CVE-2019-6172
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.
- Score
- CVSS 3.1 6.4 Medium
- Status
- Modified - psirt@lenovo.com
- Published
- 2019-11-12
- Last modified
- 2024-08-04
Affected products
- 130-14ikb Firmware (Lenovo)
- 130-15ikb Firmware (Lenovo)
- 330-14ikb Firmware (Lenovo)
- 330-14ikbr Firmware (Lenovo)
- 330-15ich Firmware (Lenovo)
- 330-15ikb Firmware (Lenovo)
- 330-15ikbr Firmware (Lenovo)
- 330-15ikbr Touch Firmware (Lenovo)
- 330-17ich Firmware (Lenovo)
- 330-17ikb Firmware (Lenovo)
- 330-17ikbr Firmware (Lenovo)
- 330c-14ikb Firmware (Lenovo)
- 330c-15ikb Firmware (Lenovo)
- 330c-15ikbr Firmware (Lenovo)
- 340c-15ikb Firmware (Lenovo)
- 340c-15iwl Firmware (Lenovo)
- 510-15ikl Firmware (Lenovo)
- 510s-08ikl Firmware (Lenovo)
- 530s-14ikb Firmware (Lenovo)
- 530s-14iwl Firmware (Lenovo)
- 530s-15ikb Firmware (Lenovo)
- 530s-15iwl Firmware (Lenovo)
- 63 Firmware (Lenovo)
- 720s-14ikbr Firmware (Lenovo)
- 720s-15ikb Firmware (Lenovo)
- 720s Touch-15ikb Firmware (Lenovo)
- 730s-13iwl Firmware (Lenovo)
- A340-22 Iwl Firmware (Lenovo)
- A340-22ast Firmware (Lenovo)
- A340-22icb Firmware (Lenovo)
- A340-24 Iwl Firmware (Lenovo)
- A340-24icb Firmware (Lenovo)
- Aio520-22ikl Firmware (Lenovo)
- Aio520-22iku Firmware (Lenovo)
- Aio520-24arr Firmware (Lenovo)
- Aio520-24ikl Firmware (Lenovo)
- Aio520-24iku Firmware (Lenovo)
- Aio520-27ikl Firmware (Lenovo)
- Aio 330-20ast Firmware (Lenovo)
- Aio 330-20igm Firmware (Lenovo)
- Aio 520-24ast Firmware (Lenovo)
- C340-14iwl Firmware (Lenovo)
- C340-15iwl Firmware (Lenovo)
- E42-80 Firmware (Lenovo)
- E52-80 Firmware (Lenovo)
- Flex-14iwl Firmware (Lenovo)
- Flex-15iwl Firmware (Lenovo)
- Flex 5-1570(r) Firmware (Lenovo)
- Flex 6-1470 Firmware (Lenovo)
- Flex 6-14ikb Firmware (Lenovo)
- H50-30g Desktop Firmware (Lenovo)
- Ideacentre 300-20ish Firmware (Lenovo)
- Ideacentre 300s-11ish Firmware (Lenovo)
- Ideacentre 310s-08asr Firmware (Lenovo)
- Ideacentre 310s-08igm Firmware (Lenovo)
- Ideacentre 510-15icb Firmware (Lenovo)
- Ideacentre 510a-15icb Firmware (Lenovo)
- Ideacentre 510s-08ish Firmware (Lenovo)
- Ideacentre 700 Firmware (Lenovo)
- Ideacentre 720-18apr Firmware (Lenovo)
- Ideacentre 720-18icb Firmware (Lenovo)
- Ideacentre 730s-24ikb Firmware (Lenovo)
- K43c-80 Firmware (Lenovo)
- L340-15irh Firmware (Lenovo)
- L340-15iwl Firmware (Lenovo)
- L340-15iwltouch Firmware (Lenovo)
- L340-17irh Firmware (Lenovo)
- L340-17iwl Firmware (Lenovo)
- Legion C530-19icb Firmware (Lenovo)
- Legion C730-19ico Firmware (Lenovo)
- Legion T530-28apr Firmware (Lenovo)
- Legion T530-28apr Reflash Firmware (Lenovo)
- Legion T530-28icb Firmware (Lenovo)
- Legion T530-28icb Reflash Firmware (Lenovo)
- Legion T730-28ico Firmware (Lenovo)
- Legion Y520t Z370 Firmware (Lenovo)
- Legion Y530-15ich(1060) Firmware (Lenovo)
- Legion Y530-15ich Firmware (Lenovo)
- Legion Y7000p-1060 Firmware (Lenovo)
- Legion Y730-15ich Firmware (Lenovo)
- Legion Y730-17ich Firmware (Lenovo)
- Legion Y740-15ichg Firmware (Lenovo)
- Legion Y740-15irhg Firmware (Lenovo)
- Legion Y740-17ichg Firmware (Lenovo)
- Legion Y740-17irhg Firmware (Lenovo)
- Legion Y9000k 2019 Firmware (Lenovo)
- Legion Y9000p 2019 Firmware (Lenovo)
- Lenovo V720-14ikb Firmware (Lenovo)
- M4500 Firmware (Lenovo)
- M4500 Id Firmware (Lenovo)
- M4550 Id Firmware (Lenovo)
- Miix 720-12ikb Firmware (Lenovo)
- Qitian 4500 Firmware (Lenovo)
- Qitian A815 Firmware (Lenovo)
- Qitian B4550 Firmware (Lenovo)
- Qitian B4650 Firmware (Lenovo)
- Qitian B5900 Firmware (Lenovo)
- Qitian M4550 Firmware (Lenovo)
- Qitian M4600 Firmware (Lenovo)
- Qitian M4650 Firmware (Lenovo)
References
- https://support.lenovo.com/us/en/product_security/LEN-27714
