Lucene search

[email protected]CVE-2019-6192

HistoryDec 10, 2019 - 6:15 p.m.

CVE-2019-6192

2019-12-1018:15:09

CWE-120

[email protected]

web.nvd.nist.gov

lenovo

power management driver

vulnerability

buffer overflow

denial of service

cve-2019-6192

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.4%

JSON

A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service.

Affected configurations

NVD

Node

lenovopower_management_driverRange<1.67.17.48

AND

lenovothinkpad_13_gen_2Match-

lenovothinkpad_25Match-

lenovothinkpad_a275Match-

lenovothinkpad_a285Match-

lenovothinkpad_a475Match-

lenovothinkpad_a485Match-

lenovothinkpad_e14Match-

lenovothinkpad_e15Match-

lenovothinkpad_e470Match-

lenovothinkpad_e470cMatch-

lenovothinkpad_e475Match-

lenovothinkpad_e480Match-

lenovothinkpad_e490Match-

lenovothinkpad_e495Match-

lenovothinkpad_e570Match-

lenovothinkpad_e570cMatch-

lenovothinkpad_e575Match-

lenovothinkpad_e580Match-

lenovothinkpad_e590Match-

lenovothinkpad_e595Match-

lenovothinkpad_l13Match-

lenovothinkpad_l13_yogaMatch-

lenovothinkpad_l380Match-

lenovothinkpad_l380_yogaMatch-

lenovothinkpad_l390Match-

lenovothinkpad_l390_yogaMatch-

lenovothinkpad_l470Match-

lenovothinkpad_l480Match-

lenovothinkpad_l490Match-

lenovothinkpad_l570Match-

lenovothinkpad_l580Match-

lenovothinkpad_l590Match-

lenovothinkpad_p1Match-

lenovothinkpad_p1_gen_2Match-

lenovothinkpad_p43sMatch-

lenovothinkpad_p51Match-

lenovothinkpad_p51sMatch-

lenovothinkpad_p52Match-

lenovothinkpad_p52sMatch-

lenovothinkpad_p53Match-

lenovothinkpad_p53sMatch-

lenovothinkpad_p7Match-

lenovothinkpad_p72Match-

lenovothinkpad_p73Match-

lenovothinkpad_r14Match-

lenovothinkpad_r480Match-

lenovothinkpad_s1_gen_4Match-

lenovothinkpad_s2_gen_2Match-

lenovothinkpad_s2_gen_5Match-

lenovothinkpad_s2_yoga_gen_5Match-

lenovothinkpad_s3_gen_2Match-

lenovothinkpad_s5_gen_2Match-

lenovothinkpad_t470Match-

lenovothinkpad_t470pMatch-

lenovothinkpad_t470sMatch-

lenovothinkpad_t480Match-

lenovothinkpad_t480sMatch-

lenovothinkpad_t490Match-

lenovothinkpad_t490sMatch-

lenovothinkpad_t495Match-

lenovothinkpad_t570Match-

lenovothinkpad_t580Match-

lenovothinkpad_t590Match-

lenovothinkpad_x1_carbon_gen_5Match-

lenovothinkpad_x1_carbon_gen_6Match-

lenovothinkpad_x1_carbon_gen_7Match-

lenovothinkpad_x1_extremeMatch-

lenovothinkpad_x1_extreme_2ndMatch-

lenovothinkpad_x1_tablet_gen_2Match-

lenovothinkpad_x1_tablet_gen_3Match-

lenovothinkpad_x1_yoga_gen_2Match-

lenovothinkpad_x1_yoga_gen_3Match-

lenovothinkpad_x1_yoga_gen_4Match-

lenovothinkpad_x270Match-

lenovothinkpad_x280Match-

lenovothinkpad_x380_yogaMatch-

lenovothinkpad_x390Match-

lenovothinkpad_x390_yogaMatch-

lenovothinkpad_x395Match-

lenovothinkpad_yoga_370Match-

CPENameOperatorVersion
lenovo:power_management_driverlenovo power management driverlt1.67.17.48

CPE	Name	Operator	Version
lenovo:power_management_driver	lenovo power management driver	lt	1.67.17.48

CNA Affected

[
  {
    "product": "Power Management driver",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "1.67.17.48",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]