medium6.8
CVE-2019-6171
A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the a…
Impact
A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | 20f1 Firmware | All versions |
| Lenovo | 20f2 Firmware | All versions |
| Lenovo | 20jq Firmware | All versions |
| Lenovo | 20jr Firmware | All versions |
| Lenovo | 20g9 Firmware | All versions |
| Lenovo | 20gb Firmware | All versions |
| Lenovo | 20g8 Firmware | All versions |
| Lenovo | 20ga Firmware | All versions |
| Lenovo | 20ht Firmware | All versions |
| Lenovo | 20hv Firmware | All versions |
| Lenovo | 20hs Firmware | All versions |
| Lenovo | 20hu Firmware | All versions |