Thinkstation P410 Firmware
CVE-2019-0164
HIGH
Severity by source
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.
AnalysisAI
Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-264. Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access. Affected products include: Intel Turbo Boost Max Technology 3.0, Lenovo Thinkstation P410 Firmware, Lenovo Thinkstation P510 Firmware, Lenovo Thinkstation P710 Firmware, Lenovo Thinkstation P910 Firmware. Version information: version 1.0.0.1035.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Thinkstation P410 Firmware
View allA vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends,
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Not
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. Rated low severity (CVSS 3.3), this
Same technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today