CVE-2019-6171

EPSS 0.14%
Published 19.08.2019 15:15:11
Last modified 21.11.2024 04:46:05
Source psirt@lenovo.com
Teams watchlist Login
Open Login

A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.

Affected products Warnungen 0 Metrics 4 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Lenovo ≫ 20f1 Firmware Version-

Lenovo ≫ 20f1 Version-

Lenovo ≫ 20f2 Firmware Version-

Lenovo ≫ 20f2 Version-

Lenovo ≫ 20jq Firmware Version-

Lenovo ≫ 20jq Version-

Lenovo ≫ 20jr Firmware Version-

Lenovo ≫ 20jr Version-

Lenovo ≫ 20g9 Firmware Version-

Lenovo ≫ 20g9 Version-

Lenovo ≫ 20gb Firmware Version-

Lenovo ≫ 20gb Version-

Lenovo ≫ 20g8 Firmware Version-

Lenovo ≫ 20g8 Version-

Lenovo ≫ 20ga Firmware Version-

Lenovo ≫ 20ga Version-

Lenovo ≫ 20g9 Firmware Version-

Lenovo ≫ 20g9 Version-

Lenovo ≫ 20gb Firmware Version-

Lenovo ≫ 20gb Version-

Lenovo ≫ 20g8 Firmware Version-

Lenovo ≫ 20g8 Version-

Lenovo ≫ 20ga Firmware Version-

Lenovo ≫ 20ga Version-

Lenovo ≫ 20ht Firmware Version-

Lenovo ≫ 20ht Version-

Lenovo ≫ 20hv Firmware Version-

Lenovo ≫ 20hv Version-

Lenovo ≫ 20hs Firmware Version-

Lenovo ≫ 20hs Version-

Lenovo ≫ 20hu Firmware Version-

Lenovo ≫ 20hu Version-

Lenovo ≫ 20ht Firmware Version-

Lenovo ≫ 20ht Version-

Lenovo ≫ 20hv Firmware Version-

Lenovo ≫ 20hv Version-

Lenovo ≫ 20hs Firmware Version-

Lenovo ≫ 20hs Version-

Lenovo ≫ 20hu Firmware Version-

Lenovo ≫ 20hu Version-

Lenovo ≫ 20lr Firmware Version-

Lenovo ≫ 20lr Version-

Lenovo ≫ 20lq Firmware Version-

Lenovo ≫ 20lq Version-

Lenovo ≫ 20ln Firmware Version-

Lenovo ≫ 20ln Version-

Lenovo ≫ 20lm Firmware Version-

Lenovo ≫ 20lm Version-

Lenovo ≫ 20lr Firmware Version-

Lenovo ≫ 20lr Version-

Lenovo ≫ 20lq Firmware Version-

Lenovo ≫ 20lq Version-

Lenovo ≫ 20ln Firmware Version-

Lenovo ≫ 20ln Version-

Lenovo ≫ 20lm Firmware Version-

Lenovo ≫ 20lm Version-

Lenovo ≫ 20j1 Firmware Version-

Lenovo ≫ 20j1 Version-

Lenovo ≫ 20j2 Firmware Version-

Lenovo ≫ 20j2 Version-

Lenovo ≫ 20j1 Firmware Version-

Lenovo ≫ 20j1 Version-

Lenovo ≫ 20j2 Firmware Version-

Lenovo ≫ 20j2 Version-

Lenovo ≫ 20kc Firmware Version-

Lenovo ≫ 20kc Version-

Lenovo ≫ 20kd Firmware Version-

Lenovo ≫ 20kd Version-

Lenovo ≫ 20mw Firmware Version-

Lenovo ≫ 20mw Version-

Lenovo ≫ 20mx Firmware Version-

Lenovo ≫ 20mx Version-

Lenovo ≫ 20kl Firmware Version-

Lenovo ≫ 20kl Version-

Lenovo ≫ 20km Firmware Version-

Lenovo ≫ 20km Version-

Lenovo ≫ 20mu Firmware Version-

Lenovo ≫ 20mu Version-

Lenovo ≫ 20mv Firmware Version-

Lenovo ≫ 20mv Version-

Lenovo ≫ 20dc Firmware Version-

