CVE-2019-6188 ThinkPad T460p and T470p BIOS Tamper Mechanism

2019-11-1220:40:54

lenovo

www.cve.org

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

60.7%

JSON

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.

CNA Affected

[
  {
    "product": "ThinkPad T470p",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "R0FET50W",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ThinkPad T460p",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "R07ET90W",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-27714