CVEvulnerability
CVE-2019-6190
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-02-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-665
Description
Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on systems with Intel TXT enabled.
Affected configurations
• lenovo thinkcentre e93 firmware (< fbktdba)
• lenovo thinkcentre m6500s firmware (< fbktdba)
• lenovo thinkcentre m6500t firmware (< fbktdba)
• lenovo thinkcentre m73p firmware (< fbktdba)
• lenovo thinkcentre m83 firmware (< fbktdba)
• lenovo thinkcentre m8500s firmware (< fbktdba)
• lenovo thinkcentre m8500t firmware (< fbktdba)
• lenovo thinkcentre m93 firmware (< fbktdba)
• lenovo thinkcentre m93p firmware (< fbktdba)
• lenovo thinkstation e32 firmware (< fbktdba)
• lenovo thinkstation p300 firmware (< fbktdba)
• lenovo thinkstation c30 refresh firmware (< 2-27-2020)
• lenovo thinkstation d30 refresh firmware (< 2-27-2020)
• lenovo thinkstation p410 firmware (< 2-27-2020)
• lenovo thinkstation p500 firmware (< 2-27-2020)
• lenovo thinkstation p510 firmware (< 2-27-2020)
• lenovo thinkstation p700 firmware (< 2-27-2020)
• lenovo thinkstation p710 firmware (< 2-27-2020)
• lenovo thinkstation p720 firmware (< 2-27-2020)
• lenovo thinkstation p900 firmware (< 2-27-2020)
• lenovo thinkstation p910 firmware (< 2-27-2020)
• lenovo thinkstation p920 firmware (< 2-27-2020)
• lenovo thinkstation s30 refresh firmware (< 2-27-2020)
• lenovo h50-30g desktop firmware (< fckt97a)
• lenovo lenovo 63 desktop firmware (< fckt97a)
• lenovo m4500 desktop firmware (< fckt97a)
• lenovo m4500 id desktop firmware (< fckt97a)
• lenovo m4550 id desktop firmware (< fckt97a)
• lenovo qitian 4500 desktop firmware (< fckt97a)
• lenovo qitian b4550 desktop firmware (< fckt97a)
• lenovo qitian m4550 desktop firmware (< fckt97a)
• lenovo thinkcentre e73 desktop firmware (< fckt97a)
• lenovo thinkcentre e73s desktop firmware (< fckt97a)
• lenovo thinkcentre m4500k desktop firmware (< fckt97a)
• lenovo thinkcentre m4500s desktop firmware (< fckt97a)
• lenovo thinkcentre m4500t desktop firmware (< fckt97a)
• lenovo thinkcentre m73 desktop firmware (< fckt97a)
• lenovo yangtian afh81 desktop firmware (< fckt97a)
• lenovo yangtian mc h81 desktop firmware (< fckt97a)
• lenovo yangtian mf h81 pci desktop firmware (< fckt97a)
• lenovo yangtian ms h81 desktop firmware (< fckt97a)
• lenovo yangtian tc h81 pci desktop firmware (< fckt97a)
• lenovo yangtian wcc h81 pci desktop firmware (< fckt97a)
• lenovo yangtian wf h81 pci desktop firmware (< fckt97a)
• lenovo yangtian ws h81 desktop firmware (< fckt97a)
• lenovo thinkcentre m9350z firmware (< fekta1a)
• lenovo thinkcentre m93z firmware (< fekta1a)
• lenovo thinkcentre m73 tiny firmware (< fhkt84a)
• lenovo thinkcentre m4500q firmware (< fhkt84a)
• lenovo thinkcentre m9550z firmware (< fukt55a)
• lenovo thinkcentre m9500z firmware (< fukt55a)
• lenovo thinkcentre m900z firmware (< fukt55a)
• lenovo thinkcenter m700z firmware (< fvkt64a)
• lenovo thinkcenter m800z firmware (< fvkt64a)
• lenovo thinkcentre e74z firmware (< fvkt64a)
• lenovo thinkcentre m700z firmware (< fvkt64a)
• lenovo thinkcentre m7300z firmware (< fvkt64a)
• lenovo thinkcentre m800z firmware (< fvkt64a)
• lenovo thinkcentre m8300z firmware (< fvkt64a)
• lenovo thinkcentre m8350z firmware (< fvkt64a)
… and 122 more
Related
Weakness · CWE (1)
- CWE-665 Improper Initialization weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-28078 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/176178 Third Party Advisory, VDB Entry
- https://support.lenovo.com/us/en/product_security/LEN-28078 Vendor Advisory