Skip to main content

System Update CVE-2019-6163

HIGH
Improper Resource Shutdown or Release (CWE-404)
2019-06-26 psirt@lenovo.com
Denial Of Service Lenovo System Update
7.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Jun 26, 2019 - 14:15 nvd
HIGH 7.5

DescriptionNVD

A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations.

AnalysisAI

A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-404. A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations. Affected products include: Lenovo System Update. Version information: version 5.07.0084.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in System Update

View all
CVE-2015-2219 HIGH POC
7.2 May 12

Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allo
CVE-2015-6971 HIGH POC
7.8 Oct 03

Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the
CVE-2022-0354 HIGH POC
7.3 Apr 22

A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ab
CVE-2015-2233 HIGH
8.3 May 12

Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 does not properly validate CA chains during

CVE-2023-4632 HIGH
7.8 Nov 08

An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local a
CVE-2018-9063 HIGH
7.8 May 04

MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contai
CVE-2019-6175 HIGH
7.5 Sep 26

A denial of service vulnerability was reported in Lenovo System Update versions prior to 5.07.0088 that could allow conf
CVE-2020-8342 HIGH
7.0 Sep 15

A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allow escalati
CVE-2015-2234 MEDIUM
6.9 May 12

Race condition in Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses world-writable permis
CVE-2021-21529 MEDIUM
5.5 Apr 02

Dell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability. Rated medium severity (CVSS

Same weakness CWE-404 – Improper Resource Shutdown or Release

View all
CVE-2024-0546 HIGH POC
7.5
CVE-2018-8120 HIGH POC
7.0
CVE-2024-31611 CRITICAL POC
9.1
CVE-2025-1103 HIGH POC
7.1
CVE-2022-4066 HIGH POC
8.2
CVE-2025-5867 HIGH POC
8.0
CVE-2018-8410 HIGH POC
7.8
CVE-2026-38641 HIGH POC
7.5

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2019-6163 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy