CVE-2019-6171 MEDIUM

CVE-2019-6171

Vendor Lenovo
Product BIOS
Published August 19, 2019
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

6.4/10
Attack vector Physical
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.

Key dates

02Disclosure timeline

August 19, 2019 CVE published
September 16, 2024 Record updated