CVE-2019-6192

🗓️ 10 Dec 2019 18:05:17Reported by lenovoType

cve🔗 web.nvd.nist.gov👁 129 Views🌐 WEB

Potential vulnerability in Lenovo Power Management Driver < 1.67.17.48 could lead to buffer overflow and denial of service

Reporter	Title	Published	Views	Family All 13
0day.today	Lenovo Power Management Driver 1.67.17.48 - (pmdrvs.sys) Denial of Service Exploit	12 Dec 201900:00	–	zdt
CNVD	Lenovo Power Management Driver Denial of Service Vulnerability	13 Dec 201900:00	–	cnvd
Cvelist	CVE-2019-6192	10 Dec 201918:05	–	cvelist
Exploit DB	Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service (PoC)	12 Dec 201900:00	–	exploitdb
EUVD	EUVD-2019-15759	7 Oct 202500:30	–	euvd
exploitpack	Lenovo Power Management Driver 1.67.17.48 - pmdrvs.sys Denial of Service (PoC)	12 Dec 201900:00	–	exploitpack
Lenovo	Lenovo Power Management Driver Vulnerability - Lenovo Support US	11 Nov 201914:23	–	lenovo
Lenovo	Lenovo Power Management Driver Vulnerability - Lenovo Support US	11 Nov 201914:23	–	lenovo
NVD	CVE-2019-6192	10 Dec 201918:15	–	nvd
OSV	CVE-2019-6192	10 Dec 201918:15	–	osv

NVD

Vulners

Node

lenovo power_management_driverRange<1.67.17.48

AND

lenovo thinkpad_13_gen_2Match-

lenovo thinkpad_25Match-

lenovo thinkpad_a275Match-

lenovo thinkpad_a285Match-

lenovo thinkpad_a475Match-

lenovo thinkpad_a485Match-

lenovo thinkpad_e14Match-

lenovo thinkpad_e15Match-

lenovo thinkpad_e470Match-

lenovo thinkpad_e470cMatch-

lenovo thinkpad_e475Match-

lenovo thinkpad_e480Match-

lenovo thinkpad_e490Match-

lenovo thinkpad_e495Match-

lenovo thinkpad_e570Match-

lenovo thinkpad_e570cMatch-

lenovo thinkpad_e575Match-

lenovo thinkpad_e580Match-

lenovo thinkpad_e590Match-

lenovo thinkpad_e595Match-

lenovo thinkpad_l13Match-

lenovo thinkpad_l13_yogaMatch-

lenovo thinkpad_l380Match-

lenovo thinkpad_l380_yogaMatch-

lenovo thinkpad_l390Match-

lenovo thinkpad_l390_yogaMatch-

lenovo thinkpad_l470Match-

lenovo thinkpad_l480Match-

lenovo thinkpad_l490Match-

lenovo thinkpad_l570Match-

lenovo thinkpad_l580Match-

lenovo thinkpad_l590Match-

lenovo thinkpad_p1Match-

lenovo thinkpad_p1_gen_2Match-

lenovo thinkpad_p43sMatch-

lenovo thinkpad_p51Match-

lenovo thinkpad_p51sMatch-

lenovo thinkpad_p52Match-

lenovo thinkpad_p52sMatch-

lenovo thinkpad_p53Match-

lenovo thinkpad_p53sMatch-

lenovo thinkpad_p7Match-

lenovo thinkpad_p72Match-

lenovo thinkpad_p73Match-

lenovo thinkpad_r14Match-

lenovo thinkpad_r480Match-

lenovo thinkpad_s1_gen_4Match-

lenovo thinkpad_s2_gen_2Match-

lenovo thinkpad_s2_gen_5Match-

lenovo thinkpad_s2_yoga_gen_5Match-

lenovo thinkpad_s3_gen_2Match-

lenovo thinkpad_s5_gen_2Match-

lenovo thinkpad_t470Match-

lenovo thinkpad_t470pMatch-

lenovo thinkpad_t470sMatch-

lenovo thinkpad_t480Match-

lenovo thinkpad_t480sMatch-

lenovo thinkpad_t490Match-

lenovo thinkpad_t490sMatch-

lenovo thinkpad_t495Match-

lenovo thinkpad_t570Match-

lenovo thinkpad_t580Match-

lenovo thinkpad_t590Match-

lenovo thinkpad_x1_carbon_gen_5Match-

lenovo thinkpad_x1_carbon_gen_6Match-

lenovo thinkpad_x1_carbon_gen_7Match-

lenovo thinkpad_x1_extremeMatch-

lenovo thinkpad_x1_extreme_2ndMatch-

lenovo thinkpad_x1_tablet_gen_2Match-

lenovo thinkpad_x1_tablet_gen_3Match-

lenovo thinkpad_x1_yoga_gen_2Match-

lenovo thinkpad_x1_yoga_gen_3Match-

lenovo thinkpad_x1_yoga_gen_4Match-

lenovo thinkpad_x270Match-

lenovo thinkpad_x280Match-

lenovo thinkpad_x380_yogaMatch-

lenovo thinkpad_x390Match-

lenovo thinkpad_x390_yogaMatch-

lenovo thinkpad_x395Match-

lenovo thinkpad_yoga_370Match-

[
  {
    "product": "Power Management driver",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "1.67.17.48",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/155656/Lenovo-Power-Management-Driver-Buffer-Overflow.html
support	www.support.lenovo.com/solutions/LEN-29334

Parameter	Position	Path	Description	CWE
0x80862013	path	\\.\pmdrvs	IOCTL-based denial of service via pmdrvs.sys driver (buffer/input validation issue) as shown in PoC	CWE-120
0xdeadbeef	path	\\.\pmdrvs	IOCTL-based denial of service via pmdrvs.sys driver (buffer/input validation issue) as shown in PoC	CWE-120

17 Jun 2026 02:38Current

4.8Medium risk

Vulners AI Score4.8

CVSS 22.1

CVSS 3.14.4

EPSS0.01742

CWE-120