CVE-2019-6190

CWE-6653 documents3 sources

Severity

5.5MEDIUM

EPSS

0.1%

top 69.77%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

183

Lenovo 510-15ikl Firmware Lenovo 510s-08ikl Firmware Lenovo A340-22 IWL Firmware +180 more

Timeline

PublishedFeb 14

Latest updateMay 24

Description

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on systems with Intel TXT enabled.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:HExploitability: 1.3 | Impact: 3.6

Affected Packages183 packages

▶NVDlenovo/m4500_desktop_firmware< fckt97a

▶NVDlenovo/h50-30g_desktop_firmware< fckt97a

▶NVDlenovo/m4500_id_desktop_firmware< fckt97a

▶NVDlenovo/m4550_id_desktop_firmware< fckt97a

▶NVDlenovo/lenovo_63_desktop_firmware< fckt97a

🔴Vulnerability Details

GHSA

GHSA-gc67-c7w8-76pc: Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and T↗2022-05-24

▶

CVEList

CVE-2019-6190: Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and T↗2020-02-14

▶