Lenovo ≫ 20dc Version-

Lenovo ≫ 20dd Firmware Version-

Lenovo ≫ 20dd Version-

Lenovo ≫ 30eh Firmware Version-

Lenovo ≫ 30eh Version-

Lenovo ≫ 20df Firmware Version-

Lenovo ≫ 20df Version-

Lenovo ≫ 20dg Firmware Version-

Lenovo ≫ 20dg Version-

Lenovo ≫ 20e0 Firmware Version-

Lenovo ≫ 20e0 Version-

Lenovo ≫ 20de Firmware Version-

Lenovo ≫ 20de Version-

Lenovo ≫ 20dh Firmware Version-

Lenovo ≫ 20dh Version-

Lenovo ≫ 20et Firmware Version-

Lenovo ≫ 20et Version-

Lenovo ≫ 20eu Firmware Version-

Lenovo ≫ 20eu Version-

Lenovo ≫ 20ev Firmware Version-

Lenovo ≫ 20ev Version-

Lenovo ≫ 20ew Firmware Version-

Lenovo ≫ 20ew Version-

Lenovo ≫ 20ex Firmware Version-

Lenovo ≫ 20ex Version-

Lenovo ≫ 20ey Firmware Version-

Lenovo ≫ 20ey Version-

Lenovo ≫ 20h1 Firmware Version-

Lenovo ≫ 20h1 Version-

Lenovo ≫ 20h2 Firmware Version-

Lenovo ≫ 20h2 Version-

Lenovo ≫ 20h5 Firmware Version-

Lenovo ≫ 20h5 Version-

Lenovo ≫ 20h6 Firmware Version-

Lenovo ≫ 20h6 Version-

Lenovo ≫ 20h4 Firmware Version-

Lenovo ≫ 20h4 Version-

Lenovo ≫ 20h8 Firmware Version-

Lenovo ≫ 20h8 Version-

Lenovo ≫ 20kn Firmware Version-

Lenovo ≫ 20kn Version-

Lenovo ≫ 20kq Firmware Version-

Lenovo ≫ 20kq Version-

Lenovo ≫ 20ks Firmware Version-

Lenovo ≫ 20ks Version-

Lenovo ≫ 20kt Firmware Version-

Lenovo ≫ 20kt Version-

Lenovo ≫ 20ku Firmware Version-

Lenovo ≫ 20ku Version-

Lenovo ≫ 20kv Firmware Version-

Lenovo ≫ 20kv Version-

Lenovo ≫ 20n8 Firmware Version-

Lenovo ≫ 20n8 Version-

Lenovo ≫ 20n9 Firmware Version-

Lenovo ≫ 20n9 Version-

Lenovo ≫ 20ng Firmware Version-

Lenovo ≫ 20ng Version-

Lenovo ≫ 20h5 Firmware Version-

Lenovo ≫ 20h5 Version-

Lenovo ≫ 20h6 Firmware Version-

Lenovo ≫ 20h6 Version-

Lenovo ≫ 3xxx Firmware Version-

Lenovo ≫ 3xxx Version-

Lenovo ≫ 20m5 Firmware Version-

Lenovo ≫ 20m5 Version-

Lenovo ≫ 20m6 Firmware Version-

Lenovo ≫ 20m6 Version-

Lenovo ≫ 20m7 Firmware Version-

Lenovo ≫ 20m7 Version-

Lenovo ≫ 20m8 Firmware Version-

Lenovo ≫ 20m8 Version-

Lenovo ≫ 20nr Firmware Version-

Lenovo ≫ 20nr Version-

Lenovo ≫ 20ns Firmware Version-

Lenovo ≫ 20ns Version-

Lenovo ≫ 20nt Firmware Version-

Lenovo ≫ 20nt Version-

Lenovo ≫ 20nu Firmware Version-

Lenovo ≫ 20nu Version-

Lenovo ≫ 246x Firmware Version-

Lenovo ≫ 246x Version-

Lenovo ≫ 247x Firmware Version-

Lenovo ≫ 247x Version-

Lenovo ≫ 248x Firmware Version-

Lenovo ≫ 248x Version-

Lenovo ≫ 20ds Firmware Version-

Lenovo ≫ 20ds Version-

Lenovo ≫ 20dt Firmware Version-

Lenovo ≫ 20dt Version-

Lenovo ≫ 20fu Firmware Version-

Lenovo ≫ 20fu Version-

