CVE-2018-9062: Lenovo e42-80 Firmware

Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.

Affected products

• Lenovo e42-80 Firmware: before 2wcn40ww (fixed in 2wcn40ww)
• Lenovo e42-80 Isk Firmware: before 0zcn48ww (fixed in 0zcn48ww)
• Lenovo e52-80 Firmware: before 2wcn40ww (fixed in 2wcn40ww)
• Lenovo e52-80 Isk Firmware: before 0zcn48ww (fixed in 0zcn48ww)
• Lenovo Miix 720-12ikb Firmware: before 3scn68ww (fixed in 3scn68ww)
• Lenovo Thinkpad e480 Firmware: before r0pet47w (fixed in r0pet47w)
• Lenovo Thinkpad e580 Firmware: before r0pet47w (fixed in r0pet47w)
• Lenovo Thinkpad l380 Firmware: before r0ret28w (fixed in r0ret28w)
• Lenovo Thinkpad l480 Firmware: before r0qet47w (fixed in r0qet47w)
• Lenovo Thinkpad l580 Firmware: before r0qet47w (fixed in r0qet47w)
• Lenovo Thinkpad p51 Firmware: before n1uet71w (fixed in n1uet71w)
• Lenovo Thinkpad p51s Firmware: before n1vet45w (fixed in n1vet45w)
• Lenovo Thinkpad p52 Firmware: before n2cet28w (fixed in n2cet28w)
• Lenovo Thinkpad p52s Firmware: before n27et27w (fixed in n27et27w)
• Lenovo Thinkpad p71 Firmware: before n1tet50w (fixed in n1tet50w)
• Lenovo Thinkpad p72 Firmware: before n2cet28w (fixed in n2cet28w)
• Lenovo Thinkpad s1 Firmware: before r0het48w (fixed in r0het48w)
• Lenovo Thinkpad t25 Firmware: before n1qet77w (fixed in n1qet77w)
• Lenovo Thinkpad t470 Firmware: before n1qet77w (fixed in n1qet77w)
• Lenovo Thinkpad t470p Firmware: before r0fet44w (fixed in r0fet44w)
• Lenovo Thinkpad t470s Firmware: before n1wet49w (fixed in n1wet49w)
• Lenovo Thinkpad t480 Firmware: before n24et41w (fixed in n24et41w)
• Lenovo Thinkpad t480s Firmware: before n22et48w (fixed in n22et48w)
• Lenovo Thinkpad t570 Firmware: before n1vet45w (fixed in n1vet45w)
• Lenovo Thinkpad t580 Firmware: before n27et27w (fixed in n27et27w)
• and 14 more

Published 2018-07-19. Last modified 2026-06-17.