CVE-2018-9085 A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers,…

Description

A write protection lock bit was left unset after boot on an older generation of Lenovo and IBM System x servers, potentially allowing an attacker with administrator access to modify the subset of flash memory containing Intel Server Platform Services (SPS) and the system Flash Descriptors.

Affected products and versions