Lenovo ≫ 20fv Firmware Version-

Lenovo ≫ 20fv Version-

Lenovo ≫ 20j4 Firmware Version-

Lenovo ≫ 20j4 Version-

Lenovo ≫ 20j5 Firmware Version-

Lenovo ≫ 20j5 Version-

Lenovo ≫ 20ju Firmware Version-

Lenovo ≫ 20ju Version-

Lenovo ≫ 20jv Firmware Version-

Lenovo ≫ 20jv Version-

Lenovo ≫ 20ls Firmware Version-

Lenovo ≫ 20ls Version-

Lenovo ≫ 20lt Firmware Version-

Lenovo ≫ 20lt Version-

Lenovo ≫ 20l2 Firmware Version-

Lenovo ≫ 20l2 Version-

Lenovo ≫ 20lx Firmware Version-

Lenovo ≫ 20lx Version-

Lenovo ≫ 20ja Firmware Version-

Lenovo ≫ 20ja Version-

Lenovo ≫ 20dq Firmware Version-

Lenovo ≫ 20dq Version-

Lenovo ≫ 20dr Firmware Version-

Lenovo ≫ 20dr Version-

Lenovo ≫ 20g5 Firmware Version-

Lenovo ≫ 20g5 Version-

Lenovo ≫ 20g4 Firmware Version-

Lenovo ≫ 20g4 Version-

Lenovo ≫ 20b0 Firmware Version-

Lenovo ≫ 20b0 Version-

Lenovo ≫ 20b3 Firmware Version-

Lenovo ≫ 20b3 Version-

Lenovo ≫ 234x Firmware Version-

Lenovo ≫ 234x Version-

Lenovo ≫ 235x Firmware Version-

Lenovo ≫ 235x Version-

Lenovo ≫ 235x Firmware Version-

Lenovo ≫ 235x Version-

Lenovo ≫ 20a9 Firmware Version-

Lenovo ≫ 20a9 Version-

Lenovo ≫ 20aa Firmware Version-

Lenovo ≫ 20aa Version-

Lenovo ≫ 20ab Firmware Version-

Lenovo ≫ 20ab Version-

Lenovo ≫ 20ac Firmware Version-

Lenovo ≫ 20ac Version-

Lenovo ≫ 20b6 Firmware Version-

Lenovo ≫ 20b6 Version-

Lenovo ≫ 20b7 Firmware Version-

Lenovo ≫ 20b7 Version-

Lenovo ≫ 20aq Firmware Version-

Lenovo ≫ 20aq Version-

Lenovo ≫ 20ar Firmware Version-

Lenovo ≫ 20ar Version-

Lenovo ≫ 20an Firmware Version-

Lenovo ≫ 20an Version-

Lenovo ≫ 20aw Firmware Version-

Lenovo ≫ 20aw Version-

Lenovo ≫ 20bu Firmware Version-

Lenovo ≫ 20bu Version-

Lenovo ≫ 20bv Firmware Version-

Lenovo ≫ 20bv Version-

Lenovo ≫ 20dj Firmware Version-

Lenovo ≫ 20dj Version-

Lenovo ≫ 20bw Firmware Version-

Lenovo ≫ 20bw Version-

Lenovo ≫ 20bx Firmware Version-

Lenovo ≫ 20bx Version-

Lenovo ≫ 20fm Firmware Version-

Lenovo ≫ 20fm Version-

Lenovo ≫ 20fn Firmware Version-

Lenovo ≫ 20fn Version-

Lenovo ≫ 20fw Firmware Version-

Lenovo ≫ 20fw Version-

Lenovo ≫ 20fx Firmware Version-

Lenovo ≫ 20fx Version-

Lenovo ≫ 20j6 Firmware Version-

Lenovo ≫ 20j6 Version-

Lenovo ≫ 20j7 Firmware Version-

Lenovo ≫ 20j7 Version-

Lenovo ≫ 235x Firmware Version-

Lenovo ≫ 235x Version-

Lenovo ≫ 239x Firmware Version-

Lenovo ≫ 239x Version-

Lenovo ≫ 242x Firmware Version-

Lenovo ≫ 242x Version-

Lenovo ≫ 243x Firmware Version-

Lenovo ≫ 243x Version-

Lenovo ≫ 20be Firmware Version-

Lenovo ≫ 20be Version-

Lenovo ≫ 20bf Firmware Version-

Lenovo ≫ 20bf Version-

Lenovo ≫ 243x Firmware Version-

Lenovo ≫ 243x Version-

Lenovo ≫ 244x Firmware Version-

Lenovo ≫ 244x Version-

Lenovo ≫ 246x Firmware Version-

Lenovo ≫ 246x Version-

Lenovo ≫ 20bg Firmware Version-

Lenovo ≫ 20bg Version-

Lenovo ≫ 20bg Firmware Version-

Lenovo ≫ 20bg Version-

Lenovo ≫ 20ef Firmware Version-

Lenovo ≫ 20ef Version-

Lenovo ≫ 20eg Firmware Version-

Lenovo ≫ 20eg Version-

Lenovo ≫ 34xx Firmware Version-

Lenovo ≫ 34xx Version-

Lenovo ≫ 20a7 Firmware Version-

Lenovo ≫ 20a7 Version-

Lenovo ≫ 20a8 Firmware Version-

Lenovo ≫ 20a8 Version-

Lenovo ≫ 336x Firmware Version-

Lenovo ≫ 336x Version-

Lenovo ≫ 337x Firmware Version-

Lenovo ≫ 337x Version-

Lenovo ≫ 20bl Firmware Version-

Lenovo ≫ 20bl Version-

Lenovo ≫ 20bm Firmware Version-

Lenovo ≫ 20bm Version-

Lenovo ≫ 343x Firmware Version-

Lenovo ≫ 343x Version-

Lenovo ≫ 344x Firmware Version-

Lenovo ≫ 344x Version-

Lenovo ≫ 230x Firmware Version-

Lenovo ≫ 230x Version-

Lenovo ≫ 232x Firmware Version-

Lenovo ≫ 232x Version-

Lenovo ≫ 233x Firmware Version-

Lenovo ≫ 233x Version-

Lenovo ≫ 20al Firmware Version-

Lenovo ≫ 20al Version-

Lenovo ≫ 20am Firmware Version-

Lenovo ≫ 20am Version-

Lenovo ≫ 20aj Firmware Version-

Lenovo ≫ 20aj Version-

Lenovo ≫ 20ak Firmware Version-

Lenovo ≫ 20ak Version-

Lenovo ≫ 20f5 Firmware Version-

Lenovo ≫ 20f5 Version-

Lenovo ≫ 20f6 Firmware Version-

Lenovo ≫ 20f6 Version-

Lenovo ≫ 20hn Firmware Version-

Lenovo ≫ 20hn Version-

Lenovo ≫ 20hm Firmware Version-

Lenovo ≫ 20hm Version-

Lenovo ≫ 20k5 Firmware Version-

Lenovo ≫ 20k5 Version-

Lenovo ≫ 20k6 Firmware Version-

Lenovo ≫ 20k6 Version-

Lenovo ≫ 20lh Firmware Version-

Lenovo ≫ 20lh Version-

Lenovo ≫ 20lj Firmware Version-

Lenovo ≫ 20lj Version-

Lenovo ≫ 20nn Firmware Version-

Lenovo ≫ 20nn Version-

Lenovo ≫ 20nq Firmware Version-

Lenovo ≫ 20nq Version-

Lenovo ≫ 20d9 Firmware Version-

Lenovo ≫ 20d9 Version-

Lenovo ≫ 20da Firmware Version-

Lenovo ≫ 20da Version-

Lenovo ≫ 20jh Firmware Version-

Lenovo ≫ 20jh Version-

Lenovo ≫ 20jj Firmware Version-

Lenovo ≫ 20jj Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.14%	0.305

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.8	0.9	5.9	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C
psirt@lenovo.com	6.4	0.5	5.9	CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

https://support.lenovo.com/solutions/LEN-27764

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-6171

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-6171

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-6171

EUVD