Thinkcentre E75S Firmware
CVE-2019-6170
MEDIUM
2019-11-12
psirt@lenovo.com
RCE
Lenovo
Thinkcentre E75S Firmware
Ideacentre 300 20Ish Firmware
Ideacentre 300S 11Ish Firmware
Ideacentre 510S 08Ish Firmware
Ideacentre 700 Firmware
63 Firmware
M4500 Firmware
M4500 Id Firmware
M4550 Id Firmware
Thinkcentre E73 Firmware
Thinkcentre E73S Firmware
Thinkcentre E74 Firmware
Thinkcentre E74S Firmware
Thinkcentre E93 Firmware
Thinkcentre M4500K Firmware
Thinkcentre M4500Q Firmware
Thinkcentre M600 Firmware
Thinkcentre M610 Firmware
Thinkcentre M6600 Firmware
Thinkcentre M6600Q Firmware
Thinkcentre M715Q Firmware
Thinkcentre M73 Firmware
Thinkcentre M73P Firmware
Thinkcentre M79 Firmware
Thinkcentre M800 Firmware
Thinkcentre M83 Firmware
Thinkcentre M900 Firmware
Thinkcentre M910Q Firmware
Thinkcentre M910X Firmware
Thinkcentre M93 Firmware
Thinkcentre M93P Firmware
Yangtian Afh110 Firmware
Yangtian Afh81 Firmware
Yangtian Afq150 Firmware
Yangtian Mc H110 Firmware
Yangtian Mc H81 Firmware
Thinkcentre E74Z Firmware
Thinkcentre M700Z Firmware
Thinkcentre M7300Z Firmware
Thinkcentre M800Z Firmware
Thinkcentre M810Z Firmware
Thinkcentre M8300Z Firmware
Thinkcentre M8350Z Firmware
Thinkcentre M83Z Aio Firmware
Thinkcentre M900Z Firmware
Thinkcentre M9500Z Firmware
Thinkcentre M9550Z Firmware
Thinkcentre X1 Aio Firmware
Thinkstation E32 Firmware
Thinkstation P300 Firmware
Thinkstation P310 Firmware
Thinkstation P320 Firmware
Thinkcentre M710S Firmware
Thinkcentre M710T Firmware
E42 80 Firmware
E52 80 Firmware
Miix 720 12Ikb Firmware
V310 14Ikb Firmware
V310 14Isk Firmware
V310 15Ikb Firmware
V310 15Isk Firmware
V510 14Ikb Firmware
V510 15Ikb Firmware
Thinkpad L380 Firmware
Thinkpad E480 Firmware
Thinkpad E580 Firmware
Thinkpad L480 Firmware
Thinkpad L580 Firmware
Thinkpad P51 Firmware
Thinkpad P51S Firmware
Thinkpad P52 Firmware
Thinkpad P52S Firmware
Thinkpad P71 Firmware
Thinkpad P72 Firmware
Thinkpad T25 Firmware
Thinkpad T470 Firmware
Thinkpad T470P Firmware
Thinkpad T470S Firmware
Thinkpad T480 Firmware
Thinkpad T480S Firmware
Thinkpad T570 Firmware
Thinkpad T580 Firmware
Thinkpad X380 Yoga Firmware
Thinkpad Yoga 11E Firmware
Thinkpad Yoga 370 Firmware
Thinkpad X1 Carbon Firmware
Thinkpad X1 Tablet Firmware
Thinkpad X1 Yoga Firmware
Thinkpad X270 Firmware
Thinkpad X280 Firmware
V330 14Ikb Firmware
V330 14Isk Firmware
Thinkpad Helix Firmware
Thinkpad T440 Firmware
Thinkpad T440S Firmware
Thinkpad T440P Firmware
Thinkpad T460S Firmware
Thinkpad T540P Firmware
Thinkpad T550 Firmware
Thinkpad T560 Firmware
Thinkpad W540 Firmware
Thinkpad W541 Firmware
Thinkpad W550S Firmware
Thinkpad X240S Firmware
Thinkpad X240 Firmware
Thinkpad X250 Firmware
510 15Ikl Firmware
510S 08Ikl Firmware
Ideacentre 510 15Icb Firmware
Ideacentre 510A 15Icb Firmware
