CVE-2019-6190: Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and…

PriorityP418medium5.5CVSS 3.1

AVLACLPRLUINSUCNINAH

EPSS

0.28%

20.4th percentile

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on systems with Intel TXT enabled.

Affected

183 ranges· showing 25

Vendor	Product	Version range	Fixed in
lenovo	510-15ikl_firmware	< o2tkt61a	o2tkt61a
lenovo	510s-08ikl_firmware	< o2tkt61a	o2tkt61a
lenovo	a340-22_iwl_firmware	< o46kt31a	o46kt31a
lenovo	a340-22ast_firmware	< o4ckt18a	o4ckt18a
lenovo	a340-22icb_firmware	< o44kt26a	o44kt26a
lenovo	a340-24_iwl_firmware	< o46kt31a	o46kt31a
lenovo	a340-24icb_firmware	< o44kt26a	o44kt26a
lenovo	aio520-22iku_firmware	< o3dkt38a	o3dkt38a
lenovo	aio520-24arr_firmware	< o3zkt36a	o3zkt36a
lenovo	aio520-24iku_firmware	< o3dkt38a	o3dkt38a
lenovo	aio520-27ikl_firmware	< o3ekt27a	o3ekt27a
lenovo	aio_330-20ast_firmware	< o3rkt23a	o3rkt23a
lenovo	aio_330-20igm_firmware	< o3skt46a	o3skt46a
lenovo	aio_520-24ast_firmware	< o3bkt34a	o3bkt34a
lenovo	bios	—	—
lenovo	h50-30g_desktop_firmware	< fckt97a	fckt97a
lenovo	ideacentre_310s-08asr_firmware	< o2hkt63a	o2hkt63a
lenovo	ideacentre_310s-08igm_firmware	< m1tkt24a	m1tkt24a
lenovo	ideacentre_510-15icb_firmware	< o3qkt3ba	o3qkt3ba
lenovo	ideacentre_510a-15icb_firmware	< o3qkt3ba	o3qkt3ba
lenovo	ideacentre_700_firmware	< fwkta7a	fwkta7a
lenovo	ideacentre_720-18apr_firmware	< m25kt40a	m25kt40a
lenovo	ideacentre_720-18icb_firmware	< o3qkt3ba	o3qkt3ba
lenovo	ideacentre_730s-24ikb_firmware	< o3wkt18a	o3wkt18a
lenovo	legion_c530-19icb_firmware	< o3lkt23a	o3lkt23a

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.