Skip to content
Sign in
6.4 Medium

CVE-2019-6170 A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in…

Description

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.

Affected products and versions

Product Affected versions Fixed in
ThinkPad Versions not published

Other CVEs of ThinkPad

The 9 CVEs of ThinkPad →
CVE-2023-5078 A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated… 6.7 Medium CVE-2022-48189 An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local… 6.7 Medium CVE-2022-4574 An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local… 6.7 Medium CVE-2023-4030 A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause… 8.4 High
Track this CVE