CVE-2019-6171

A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
lenovoCNA
6.4 MEDIUM
PHYSICAL
HIGH
NONE
CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
VendorProductVersion
lenovo20f1_firmware
-
lenovo20f2_firmware
-
lenovo20jq_firmware
-
lenovo20jr_firmware
-
lenovo20g9_firmware
-
lenovo20gb_firmware
-
lenovo20g8_firmware
-
lenovo20ga_firmware
-
lenovo20g9_firmware
-
lenovo20gb_firmware
-
lenovo20g8_firmware
-
lenovo20ga_firmware
-
lenovo20ht_firmware
-
lenovo20hv_firmware
-
lenovo20hs_firmware
-
lenovo20hu_firmware
-
lenovo20ht_firmware
-
lenovo20hv_firmware
-
lenovo20hs_firmware
-
lenovo20hu_firmware
-
lenovo20lr_firmware
-
lenovo20lq_firmware
-
lenovo20ln_firmware
-
lenovo20lm_firmware
-
lenovo20lr_firmware
-
lenovo20lq_firmware
-
lenovo20ln_firmware
-
lenovo20lm_firmware
-
lenovo20j1_firmware
-
lenovo20j2_firmware
-
lenovo20j1_firmware
-
lenovo20j2_firmware
-
lenovo20kc_firmware
-
lenovo20kd_firmware
-
lenovo20mw_firmware
-
lenovo20mx_firmware
-
lenovo20kl_firmware
-
lenovo20km_firmware
-
lenovo20mu_firmware
-
lenovo20mv_firmware
-
lenovo20dc_firmware
-
lenovo20dd_firmware
-
lenovo30eh_firmware
-
lenovo20df_firmware
-
lenovo20dg_firmware
-
lenovo20e0_firmware
-
lenovo20de_firmware
-
lenovo20dh_firmware
-
lenovo20et_firmware
-
lenovo20eu_firmware
-
lenovo20ev_firmware
-
lenovo20ew_firmware
-
lenovo20ex_firmware
-
lenovo20ey_firmware
-
lenovo20h1_firmware
-
lenovo20h2_firmware
-
lenovo20h5_firmware
-
lenovo20h6_firmware
-
lenovo20h4_firmware
-
lenovo20h8_firmware
-
lenovo20kn_firmware
-
lenovo20kq_firmware
-
lenovo20ks_firmware
-
lenovo20kt_firmware
-
lenovo20ku_firmware
-
lenovo20kv_firmware
-
lenovo20n8_firmware
-
lenovo20n9_firmware
-
lenovo20ng_firmware
-
lenovo20h5_firmware
-
lenovo20h6_firmware
-
lenovo3xxx_firmware
-
lenovo20m5_firmware
-
lenovo20m6_firmware
-
lenovo20m7_firmware
-
lenovo20m8_firmware
-
lenovo20nr_firmware
-
lenovo20ns_firmware
-
lenovo20nt_firmware
-
lenovo20nu_firmware
-
lenovo246x_firmware
-
lenovo247x_firmware
-
lenovo248x_firmware
-
lenovo20ds_firmware
-
lenovo20dt_firmware
-
lenovo20fu_firmware
-
lenovo20fv_firmware
-
lenovo20j4_firmware
-
lenovo20j5_firmware
-
lenovo20ju_firmware
-
lenovo20jv_firmware
-
lenovo20ls_firmware
-
lenovo20lt_firmware
-
lenovo20l2_firmware
-
lenovo20lx_firmware
-
lenovo20ja_firmware
-
lenovo20dq_firmware
-
lenovo20dr_firmware
-
lenovo20g5_firmware
-
lenovo20g4_firmware
-
lenovo20b0_firmware
-
lenovo20b3_firmware
-
lenovo234x_firmware
-
lenovo235x_firmware
-
lenovo235x_firmware
-
lenovo20a9_firmware
-
lenovo20aa_firmware
-
lenovo20ab_firmware
-
lenovo20ac_firmware
-
lenovo20b6_firmware
-
lenovo20b7_firmware
-
lenovo20aq_firmware
-
lenovo20ar_firmware
-
lenovo20an_firmware
-
lenovo20aw_firmware
-
lenovo20bu_firmware
-
lenovo20bv_firmware
-
lenovo20dj_firmware
-
lenovo20bw_firmware
-
lenovo20bx_firmware
-
lenovo20fm_firmware
-
lenovo20fn_firmware
-
lenovo20fw_firmware
-
lenovo20fx_firmware
-
lenovo20j6_firmware
-
lenovo20j7_firmware
-
lenovo235x_firmware
-
lenovo239x_firmware
-
lenovo242x_firmware
-
lenovo243x_firmware
-
lenovo20be_firmware
-
lenovo20bf_firmware
-
lenovo243x_firmware
-
lenovo244x_firmware
-
lenovo246x_firmware
-
lenovo20bg_firmware
-
lenovo20bg_firmware
-
lenovo20ef_firmware
-
lenovo20eg_firmware
-
lenovo34xx_firmware
-
lenovo20a7_firmware
-
lenovo20a8_firmware
-
lenovo336x_firmware
-
lenovo337x_firmware
-
lenovo20bl_firmware
-
lenovo20bm_firmware
-
lenovo343x_firmware
-
lenovo344x_firmware
-
lenovo230x_firmware
-
lenovo232x_firmware
-
lenovo233x_firmware
-
lenovo20al_firmware
-
lenovo20am_firmware
-
lenovo20aj_firmware
-
lenovo20ak_firmware
-
lenovo20f5_firmware
-
lenovo20f6_firmware
-
lenovo20hn_firmware
-
lenovo20hm_firmware
-
lenovo20k5_firmware
-
lenovo20k6_firmware
-
lenovo20lh_firmware
-
lenovo20lj_firmware
-
lenovo20nn_firmware
-
lenovo20nq_firmware
-
lenovo20d9_firmware
-
lenovo20da_firmware
-
lenovo20jh_firmware
-
lenovo20jj_firmware
-
𝑥
= Vulnerable software versions