CVE-2019-6172
Medium
Description
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.
SeverityMedium
CVSS6.4
Exploit probability—
ProductLenovo V720-14ikb Firmware
PublishedNov 12, 2019
First seenNov 12, 2019
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo 510-15ikl_firmware | No range specified | — |
| lenovo 510s-08ikl_firmware | No range specified | — |
| lenovo ideacentre_300-20ish_firmware | No range specified | — |
| lenovo ideacentre_300s-11ish_firmware | No range specified | — |
| lenovo ideacentre_310s-08asr_firmware | No range specified | — |
| lenovo ideacentre_310s-08igm_firmware | No range specified | — |
| lenovo ideacentre_510-15icb_firmware | No range specified | — |
| lenovo ideacentre_510a-15icb_firmware | No range specified | — |
| lenovo ideacentre_510s-08ish_firmware | No range specified | — |
| lenovo ideacentre_700_firmware | No range specified | — |
| lenovo ideacentre_720-18apr_firmware | No range specified | — |
| lenovo ideacentre_720-18icb_firmware | No range specified | — |
| lenovo legion_c530-19icb_firmware | No range specified | — |
| lenovo legion_c730-19ico_firmware | No range specified | — |
| lenovo legion_t530-28apr_firmware | No range specified | — |
| lenovo legion_t530-28apr_reflash_firmware | No range specified | — |
| lenovo legion_t530-28icb_firmware | No range specified | — |
| lenovo legion_t530-28icb_reflash_firmware | No range specified | — |
| lenovo legion_t730-28ico_firmware | No range specified | — |
| lenovo legion_y520t_z370_firmware | No range specified | — |
| lenovo 63_firmware | No range specified | — |
| lenovo h50-30g_desktop_firmware | No range specified | — |
| lenovo m4500_firmware | No range specified | — |
| lenovo m4500_id_firmware | No range specified | — |
| lenovo m4550_id_firmware | No range specified | — |
| lenovo v330-15igm_firmware | No range specified | — |
| lenovo v530s-07icb_firmware | No range specified | — |
| lenovo qitian_4500_firmware | No range specified | — |
| lenovo qitian_b4550_firmware | No range specified | — |
| lenovo qitian_b4650_firmware | No range specified | — |
| lenovo qitian_b5900_firmware | No range specified | — |
| lenovo qitian_m4550_firmware | No range specified | — |
| lenovo qitian_m4600_firmware | No range specified | — |
| lenovo qitian_m4650_firmware | No range specified | — |
| lenovo qt_m410_firmware | No range specified | — |
| lenovo qt_b415_firmware | No range specified | — |
| lenovo qt_m415_firmware | No range specified | — |
| lenovo thinkcentre_e73_firmware | No range specified | — |
| lenovo thinkcentre_e73s_firmware | No range specified | — |
| lenovo thinkcentre_e74_firmware | No range specified | — |
| lenovo thinkcentre_e74s_firmware | No range specified | — |
| lenovo thinkcentre_e75t_firmware | No range specified | — |
| lenovo thinkcentre_e75s_firmware | No range specified | — |
| lenovo thinkcentre_e93_firmware | No range specified | — |
| lenovo thinkcentre_m4500k_firmware | No range specified | — |
| lenovo thinkcentre_m4500q_firmware | No range specified | — |
| lenovo thinkcentre_m4500t_firmware | No range specified | — |
| lenovo thinkcentre_m4500s_firmware | No range specified | — |
| lenovo thinkcentre_m4600t_firmware | No range specified | — |
| lenovo thinkcentre_m4600s_firmware | No range specified | — |
| lenovo thinkcentre_m600_firmware | No range specified | — |
| lenovo thinkcentre_m610_firmware | No range specified | — |
| lenovo thinkcentre_m625q_firmware | No range specified | — |
| lenovo thinkcentre_m6500t_firmware | No range specified | — |
| lenovo thinkcentre_m6500s_firmware | No range specified | — |
| lenovo thinkcentre_m6600_firmware | No range specified | — |
| lenovo thinkcentre_m6600q_firmware | No range specified | — |
| lenovo thinkcentre_m6600t_firmware | No range specified | — |
| lenovo thinkcentre_m6600s_firmware | No range specified | — |
| lenovo thinkcentre_m700q_firmware | No range specified | — |
| lenovo thinkcentre_m700t_firmware | No range specified | — |
| lenovo thinkcentre_m700s_firmware | No range specified | — |
| lenovo thinkcentre_m710e_firmware | No range specified | — |
