CVEvulnerability

CVE-2019-6171

6.8 MEDIUM Published 2019-08-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-08-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
6.4 MEDIUM — CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.

Affected configurations

• lenovo 20f1 firmware • lenovo 20f2 firmware • lenovo 20jq firmware • lenovo 20jr firmware • lenovo 20g9 firmware • lenovo 20gb firmware • lenovo 20g8 firmware • lenovo 20ga firmware • lenovo 20ht firmware • lenovo 20hv firmware • lenovo 20hs firmware • lenovo 20hu firmware • lenovo 20lr firmware • lenovo 20lq firmware • lenovo 20ln firmware • lenovo 20lm firmware • lenovo 20j1 firmware • lenovo 20j2 firmware • lenovo 20kc firmware • lenovo 20kd firmware • lenovo 20mw firmware • lenovo 20mx firmware • lenovo 20kl firmware • lenovo 20km firmware • lenovo 20mu firmware • lenovo 20mv firmware • lenovo 20dc firmware • lenovo 20dd firmware • lenovo 30eh firmware • lenovo 20df firmware • lenovo 20dg firmware • lenovo 20e0 firmware • lenovo 20de firmware • lenovo 20dh firmware • lenovo 20et firmware • lenovo 20eu firmware • lenovo 20ev firmware • lenovo 20ew firmware • lenovo 20ex firmware • lenovo 20ey firmware • lenovo 20h1 firmware • lenovo 20h2 firmware • lenovo 20h5 firmware • lenovo 20h6 firmware • lenovo 20h4 firmware • lenovo 20h8 firmware • lenovo 20kn firmware • lenovo 20kq firmware • lenovo 20ks firmware • lenovo 20kt firmware • lenovo 20ku firmware • lenovo 20kv firmware • lenovo 20n8 firmware • lenovo 20n9 firmware • lenovo 20ng firmware • lenovo 3xxx firmware • lenovo 20m5 firmware • lenovo 20m6 firmware • lenovo 20m7 firmware • lenovo 20m8 firmware … and 88 more

References