medium6.4
CVE-2019-6170
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad mod…
Impact
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | 510-15ikl Firmware | All versions |
| Lenovo | 510s-08ikl Firmware | All versions |
| Lenovo | Ideacentre 300-20ish Firmware | All versions |
| Lenovo | Ideacentre 300s-11ish Firmware | All versions |
| Lenovo | Ideacentre 310s-08asr Firmware | All versions |
| Lenovo | Ideacentre 310s-08igm Firmware | All versions |
| Lenovo | Ideacentre 510-15icb Firmware | All versions |
| Lenovo | Ideacentre 510a-15icb Firmware | All versions |
| Lenovo | Ideacentre 510s-08ish Firmware | All versions |
| Lenovo | Ideacentre 700 Firmware | All versions |
| Lenovo | Ideacentre 720-18apr Firmware | All versions |
| Lenovo | Ideacentre 720-18icb Firmware | All versions |