CVE-2019-6170

—

CVSS 3.1

6.4 medium

EPSS

<1%p28

Published

Nov 12, 2019 (Nov 12, 2019)

Modified

Jun 17, 2026

Description

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.

Vendors: lenovo
Products: 510-15ikl firmware, 510s-08ikl firmware, ideacentre 300-20ish firmware, ideacentre 300s-11ish firmware, ideacentre 310s-08asr firmware, ideacentre 310s-08igm firmware, ideacentre 510-15icb firmware, ideacentre 510a-15icb firmware, ideacentre 510s-08ish firmware, ideacentre 700 firmware, ideacentre 720-18apr firmware, ideacentre 720-18icb firmware
Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.