Ideacentre 720 18Icb Firmware
Legion C530 19Icb Firmware
Legion C730 19Ico Firmware
Legion T530 28Icb Firmware
Legion T730 28Ico Firmware
Legion Y520T Z370 Firmware
H50 30G Desktop Firmware
Qitian 4500 Firmware
Qitian B4550 Firmware
Qitian B4650 Firmware
Qitian M4550 Firmware
Qitian M4600 Firmware
Qitian M4650 Firmware
Qt M410 Firmware
Qt B415 Firmware
Qt M415 Firmware
Thinkcentre E75T Firmware
Thinkcentre M4500T Firmware
Thinkcentre M4500S Firmware
Thinkcentre M4600T Firmware
Thinkcentre M4600S Firmware
Thinkcentre M6500T Firmware
Thinkcentre M6500S Firmware
Thinkcentre M6600T Firmware
Thinkcentre M6600S Firmware
Thinkcentre M700Q Firmware
Thinkcentre M700T Firmware
Thinkcentre M700S Firmware
Thinkcentre M710E Firmware
Thinkcentre M710Q Firmware
Thinkcentre M720Q Firmware
Thinkcentre M720T Firmware
Thinkcentre M720S Firmware
Thinkcentre M73 Tiny Firmware
Thinkcentre M8500T Firmware
Thinkcentre M8500S Firmware
Thinkcentre M8600T Firmware
Thinkcentre M8600S Firmware
Thinkcentre M910T Firmware
Thinkcentre M910S Firmware
Thinkcentre M920Q Firmware
Thinkcentre M920X Firmware
Thinkcentre M920T Firmware
Thinkcentre M920S Firmware
Thinkcentre S510 Firmware
V520S 08Ikl Firmware
V520T 15Ikl Firmware
Yangtian Mc H110 Pci Firmware
Yangtian Ytm6900E 00 Firmware
Yta8900F Firmware
Aio520 22Ikl Firmware
Aio520 22Iku Firmware
Aio520 24Ikl Firmware
Aio520 24Iku Firmware
Aio520 27Ikl Firmware
Ideacentre 730S 24Ikb Firmware
Qt A7400 Firmware
Thinkcentre E95Z Firmware
Thinkcentre E96Z Firmware
Thinkcentre M818Z Firmware
Thinkcentre M820Z Firmware
Thinkcentre M910Z Firmware
Thinkcentre M920Z Firmware
V310Z Yt S3150 Firmware
V410Z Yt S4250 Firmware
V510Z Yt S5250 Firmware
V530 22Icb Yt S4350 Firmware
V530 24Icb Yt S5350 Firmware
Thinkpad S5 Firmware
Thinkpad E560P Firmware
Thinkpad T460 Firmware
Thinkpad T460P Firmware
Thinkpad X260 Firmware
Thinkstation P318 Firmware
Thinkstation P320 Tiny Firmware
Thinkstation P330 Firmware
Thinkstation P330 Tiny Firmware
330 14Ikbr Firmware
330 15Ikbr Firmware
330 15Ikbr Touch Firmware
330 17Ikbr Firmware
720S Touch 15Ikb Firmware
720S 15Ikb Firmware
Flex 5 1570 R Firmware
K43C 80 Firmware
V330 15Ikb Firmware
V330 15Isk Firmware
V730 15Ikb Firmware
Yoga 730 13Ikb Firmware
Yoga 730 15Ikb Firmware
Thinkpad 11E Firmware
Thinkpad 13 Firmware
Thinkpad E460 Firmware
Thinkpad E560 Firmware
Thinkpad E470 Firmware
Thinkpad E570 Firmware
Thinkpad L380 Yoga Firmware
Thinkpad L460 Firmware
Thinkpad L470 Firmware
Thinkpad L560 Firmware
Thinkpad L570 Firmware
Thinkpad P50 Firmware
Thinkpad P50S Firmware
Thinkpad P70 Firmware
Thinkpad S1 3Rd Firmware
Ideacentre 310S 08Asr Firmware
Ideacentre 310S 08Igm Firmware
Ideacentre 720 18Apr Firmware
Legion T530 28Apr Firmware
Legion T530 28Apr Reflash Firmware
