{"id":"CVE-2019-6171","aliases":["EUVD-2019-15738","GHSA-8pxc-53gq-54c7"],"status":"published","title":"A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow...","description":"A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.","severity":{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00345,"percentile":0.28232,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2019-08-19T14:56:45Z","modified":"2026-06-17T02:38:43Z","products":[{"vendor":"lenovo","product":"20a7_firmware"},{"vendor":"lenovo","product":"20a8_firmware"},{"vendor":"lenovo","product":"20a9_firmware"},{"vendor":"lenovo","product":"20aa_firmware"},{"vendor":"lenovo","product":"20ab_firmware"},{"vendor":"lenovo","product":"20ac_firmware"},{"vendor":"lenovo","product":"20aj_firmware"},{"vendor":"lenovo","product":"20ak_firmware"},{"vendor":"lenovo","product":"20al_firmware"},{"vendor":"lenovo","product":"20am_firmware"},{"vendor":"lenovo","product":"20an_firmware"},{"vendor":"lenovo","product":"20aq_firmware"},{"vendor":"lenovo","product":"20ar_firmware"},{"vendor":"lenovo","product":"20aw_firmware"},{"vendor":"lenovo","product":"20b0_firmware"},{"vendor":"lenovo","product":"20b3_firmware"},{"vendor":"lenovo","product":"20b6_firmware"},{"vendor":"lenovo","product":"20b7_firmware"},{"vendor":"lenovo","product":"20be_firmware"},{"vendor":"lenovo","product":"20bf_firmware"},{"vendor":"lenovo","product":"20bg_firmware"},{"vendor":"lenovo","product":"20bl_firmware"},{"vendor":"lenovo","product":"20bm_firmware"},{"vendor":"lenovo","product":"20bu_firmware"},{"vendor":"lenovo","product":"20bv_firmware"},{"vendor":"lenovo","product":"20bw_firmware"},{"vendor":"lenovo","product":"20bx_firmware"},{"vendor":"lenovo","product":"20d9_firmware"},{"vendor":"lenovo","product":"20da_firmware"},{"vendor":"lenovo","product":"20dc_firmware"},{"vendor":"lenovo","product":"20dd_firmware"},{"vendor":"lenovo","product":"20de_firmware"},{"vendor":"lenovo","product":"20df_firmware"},{"vendor":"lenovo","product":"20dg_firmware"},{"vendor":"lenovo","product":"20dh_firmware"},{"vendor":"lenovo","product":"20dj_firmware"},{"vendor":"lenovo","product":"20dq_firmware"},{"vendor":"lenovo","product":"20dr_firmware"},{"vendor":"lenovo","product":"20ds_firmware"},{"vendor":"lenovo","product":"20dt_firmware"},{"vendor":"lenovo","product":"20e0_firmware"},{"vendor":"lenovo","product":"20ef_firmware"},{"vendor":"lenovo","product":"20eg_firmware"},{"vendor":"lenovo","product":"20et_firmware"},{"vendor":"lenovo","product":"20eu_firmware"},{"vendor":"lenovo","product":"20ev_firmware"},{"vendor":"lenovo","product":"20ew_firmware"},{"vendor":"lenovo","product":"20ex_firmware"},{"vendor":"lenovo","product":"20ey_firmware"},{"vendor":"lenovo","product":"20f1_firmware"},{"vendor":"lenovo","product":"20f2_firmware"},{"vendor":"lenovo","product":"20f5_firmware"},{"vendor":"lenovo","product":"20f6_firmware"},{"vendor":"lenovo","product":"20fm_firmware"},{"vendor":"lenovo","product":"20fn_firmware"},{"vendor":"lenovo","product":"20fu_firmware"},{"vendor":"lenovo","product":"20fv_firmware"},{"vendor":"lenovo","product":"20fw_firmware"},{"vendor":"lenovo","product":"20fx_firmware"},{"vendor":"lenovo","product":"20g4_firmware"},{"vendor":"lenovo","product":"20g5_firmware"},{"vendor":"lenovo","product":"20g8_firmware"},{"vendor":"lenovo","product":"20g9_firmware"},{"vendor":"lenovo","product":"20ga_firmware"},{"vendor":"lenovo","product":"20gb_firmware"},{"vendor":"lenovo","product":"20h1_firmware"},{"vendor":"lenovo","product":"20h2_firmware"},{"vendor":"lenovo","product":"20h4_firmware"},{"vendor":"lenovo","product":"20h5_firmware"},{"vendor":"lenovo","product":"20h6_firmware"},{"vendor":"lenovo","product":"20h8_firmware"},{"vendor":"lenovo","product":"20hm_firmware"},{"vendor":"lenovo","product":"20hn_firmware"},{"vendor":"lenovo","product":"20hs_firmware"},{"vendor":"lenovo","product":"20ht_firmware"},{"vendor":"lenovo","product":"20hu_firmware"},{"vendor":"lenovo","product":"20hv_firmware"},{"vendor":"lenovo","product":"20j1_firmware"},{"vendor":"lenovo","product":"20j2_firmware"},{"vendor":"lenovo","product":"20j4_firmware