpe:2.3:o:lenovo:v310-15ikb_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2wcn38ww
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:hp:v310-14isk_firmware:*:*:*:*:*:*:*:* versions from (excluding) 4.07 OR *cpe:2.3:o:lenovo:v310-14isk_firmware:*:*:*:*:*:*:*:* versions from (excluding) 4.07
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:hp:v310-14ikb_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2wcn38ww OR *cpe:2.3:o:lenovo:v310-14ikb_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2wcn38ww
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:hp:e52-80_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2wcn38ww OR *cpe:2.3:o:lenovo:e52-80_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2wcn38ww
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:hp:e42-80_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2wcn38ww OR *cpe:2.3:o:lenovo:e42-80_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2wcn38ww
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:hp:720s-14ikbr_firmware:-:*:*:*:*:*:*:* OR *cpe:2.3:o:lenovo:720s-14ikbr_firmware:-:*:*:*:*:*:*:*
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:h:hp:zhaoyang_k42-80:-:*:*:*:*:*:*:* OR *cpe:2.3:h:lenovo:zhaoyang_k42-80:-:*:*:*:*:*:*:*
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:h:hp:yoga_520-14ikb:-:*:*:*:*:*:*:* OR *cpe:2.3:h:lenovo:yoga_520-14ikb:-:*:*:*:*:*:*:*
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:h:hp:xx_chao5000-ikbra:-:*:*:*:*:*:*:* OR *cpe:2.3:h:lenovo:xx_chao5000-ikbra:-:*:*:*:*:*:*:*
  • CPE Deprecation Remap by [email protected]

    Dec. 10, 2019

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:h:hp:720s-14ikbr:-:*:*:*:*:*:*:* OR *cpe:2.3:h:lenovo:720s-14ikbr:-:*:*:*:*:*:*:*
  • Initial Analysis by [email protected]