Legion T530 28Icb Reflash Firmware
V330 15Igm Firmware
V530S 07Icb Firmware
Qitian B5900 Firmware
Thinkcentre M625Q Firmware
Thinkcentre M715Q Rr Firmware
Thinkcentre M715T Firmware
Thinkcentre M715S Firmware
Thinkcentre M725S Firmware
Thinkcentre M90N 1 Firmware
Yangtian Me H110 Firmware
Yangtian We H110 Firmware
Yangtian Mf H110 Pci Firmware
Yangtian Wf H110 Pci Firmware
Yangtian Mf H81 Pci Firmware
Yangtian Wf H81 Pci Firmware
Yangtian Ms H81 Firmware
Yangtian Ws H81 Firmware
Yangtian Tc H110 Pci Firmware
Yangtian Wc H110 Pci Firmware
Yangtian Tc H81 Pci Firmware
Yangtian Wcc H81 Pci Firmware
A340 22 Iwl Firmware
A340 24 Iwl Firmware
A340 22Icb Firmware
A340 24Icb Firmware
A340 22Ast Firmware
Aio 330 20Ast Firmware
Aio 330 20Igm Firmware
Aio 520 24Ast Firmware
Aio520 24Arr Firmware
Qitian A815 Firmware
Thinkcentre M9350Z Firmware
Thinkcentre M93Z Aio Firmware
V540 24Iwl Yt S5430 Firmware
Yogo A940 27Icb Firmware
130 14Ikb Firmware
130 15Ikb Firmware
330 14Ikb Firmware
330 15Ich Firmware
330 15Ikb Firmware
330 17Ich Firmware
330 17Ikb Firmware
330C 14Ikb Firmware
330C 15Ikb Firmware
330C 15Ikbr Firmware
340C 15Iwl Firmware
530S 14Iwl Firmware
530S 15Iwl Firmware
530S 14Ikb Firmware
530S 15Ikb Firmware
720S 14Ikbr Firmware
730S 13Iwl Firmware
C340 14Iwl Firmware
C340 15Iwl Firmware
Flex 6 14Ikb Firmware
Flex 14Iwl Firmware
Flex 15Iwl Firmware
L340 15Irh Firmware
L340 15Iwl Firmware
L340 15Iwltouch Firmware
L340 17Irh Firmware
L340 17Iwl Firmware
Legion Y530 15Ich Firmware
Legion Y530 15Ich 1060 Firmware
Legion Y7000P 1060 Firmware
Legion Y730 15Ich Firmware
Legion Y730 17Ich Firmware
Legion Y740 15Ichg Firmware
Legion Y740 15Irhg Firmware
Legion Y740 17Ichg Firmware
Legion Y740 17Irhg Firmware
Legion Y9000K 2019 Firmware
Legion Y9000P 2019 Firmware
Lenovo V720 14Ikb Firmware
Rescuer Y7000 Firmware
Rescuer Y7000P Firmware
Rescuer Y7000P 1060 Firmware
Rescuer Y7000 1060 Firmware
S145 14Ikb Firmware
S145 14Iwl Firmware
S145 15Ikb Firmware
340C 15Ikb Firmware
S145 15Iwl Firmware
S340 14Iwl Firmware
S340 14Iwl Touch Firmware
S340 15Iwl Firmware
S340 15Iwl Touch Firmware
S530 13Iwl Firmware
S540 14Iwl Firmware
S540 14Iwl Touch Firmware
S540 15Iwl Firmware
S940 14Iwl Firmware
V110 14Ikb Firmware
V110 15Ikb Firmware
V130 14Ikb Firmware
V130 15Ikb Firmware
V320 14Ikb Firmware
V320 15Ikb Firmware
V320 17Ikbr Firmware
Wei5 14Ikb Firmware
Wei5 15Ikb Firmware
Xiaoxin Air 13Iwl Firmware
Xiaoxin Air 14Ikbr Firmware
Xiaoxin Air 14Iwl Firmware
Xiaoxin Air 15Ikbr Firmware
Xiaoxin Air 15Iwl Firmware
Xiaoxin Air 14Iwl 2019 Firmware
Xiaoxin Air 15Iwl 2019 Firmware
Xiaoxin 14 2019Iwl Firmware
Xiaoxin 14Iwl Qc 2019 Firmware
Xiaoxin 15 2019Iwl Firmware
Xx Chao5000 Ikbra Firmware
Y7000 2019 1050 Firmware
Yoga 520 14Ikb Firmware