| lenovo thinkcentre_m710q_firmware | No range specified | — |
| lenovo thinkcentre_m710t_firmware | No range specified | — |
| lenovo thinkcentre_m710s_firmware | No range specified | — |
| lenovo thinkcentre_m715q_firmware | No range specified | — |
| lenovo thinkcentre_m715q_rr_firmware | No range specified | — |
| lenovo thinkcentre_m715t_firmware | No range specified | — |
| lenovo thinkcentre_m715s_firmware | No range specified | — |
| lenovo thinkcentre_m720q_firmware | No range specified | — |
| lenovo thinkcentre_m720t_firmware | No range specified | — |
| lenovo thinkcentre_m720s_firmware | No range specified | — |
| lenovo thinkcentre_m725s_firmware | No range specified | — |
| lenovo thinkcentre_m73_firmware | No range specified | — |
| lenovo thinkcentre_m73_tiny_firmware | No range specified | — |
| lenovo thinkcentre_m73p_firmware | No range specified | — |
| lenovo thinkcentre_m79_firmware | No range specified | — |
| lenovo thinkcentre_m800_firmware | No range specified | — |
| lenovo thinkcentre_m83_firmware | No range specified | — |
| lenovo thinkcentre_m8500t_firmware | No range specified | — |
| lenovo thinkcentre_m8500s_firmware | No range specified | — |
| lenovo thinkcentre_m8600t_firmware | No range specified | — |
| lenovo thinkcentre_m8600s_firmware | No range specified | — |
| lenovo thinkcentre_m900_firmware | No range specified | — |
| lenovo thinkcentre_m90n-1_firmware | No range specified | — |
| lenovo thinkcentre_m910t_firmware | No range specified | — |
| lenovo thinkcentre_m910s_firmware | No range specified | — |
| lenovo thinkcentre_m910q_firmware | No range specified | — |
| lenovo thinkcentre_m910x_firmware | No range specified | — |
| lenovo thinkcentre_m920q_firmware | No range specified | — |
| lenovo thinkcentre_m920x_firmware | No range specified | — |
| lenovo thinkcentre_m920t_firmware | No range specified | — |
| lenovo thinkcentre_m920s_firmware | No range specified | — |
| lenovo thinkcentre_m93_firmware | No range specified | — |
| lenovo thinkcentre_m93p_firmware | No range specified | — |
| lenovo thinkcentre_s510_firmware | No range specified | — |
| lenovo v520s-08ikl_firmware | No range specified | — |
| lenovo v520t-15ikl_firmware | No range specified | — |
| lenovo yangtian_afh110_firmware | No range specified | — |
| lenovo yangtian_afh81_firmware | No range specified | — |
| lenovo yangtian_afq150_firmware | No range specified | — |
| lenovo yangtian_mc_h110_firmware | No range specified | — |
| lenovo yangtian_mc_h110_pci_firmware | No range specified | — |
| lenovo yangtian_mc_h81_firmware | No range specified | — |
| lenovo yangtian_me_h110_firmware | No range specified | — |
| lenovo yangtian_we_h110_firmware | No range specified | — |
| lenovo yangtian_mf_h110_pci_firmware | No range specified | — |
| lenovo yangtian_wf_h110_pci_firmware | No range specified | — |
| lenovo yangtian_mf_h81_pci_firmware | No range specified | — |
| lenovo yangtian_wf_h81_pci_firmware | No range specified | — |
| lenovo yangtian_ms_h81_firmware | No range specified | — |
| lenovo yangtian_ws_h81_firmware | No range specified | — |
| lenovo yangtian_tc_h110_pci_firmware | No range specified | — |
| lenovo yangtian_wc_h110_pci_firmware | No range specified | — |
| lenovo yangtian_tc_h81_pci_firmware | No range specified | — |
| lenovo yangtian_wcc_h81_pci_firmware | No range specified | — |
| lenovo yangtian_ytm6900e-00_firmware | No range specified | — |
| lenovo yta8900f_firmware | No range specified | — |
| lenovo a340-22_iwl_firmware | No range specified | — |
| lenovo a340-24_iwl_firmware | No range specified | — |
| lenovo a340-22icb_firmware | No range specified | — |
| lenovo a340-24icb_firmware | No range specified | — |
| lenovo a340-22ast_firmware | No range specified | — |
| lenovo aio_330-20ast_firmware | No range specified | — |
| lenovo aio_330-20igm_firmware | No range specified | — |
| lenovo aio_520-24ast_firmware | No range specified | — |
| lenovo aio520-22ikl_firmware | No range specified | — |
| lenovo aio520-22iku_firmware | No range specified | — |
| lenovo aio520-24arr_firmware | No range specified | — |
| lenovo aio520-24ikl_firmware | No range specified | — |
