What is CVE-2019-6188?

CVE-2019-6188 is a critical-severity vulnerability in Lenovo 130-14ikb. CVSS score: 9.8/10. Published 2019-11-12.

How severe is CVE-2019-6188?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Lenovo 130-14ikb

CVE-2019-6188

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.

EPSS: 0.013 (67.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Lenovo 130-14ikb
Lenovo 130-14ikb_firmware
Lenovo 130-15ikb
Lenovo 130-15ikb_firmware
Lenovo 330-14ikb
Lenovo 330-14ikb_firmware
Lenovo 330-14ikbr
Lenovo 330-14ikbr_firmware
Lenovo 330-15ich
Lenovo 330-15ich_firmware

References

psirt@lenovo.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-6188?: CVE-2019-6188 is a critical-severity vulnerability in Lenovo 130-14ikb. CVSS score: 9.8/10. Published 2019-11-12.
How severe is CVE-2019-6188?: Critical severity. CVSS v3 base score is 9.8 out of 10.