CVEvulnerability
CVE-2019-6172
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-11-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Description
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.
Affected configurations
• lenovo 510-15ikl firmware
• lenovo 510s-08ikl firmware
• lenovo ideacentre 300-20ish firmware
• lenovo ideacentre 300s-11ish firmware
• lenovo ideacentre 310s-08asr firmware
• lenovo ideacentre 310s-08igm firmware
• lenovo ideacentre 510-15icb firmware
• lenovo ideacentre 510a-15icb firmware
• lenovo ideacentre 510s-08ish firmware
• lenovo ideacentre 700 firmware
• lenovo ideacentre 720-18apr firmware
• lenovo ideacentre 720-18icb firmware
• lenovo legion c530-19icb firmware
• lenovo legion c730-19ico firmware
• lenovo legion t530-28apr firmware
• lenovo legion t530-28apr reflash firmware
• lenovo legion t530-28icb firmware
• lenovo legion t530-28icb reflash firmware
• lenovo legion t730-28ico firmware
• lenovo legion y520t z370 firmware
• lenovo 63 firmware
• lenovo h50-30g desktop firmware
• lenovo m4500 firmware
• lenovo m4500 id firmware
• lenovo m4550 id firmware
• lenovo v330-15igm firmware
• lenovo v530s-07icb firmware
• lenovo qitian 4500 firmware
• lenovo qitian b4550 firmware
• lenovo qitian b4650 firmware
• lenovo qitian b5900 firmware
• lenovo qitian m4550 firmware
• lenovo qitian m4600 firmware
• lenovo qitian m4650 firmware
• lenovo qt m410 firmware
• lenovo qt b415 firmware
• lenovo qt m415 firmware
• lenovo thinkcentre e73 firmware
• lenovo thinkcentre e73s firmware
• lenovo thinkcentre e74 firmware
• lenovo thinkcentre e74s firmware
• lenovo thinkcentre e75t firmware
• lenovo thinkcentre e75s firmware
• lenovo thinkcentre e93 firmware
• lenovo thinkcentre m4500k firmware
• lenovo thinkcentre m4500q firmware
• lenovo thinkcentre m4500t firmware
• lenovo thinkcentre m4500s firmware
• lenovo thinkcentre m4600t firmware
• lenovo thinkcentre m4600s firmware
• lenovo thinkcentre m600 firmware
• lenovo thinkcentre m610 firmware
• lenovo thinkcentre m625q firmware
• lenovo thinkcentre m6500t firmware
• lenovo thinkcentre m6500s firmware
• lenovo thinkcentre m6600 firmware
• lenovo thinkcentre m6600q firmware
• lenovo thinkcentre m6600t firmware
• lenovo thinkcentre m6600s firmware
• lenovo thinkcentre m700q firmware
… and 332 more
References
- https://support.lenovo.com/us/en/product_security/LEN-27714 Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-27714 Vendor Advisory