medium6.4
CVE-2019-6172
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad mod…
Impact
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | 510-15ikl Firmware | All versions |
| Lenovo | 510s-08ikl Firmware | All versions |
| Lenovo | Ideacentre 300-20ish Firmware | All versions |
| Lenovo | Ideacentre 300s-11ish Firmware | All versions |
| Lenovo | Ideacentre 310s-08asr Firmware | All versions |
| Lenovo | Ideacentre 310s-08igm Firmware | All versions |
| Lenovo | Ideacentre 510-15icb Firmware | All versions |
| Lenovo | Ideacentre 510a-15icb Firmware | All versions |
| Lenovo | Ideacentre 510s-08ish Firmware | All versions |
| Lenovo | Ideacentre 700 Firmware | All versions |
| Lenovo | Ideacentre 720-18apr Firmware | All versions |
| Lenovo | Ideacentre 720-18icb Firmware | All versions |