CVE-2018-9069: HP 310s-14isk Firmware

Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days.

In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.

Affected products

• HP 310s-14isk Firmware: before 1.15 (fixed in 1.15)
• HP 320-15ikbra Firmware: before 6jcn24ww (fixed in 6jcn24ww)
• HP 320-15ikbrn Firmware: before 6jcn24ww (fixed in 6jcn24ww)
• HP 320-15ikbrn Touch Firmware: before 6jcn24ww (fixed in 6jcn24ww)
• HP 320-17ikbrn: before 2.09 (fixed in 2.09)
• HP 320s-14ikb: before 2.09 (fixed in 2.09)
• HP 320s-15ikb Firmware: before 2.09 (fixed in 2.09)
• HP 320s-15isk Firmware: before 2wcn38ww (fixed in 2wcn38ww)
• HP 510s-14isk Firmware: before 1.15 (fixed in 1.15)
• HP 520-15ikbrn Firmware: before 6jcn26ww (fixed in 6jcn26ww)
• HP 520s-14ikb Firmware: before 2.09 (fixed in 2.09)
• HP 7000-15 u42 Firmware: before 2.09 (fixed in 2.09)
• HP 7000 u42 Firmware: before 2.09 (fixed in 2.09)
• HP 710s Plus-13ikb 16g Firmware: before 2.55 (fixed in 2.55)
• HP 710s Plus-3ikb Firmware: before 2.55 (fixed in 2.55)
• HP 710s Plus Touch-13ikb Firmware: before 2.55 (fixed in 2.55)
• HP 720s-13ikb Firmware: before 5scn38ww (fixed in 5scn38ww)
• HP b320-14ikb Firmware: affected versions not specified
• HP e43-80 Kbl Firmware: before 4.07 (fixed in 4.07)
• HP Flex 4-1470 Firmware: before 1.15 (fixed in 1.15)
• HP Flex 5-1470 Firmware: before 2.09 (fixed in 2.09)
• HP Flex 5-1570 Firmware: before 2.09 (fixed in 2.09)
• HP Ideapad 2in1 14 Firmware: affected versions not specified
• HP Lenovo Ideapad 320-14ikb(i+a) Firmware: affected versions not specified
• HP Lenovo Ideapad 320-14ikb(i+n) Firmware: affected versions not specified
• and 43 more

Published 2018-10-02. Last modified 2026-06-17.