VULNERABILITY INTELLIGENCE

CVE-2019-6170

CVSS score6.4 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2019-11-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.

Primary references