CVE-2019-6190

published 2020-02-14

CVE-2019-6190: Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and…

medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on systems with Intel TXT enabled.

Affected

183 ranges · showing 25

Vendor	Product	Version range	Fixed in
lenovo	510-15ikl_firmware	< o2tkt61a	o2tkt61a
lenovo	510s-08ikl_firmware	< o2tkt61a	o2tkt61a
lenovo	a340-22_iwl_firmware	< o46kt31a	o46kt31a
lenovo	a340-22ast_firmware	< o4ckt18a	o4ckt18a
lenovo	a340-22icb_firmware	< o44kt26a	o44kt26a
lenovo	a340-24_iwl_firmware	< o46kt31a	o46kt31a
lenovo	a340-24icb_firmware	< o44kt26a	o44kt26a
lenovo	aio520-22iku_firmware	< o3dkt38a	o3dkt38a
lenovo	aio520-24arr_firmware	< o3zkt36a	o3zkt36a
lenovo	aio520-24iku_firmware	< o3dkt38a	o3dkt38a
lenovo	aio520-27ikl_firmware	< o3ekt27a	o3ekt27a
lenovo	aio_330-20ast_firmware	< o3rkt23a	o3rkt23a
lenovo	aio_330-20igm_firmware	< o3skt46a	o3skt46a
lenovo	aio_520-24ast_firmware	< o3bkt34a	o3bkt34a
lenovo	bios	—	—
lenovo	h50-30g_desktop_firmware	< fckt97a	fckt97a
lenovo	ideacentre_310s-08asr_firmware	< o2hkt63a	o2hkt63a
lenovo	ideacentre_310s-08igm_firmware	< m1tkt24a	m1tkt24a
lenovo	ideacentre_510-15icb_firmware	< o3qkt3ba	o3qkt3ba
lenovo	ideacentre_510a-15icb_firmware	< o3qkt3ba	o3qkt3ba
lenovo	ideacentre_700_firmware	< fwkta7a	fwkta7a
lenovo	ideacentre_720-18apr_firmware	< m25kt40a	m25kt40a
lenovo	ideacentre_720-18icb_firmware	< o3qkt3ba	o3qkt3ba
lenovo	ideacentre_730s-24ikb_firmware	< o3wkt18a	o3wkt18a
lenovo	legion_c530-19icb_firmware	< o3lkt23a	o3lkt23a

CWE-665