    Jan. 02, 2019

    Action Type Old Value New Value
    Added CVSS V2 (AV:N/AC:M/Au:S/C:N/I:P/A:C)
    Added CVSS V3 AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
    Changed Reference Type https://support.lenovo.com/us/en/solutions/LEN-20184 No Types Assigned https://support.lenovo.com/us/en/solutions/LEN-20184 Vendor Advisory
    Added CWE CWE-362
    Added CPE Configuration AND OR *cpe:2.3:o:hp:310s-14isk_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.15 OR cpe:2.3:h:hp:310s-14isk:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:320-15ikbra_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6jcn24ww OR cpe:2.3:h:hp:320-15ikbra:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:320-15ikbrn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6jcn24ww OR cpe:2.3:h:hp:320-15ikbrn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:320-15ikbrn_touch_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6jcn24ww OR cpe:2.3:h:hp:320-15ikbrn_touch:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:h:hp:320-17ikbrn:*:*:*:*:*:*:*:* versions up to (excluding) 2.09 OR cpe:2.3:h:hp:320-17ikbrn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:h:hp:320s-14ikb:*:*:*:*:*:*:*:* versions up to (excluding) 2.09 OR cpe:2.3:h:hp:320s-14ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:320s-15ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.09 OR cpe:2.3:h:hp:320s-15ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:320s-15isk_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2wcn38ww OR cpe:2.3:h:hp:320s-15isk:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:510s-14isk_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.15 OR cpe:2.3:h:hp:510s-14isk:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:520-15ikbrn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6jcn26ww OR cpe:2.3:h:hp:520-15ikbrn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:520s-14ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.09 OR cpe:2.3:h:hp:520s-14ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:710s_plus-13ikb_16g_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.55 OR cpe:2.3:h:hp:710s_plus-13ikb_16g:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:710s_plus-3ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.55 OR cpe:2.3:h:hp:710s_plus-3ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:xiaoxinair13ikbpro_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.55 OR cpe:2.3:h:hp:xiaoxinair13ikbpro:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:710s_plus_touch-13ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.55 OR cpe:2.3:h:hp:710s_plus_touch-13ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:720s-13ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 5scn38ww OR cpe:2.3:h:hp:720s-13ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:720s-14ikbr_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:720s-14ikbr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:b320-14ikb_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:b320-14ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:e42-80_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2wcn38ww OR cpe:2.3:h:hp:e42-80:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:e52-80_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2wcn38ww OR cpe:2.3:h:hp:e52-80:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:flex_4-1470_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.15 OR cpe:2.3:h:hp:flex_4-1470:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:flex_5-1470_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.09 OR cpe:2.3:h:hp:flex_5-1470:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:flex_5-1570_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.09 OR cpe:2.3:h:hp:flex_5-1570:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:ideapad_2in1_14_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:ideapad_2in1_14:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_ideapad_320-14ikb\(i\+a\)_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:lenovo_ideapad_320-14ikb\(i\+a\):-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_ideapad_320-14ikb\(i\+n\)_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:lenovo_ideapad_320-14ikb\(i\+n\):-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_ideapad_320-15abr_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:lenovo_ideapad_320-15abr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_ideapad_320-15ikb\(i\+n\)_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:lenovo_ideapad_320-15ikb\(i\+n\):-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_ideapad_320s-14ikbr_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:lenovo_ideapad_320s-14ikbr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_ideapad_320s-15ikbr_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:lenovo_ideapad_320s-15ikbr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_ideapad_520s-14ikbr_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:lenovo_ideapad_520s-14ikbr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_ideapad_720s-14ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6jcn26ww OR cpe:2.3:h:hp:lenovo_ideapad_720s-14ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_ideapad_flex_5-1470_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6jcn26ww OR cpe:2.3:h:hp:lenovo_ideapad_flex_5-1470:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_ideapad_flex_5-1570_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6jcn26ww OR cpe:2.3:h:hp:lenovo_ideapad_flex_5-1570:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_ideapad_y520-15ikbn_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:lenovo_ideapad_y520-15ikbn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_tianyi_310-14ikb_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:lenovo_tianyi_310-14ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_tianyi_310-15ikb_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:lenovo_tianyi_310-15ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_y520-15ikba_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 5jcn25ww OR cpe:2.3:h:hp:lenovo_y520-15ikba:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_y520-15ikbm_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 5jcn25ww OR cpe:2.3:h:hp:lenovo_y520-15ikbm:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_yoga_520-14ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6jcn26ww OR cpe:2.3:h:hp:lenovo_yoga_520-14ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_yoga_520-15ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6jcn26ww OR cpe:2.3:h:hp:lenovo_yoga_520-15ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:h:hp:miix_720-12ikb:*:*:*:*:*:*:*:* versions up to (excluding) 3scn66ww OR cpe:2.3:h:hp:miix_720-12ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:nano110-14ikb_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:hp:nano110-14ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:nano110-15ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 5xcn24ww OR cpe:2.3:h:hp:nano110-15ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:rescuer_r720-15ikbm_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 5xcn24ww OR cpe:2.3:h:hp:rescuer_r720-15ikbm:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:rescuer_y520-15ikbm_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 5xcn24ww OR cpe:2.3:h:hp:rescuer_y520-15ikbm:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:v310-14ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2wcn38ww OR cpe:2.3:h:hp:v310-14ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:v310-14isk_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.07 OR cpe:2.3:h:hp:v310-14isk:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:v310-15ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2wcn38ww OR cpe:2.3:h:hp:v310-15ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:v310-15isk_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 0zcn47ww OR cpe:2.3:h:hp:v310-15isk:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:v330-14ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.07 OR cpe:2.3:h:hp:v330-14ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:v330-14isk_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.07 OR cpe:2.3:h:hp:v330-14isk:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:v510-14ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2wcn38ww OR cpe:2.3:h:hp:v510-14ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:v510-15ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2wcn38ww OR cpe:2.3:h:hp:v510-15ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:xx_chao5000-ikbra_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6jcn26ww OR cpe:2.3:h:hp:xx_chao5000-ikbra:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:yoga_310-11iap_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 6.7 OR cpe:2.3:h:hp:yoga_310-11iap:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:yoga_510-14isk_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.15 OR cpe:2.3:h:hp:yoga_510-14isk:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:yoga_520-14ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.09 OR cpe:2.3:h:hp:yoga_520-14ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:yoga_720-13ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.05 OR cpe:2.3:h:hp:yoga_720-13ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:yoga_720-13ikbr_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.07 OR cpe:2.3:h:hp:yoga_720-13ikbr:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:yoga_720-15ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.05 OR cpe:2.3:h:hp:yoga_720-15ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:zhaoyang_k42-80_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.12 OR cpe:2.3:h:hp:zhaoyang_k42-80:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_v720-14_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.12 OR cpe:2.3:h:hp:lenovo_v720-14:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:7000_u42_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.09 OR cpe:2.3:h:hp:7000_u42:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:7000-15_u42_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.09 OR cpe:2.3:h:hp:7000-15_u42:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:r720-15ikba_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 5jcn25ww OR cpe:2.3:h:hp:r720-15ikba:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:y520-15ikba_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 5jcn25ww OR cpe:2.3:h:hp:y520-15ikba:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:r720-15ikbn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4gcn38ww OR cpe:2.3:h:hp:r720-15ikbn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:y520-15ikbn_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4gcn38ww OR cpe:2.3:h:hp:y520-15ikbn:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:y720-15ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4gcn38ww OR cpe:2.3:h:hp:y720-15ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:lenovo_y720-15ikb_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4gcn38ww OR cpe:2.3:h:hp:lenovo_y720-15ikb:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:hp:e43-80_kbl_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 4.07 OR cpe:2.3:h:hp:e43-80_kbl:-:*:*:*:*:*:*:*
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2018-9069 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2018-9069 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.08 }} 0.00%

score

0.32692

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
: