4.4

CVE-2019-6192

Exploit
A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Power Management Driver Version < 1.67.17.48
   Lenovo ≫ Thinkpad 13 Gen 2 Version -
   Lenovo ≫ Thinkpad 25 Version -
   Lenovo ≫ Thinkpad A275 Version -
   Lenovo ≫ Thinkpad A285 Version -
   Lenovo ≫ Thinkpad A475 Version -
   Lenovo ≫ Thinkpad A485 Version -
   Lenovo ≫ Thinkpad E14 Version -
   Lenovo ≫ Thinkpad E15 Version -
   Lenovo ≫ Thinkpad E470 Version -
   Lenovo ≫ Thinkpad E470c Version -
   Lenovo ≫ Thinkpad E475 Version -
   Lenovo ≫ Thinkpad E480 Version -
   Lenovo ≫ Thinkpad E490 Version -
   Lenovo ≫ Thinkpad E495 Version -
   Lenovo ≫ Thinkpad E570 Version -
   Lenovo ≫ Thinkpad E570c Version -
   Lenovo ≫ Thinkpad E575 Version -
   Lenovo ≫ Thinkpad E580 Version -
   Lenovo ≫ Thinkpad E590 Version -
   Lenovo ≫ Thinkpad E595 Version -
   Lenovo ≫ Thinkpad L13 Version -
   Lenovo ≫ Thinkpad L13 Yoga Version -
   Lenovo ≫ Thinkpad L380 Version -
   Lenovo ≫ Thinkpad L380 Yoga Version -
   Lenovo ≫ Thinkpad L390 Version -
   Lenovo ≫ Thinkpad L390 Yoga Version -
   Lenovo ≫ Thinkpad L470 Version -
   Lenovo ≫ Thinkpad L480 Version -
   Lenovo ≫ Thinkpad L490 Version -
   Lenovo ≫ Thinkpad L570 Version -
   Lenovo ≫ Thinkpad L580 Version -
   Lenovo ≫ Thinkpad L590 Version -
   Lenovo ≫ Thinkpad P1 Version -
   Lenovo ≫ Thinkpad P1 Gen 2 Version -
   Lenovo ≫ Thinkpad P43s Version -
   Lenovo ≫ Thinkpad P51 Version -
   Lenovo ≫ Thinkpad P51s Version -
   Lenovo ≫ Thinkpad P52 Version -
   Lenovo ≫ Thinkpad P52s Version -
   Lenovo ≫ Thinkpad P53 Version -
   Lenovo ≫ Thinkpad P53s Version -
   Lenovo ≫ Thinkpad P7 Version -
   Lenovo ≫ Thinkpad P72 Version -
   Lenovo ≫ Thinkpad P73 Version -
   Lenovo ≫ Thinkpad R14 Version -
   Lenovo ≫ Thinkpad R480 Version -
   Lenovo ≫ Thinkpad S1 Gen 4 Version -
   Lenovo ≫ Thinkpad S2 Gen 2 Version -
   Lenovo ≫ Thinkpad S2 Gen 5 Version -
   Lenovo ≫ Thinkpad S2 Yoga Gen 5 Version -
   Lenovo ≫ Thinkpad S3 Gen 2 Version -
   Lenovo ≫ Thinkpad S5 Gen 2 Version -
   Lenovo ≫ Thinkpad T470 Version -
   Lenovo ≫ Thinkpad T470p Version -
   Lenovo ≫ Thinkpad T470s Version -
   Lenovo ≫ Thinkpad T480 Version -
   Lenovo ≫ Thinkpad T480s Version -
   Lenovo ≫ Thinkpad T490 Version -
   Lenovo ≫ Thinkpad T490s Version -
   Lenovo ≫ Thinkpad T495 Version -
   Lenovo ≫ Thinkpad T570 Version -
   Lenovo ≫ Thinkpad T580 Version -
   Lenovo ≫ Thinkpad T590 Version -
   Lenovo ≫ Thinkpad X1 Carbon Gen 5 Version -
   Lenovo ≫ Thinkpad X1 Carbon Gen 6 Version -
   Lenovo ≫ Thinkpad X1 Carbon Gen 7 Version -
   Lenovo ≫ Thinkpad X1 Extreme Version -
   Lenovo ≫ Thinkpad X1 Extreme 2nd Version -
   Lenovo ≫ Thinkpad X1 Tablet Gen 2 Version -
   Lenovo ≫ Thinkpad X1 Tablet Gen 3 Version -
   Lenovo ≫ Thinkpad X1 Yoga Gen 2 Version -
   Lenovo ≫ Thinkpad X1 Yoga Gen 3 Version -
   Lenovo ≫ Thinkpad X1 Yoga Gen 4 Version -
   Lenovo ≫ Thinkpad X270 Version -
   Lenovo ≫ Thinkpad X280 Version -
   Lenovo ≫ Thinkpad X380 Yoga Version -
   Lenovo ≫ Thinkpad X390 Version -
   Lenovo ≫ Thinkpad X390 Yoga Version -
   Lenovo ≫ Thinkpad X395 Version -
   Lenovo ≫ Thinkpad Yoga 370 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.74% 0.748
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.4 0.8 3.6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
NIST 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:N/A:P
Lenovo 4.4 0.8 3.6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

http://packetstormsecurity.com/files/155656/Lenovo-Power-Management-Driver-Buffer-Overflow.html
Third Party Advisory
Exploit
https://support.lenovo.com/solutions/LEN-29334
Vendor Advisory
Mitigation