Lucene search

[email protected]CVE-2019-6171

HistoryAug 19, 2019 - 3:15 p.m.

CVE-2019-6171

2019-08-1915:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2019-6171

thinkpad

bios

vulnerability

firmware

update

unauthorized

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.4 Medium

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

29.6%

JSON

A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.

CPENameOperatorVersion
lenovo:20f1_firmwarelenovo 20f1 firmwareeq-
lenovo:20f2_firmwarelenovo 20f2 firmwareeq-
lenovo:20jq_firmwarelenovo 20jq firmwareeq-
lenovo:20jr_firmwarelenovo 20jr firmwareeq-
lenovo:20g9_firmwarelenovo 20g9 firmwareeq-
lenovo:20gb_firmwarelenovo 20gb firmwareeq-
lenovo:20g8_firmwarelenovo 20g8 firmwareeq-
lenovo:20ga_firmwarelenovo 20ga firmwareeq-
lenovo:20ht_firmwarelenovo 20ht firmwareeq-
lenovo:20hv_firmwarelenovo 20hv firmwareeq-

CPE	Name	Operator	Version
lenovo:20f1_firmware	lenovo 20f1 firmware	eq	-
lenovo:20f2_firmware	lenovo 20f2 firmware	eq	-
lenovo:20jq_firmware	lenovo 20jq firmware	eq	-
lenovo:20jr_firmware	lenovo 20jr firmware	eq	-
lenovo:20g9_firmware	lenovo 20g9 firmware	eq	-
lenovo:20gb_firmware	lenovo 20gb firmware	eq	-
lenovo:20g8_firmware	lenovo 20g8 firmware	eq	-
lenovo:20ga_firmware	lenovo 20ga firmware	eq	-
lenovo:20ht_firmware	lenovo 20ht firmware	eq	-
lenovo:20hv_firmware	lenovo 20hv firmware	eq	-

Rows per page:

1-10 of 1481

References

support.lenovo.com/solutions/LEN-27764

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.4 Medium

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

29.6%

JSON

Related for CVE-2019-6171

lenovo2 prion1 threatpost1