Yoga 730 13Iwl Firmware
Yoga 730 15Iwl Firmware
Yoga S730 13Iwl Firmware
Yoga S940 14Iwl Firmware
Yoga530 14Ikb Firmware
Flex 6 1470 Firmware
Zhaoyang K42 80 Firmware
Xiaoxin Tide 7000 15 U22 Firmware
Xiaoxin Tide 7000 15 U42 Firmware
Zhaoyang E43 80 Kbl Firmware
Zhaoyang E53 80 Firmware
Thinkpad 10 Firmware
Yoga 11E 3Rd Gen Firmware
Yoga 11E 4Th Gen Firmware
Thinkpad E450 Firmware
Thinkpad E450C Firmware
Thinkpad E550 Firmware
Thinkpad E550C Firmware
Thinkpad E490S Firmware
Thinkpad S3 Firmware
Thinkpad E490 Firmware
Thinkpad E590 Firmware
Thinkpad R490 Firmware
Thinkpad R590 Firmware
Thinkpad S3 3Rd Gen Firmware
Thinkpad S2 Yoga 3Rd Gen Firmware
Thinkpad L390 Yoga Firmware
Thinkpad S2 Yoga 4Th Gen Firmware
Thinkpad L450 Firmware
Thinkpad L490 Firmware
Thinkpad L590 Firmware
Thinkpad P1 Firmware
Thinkpad P43S 20Rx Firmware
Thinkpad P53 Firmware
Thinkpad P53S Firmware
Thinkpad P73 Firmware
Thinkpad S1 Yoga Firmware
Thinkpad S5 2Nd Generation Firmware
Thinkpad S5 Yoga 15 Firmware
Thinkpad S531 Firmware
Thinkpad S540 Firmware
Thinkpad T450 Firmware
Thinkpad T450S Firmware
Thinkpad T490 Firmware
Thinkpad T490S Firmware
Thinkpad T590 Firmware
Thinkpad Tablet 10 Firmware
Thinkpad Tablet 8 Firmware
Thinkpad X1 Extreme Firmware
Thinkpad X131E Firmware
Thinkpad X140E Firmware
Thinkpad X390 Firmware
Thinkpad X390 Yoga Firmware
Thinkpad Yoga 260 S1 Firmware
Thinksystem Hr630X Skl Firmware
Thinksystem Hr650X Skl Firmware
Thinksystem Odc5200 Cn650S Firmware
6.4
CVSS 3.1 · NVD
Share
Severity by source
NVD
PRIMARY
6.4
MEDIUM
AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Lifecycle Timeline
1
CVE Published
Nov 12, 2019 - 21:15 nvd
MEDIUM 6.4
DescriptionNVD
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.
AnalysisAI
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution. Rated medium severity (CVSS 6.4). No vendor patch available.
Technical ContextAI
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution. Affected products include: Lenovo 510-15Ikl Firmware, Lenovo 510S-08Ikl Firmware, Lenovo Ideacentre 300-20Ish Firmware, Lenovo Ideacentre 300S-11Ish Firmware, Lenovo Ideacentre 310S-08Asr Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Thinkcentre E75S Firmware
View all
CVE-2019-6188
CRITICAL
9.8
Nov 12
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p,
CVE-2016-1350
HIGH
7.5
Mar 26
Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers
CVE-2016-1344
MEDIUM
5.9
Mar 26
The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a d
CVE-2019-6172
MEDIUM
6.4
Nov 12
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficie
CVE-2019-6156
LOW
3.3
Apr 10
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. Rated low severity (CVSS 3.3), this
Share
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).