| lenovo aio520-24iku_firmware | No range specified | — |
| lenovo aio520-27ikl_firmware | No range specified | — |
| lenovo ideacentre_730s-24ikb_firmware | No range specified | — |
| lenovo qitian_a815_firmware | No range specified | — |
| lenovo qt_a7400_firmware | No range specified | — |
| lenovo thinkcentre_e74z_firmware | No range specified | — |
| lenovo thinkcentre_e95z_firmware | No range specified | — |
| lenovo thinkcentre_e96z_firmware | No range specified | — |
| lenovo thinkcentre_m700z_firmware | No range specified | — |
| lenovo thinkcentre_m7300z_firmware | No range specified | — |
| lenovo thinkcentre_m800z_firmware | No range specified | — |
| lenovo thinkcentre_m810z_firmware | No range specified | — |
| lenovo thinkcentre_m818z_firmware | No range specified | — |
| lenovo thinkcentre_m820z_firmware | No range specified | — |
| lenovo thinkcentre_m8300z_firmware | No range specified | — |
| lenovo thinkcentre_m8350z_firmware | No range specified | — |
| lenovo thinkcentre_m83z_\(aio\)_firmware | No range specified | — |
| lenovo thinkcentre_m900z_firmware | No range specified | — |
| lenovo thinkcentre_m910z_firmware | No range specified | — |
| lenovo thinkcentre_m920z_firmware | No range specified | — |
| lenovo thinkcentre_m9350z_firmware | No range specified | — |
| lenovo thinkcentre_m93z_\(aio\)_firmware | No range specified | — |
| lenovo thinkcentre_m9500z_firmware | No range specified | — |
| lenovo thinkcentre_m9550z_firmware | No range specified | — |
| lenovo thinkcentre_x1_aio_firmware | No range specified | — |
| lenovo v310z\(yt_s3150\)_firmware | No range specified | — |
| lenovo v410z\(yt_s4250\)_firmware | No range specified | — |
| lenovo v510z_\(yt_s5250\)_firmware | No range specified | — |
| lenovo v530-22icb\(yt_s4350\)_firmware | No range specified | — |
| lenovo v530-24icb\(yt_s5350\)_firmware | No range specified | — |
| lenovo v540-24iwl\(yt_s5430\)_firmware | No range specified | — |
| lenovo yogo_a940-27icb_firmware | No range specified | — |
| lenovo 130-14ikb_firmware | No range specified | — |
| lenovo 130-15ikb_firmware | No range specified | — |
| lenovo 330-14ikb_firmware | No range specified | — |
| lenovo 330-14ikbr_firmware | No range specified | — |
| lenovo 330-15ich_firmware | No range specified | — |
| lenovo 330-15ikb_firmware | No range specified | — |
| lenovo 330-15ikbr_firmware | No range specified | — |
| lenovo 330-15ikbr_touch_firmware | No range specified | — |
| lenovo 330-17ich_firmware | No range specified | — |
| lenovo 330-17ikb_firmware | No range specified | — |
| lenovo 330-17ikbr_firmware | No range specified | — |
| lenovo 330c-14ikb_firmware | No range specified | — |
| lenovo 330c-15ikb_firmware | No range specified | — |
| lenovo 330c-15ikbr_firmware | No range specified | — |
| lenovo 340c-15iwl_firmware | No range specified | — |
| lenovo 530s-14iwl_firmware | No range specified | — |
| lenovo 530s-15iwl_firmware | No range specified | — |
| lenovo 530s-14ikb_firmware | No range specified | — |
| lenovo 530s-15ikb_firmware | No range specified | — |
| lenovo 720s_touch-15ikb_firmware | No range specified | — |
| lenovo 720s-14ikbr_firmware | No range specified | — |
| lenovo 720s-15ikb_firmware | No range specified | — |
| lenovo 730s-13iwl_firmware | No range specified | — |
| lenovo c340-14iwl_firmware | No range specified | — |
| lenovo c340-15iwl_firmware | No range specified | — |
| lenovo e42-80_firmware | No range specified | — |
| lenovo e52-80_firmware | No range specified | — |
| lenovo flex_5-1570\(r\)_firmware | No range specified | — |
| lenovo flex_6-14ikb_firmware | No range specified | — |
| lenovo flex-14iwl_firmware | No range specified | — |
| lenovo flex-15iwl_firmware | No range specified | — |
| lenovo k43c-80_firmware | No range specified | — |
| lenovo l340-15irh_firmware | No range specified | — |
| lenovo l340-15iwl_firmware | No range specified | — |
| lenovo l340-15iwltouch_firmware | No range specified | — |
| lenovo l340-17irh_firmware | No range specified | — |
| lenovo l340-17iwl_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.