PT-2019-18015 · Lenovo · Lenovo Thinkpad T470P+1

Published 2019-11-12 · Updated 2020-08-24 · CVE-2019-6188

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo ThinkPad T460p versions up to R07ET90W Lenovo ThinkPad T470p versions up to R0FET50W

Description The BIOS tamper detection mechanism in certain Lenovo ThinkPad models was not triggered, potentially allowing unauthorized access.

Recommendations For Lenovo ThinkPad T460p versions up to R07ET90W, update the BIOS to a version later than R07ET90W. For Lenovo ThinkPad T470p versions up to R0FET50W, update the BIOS to a version later than R0FET50W.

Fix

Related Identifiers

CVE-2019-6188

Affected Products

Lenovo Thinkpad T460P

Lenovo Thinkpad T470P

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-6188 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-27714 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-6188 · Vendor Advisory