medium5.0
CVE-2019-6190
Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStati…
Impact
Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on systems with Intel TXT enabled.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkcentre E93 Firmware | before fbktdba |
| Lenovo | Thinkcentre M6500s Firmware | before fbktdba |
| Lenovo | Thinkcentre M6500t Firmware | before fbktdba |
| Lenovo | Thinkcentre M73p Firmware | before fbktdba |
| Lenovo | Thinkcentre M83 Firmware | before fbktdba |
| Lenovo | Thinkcentre M8500s Firmware | before fbktdba |
| Lenovo | Thinkcentre M8500t Firmware | before fbktdba |
| Lenovo | Thinkcentre M93 Firmware | before fbktdba |
| Lenovo | Thinkcentre M93p Firmware | before fbktdba |
| Lenovo | Thinkstation E32 Firmware | before fbktdba |
| Lenovo | Thinkstation P300 Firmware | before fbktdba |
| Lenovo | Thinkstation C30 Refresh Firmware | before 2-27-2020 |