CVE-2018-9085
Missing System x Flash Memory Write Protection Lock Bit
A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.
CVSS 3.0 · 4.9 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products