PT-2019-18003 · Lenovo · Lenovo Thinkpad

Published 2019-11-12 · Updated 2020-12-08 · CVE-2019-6172

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo ThinkPad (affected versions not specified)

Description A potential issue in the SMI callback function used in the Legacy USB driver may allow arbitrary code execution due to insufficient checking of passed parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-6172

Affected Products

Lenovo Thinkpad

References · 3

• https://osv.dev/vulnerability/CVE-2019-6172 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6172 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-27714 · Vendor Advisory