"},{"vendor":"lenovo","product":"20j5_firmware"},{"vendor":"lenovo","product":"20j6_firmware"},{"vendor":"lenovo","product":"20j7_firmware"},{"vendor":"lenovo","product":"20ja_firmware"},{"vendor":"lenovo","product":"20jh_firmware"},{"vendor":"lenovo","product":"20jj_firmware"},{"vendor":"lenovo","product":"20jq_firmware"},{"vendor":"lenovo","product":"20jr_firmware"},{"vendor":"lenovo","product":"20ju_firmware"},{"vendor":"lenovo","product":"20jv_firmware"},{"vendor":"lenovo","product":"20k5_firmware"},{"vendor":"lenovo","product":"20k6_firmware"},{"vendor":"lenovo","product":"20kc_firmware"},{"vendor":"lenovo","product":"20kd_firmware"},{"vendor":"lenovo","product":"20kl_firmware"},{"vendor":"lenovo","product":"20km_firmware"},{"vendor":"lenovo","product":"20kn_firmware"},{"vendor":"lenovo","product":"20kq_firmware"},{"vendor":"lenovo","product":"20ks_firmware"},{"vendor":"lenovo","product":"20kt_firmware"},{"vendor":"lenovo","product":"20ku_firmware"},{"vendor":"lenovo","product":"20kv_firmware"},{"vendor":"lenovo","product":"20l2_firmware"},{"vendor":"lenovo","product":"20lh_firmware"},{"vendor":"lenovo","product":"20lj_firmware"},{"vendor":"lenovo","product":"20lm_firmware"},{"vendor":"lenovo","product":"20ln_firmware"},{"vendor":"lenovo","product":"20lq_firmware"},{"vendor":"lenovo","product":"20lr_firmware"},{"vendor":"lenovo","product":"20ls_firmware"},{"vendor":"lenovo","product":"20lt_firmware"},{"vendor":"lenovo","product":"20lx_firmware"},{"vendor":"lenovo","product":"20m5_firmware"},{"vendor":"lenovo","product":"20m6_firmware"},{"vendor":"lenovo","product":"20m7_firmware"},{"vendor":"lenovo","product":"20m8_firmware"},{"vendor":"lenovo","product":"20mu_firmware"},{"vendor":"lenovo","product":"20mv_firmware"},{"vendor":"lenovo","product":"20mw_firmware"},{"vendor":"lenovo","product":"20mx_firmware"},{"vendor":"lenovo","product":"20n8_firmware"},{"vendor":"lenovo","product":"20n9_firmware"},{"vendor":"lenovo","product":"20ng_firmware"},{"vendor":"lenovo","product":"20nn_firmware"},{"vendor":"lenovo","product":"20nq_firmware"},{"vendor":"lenovo","product":"20nr_firmware"},{"vendor":"lenovo","product":"20ns_firmware"},{"vendor":"lenovo","product":"20nt_firmware"},{"vendor":"lenovo","product":"20nu_firmware"},{"vendor":"lenovo","product":"230x_firmware"},{"vendor":"lenovo","product":"232x_firmware"},{"vendor":"lenovo","product":"233x_firmware"},{"vendor":"lenovo","product":"234x_firmware"},{"vendor":"lenovo","product":"235x_firmware"},{"vendor":"lenovo","product":"239x_firmware"},{"vendor":"lenovo","product":"242x_firmware"},{"vendor":"lenovo","product":"243x_firmware"},{"vendor":"lenovo","product":"244x_firmware"},{"vendor":"lenovo","product":"246x_firmware"},{"vendor":"lenovo","product":"247x_firmware"},{"vendor":"lenovo","product":"248x_firmware"},{"vendor":"lenovo","product":"30eh_firmware"},{"vendor":"lenovo","product":"336x_firmware"},{"vendor":"lenovo","product":"337x_firmware"},{"vendor":"lenovo","product":"343x_firmware"},{"vendor":"lenovo","product":"344x_firmware"},{"vendor":"lenovo","product":"34xx_firmware"},{"vendor":"lenovo","product":"3xxx_firmware"},{"vendor":"lenovo","product":"bios"}],"references":[{"url":"https://support.lenovo.com/solutions/LEN-27764","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6171"},{"url":"https://github.com/advisories/GHSA-8pxc-53gq-54c7"}],"sources":{"cve":[{"id":"CVE-2019-6171","description":"A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.","status":"published","published":"2019-08-19T14:56:45.041Z","modified":"2024-09-16T20:03:17.346Z","cvss":[{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:20:23.381621Z"}],"euvd":[{"id":"EUVD-2019-15738","description":"A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.","status":"published","published":"2019-08-19T14:56:45Z","modified":"2024-09-16T20:03:17Z","cvss":[{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:55:17.319093Z"}],"ghsa":[{"id":"GHSA-8pxc-53gq-54c7","title":"A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow...","description":"A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.","status":"published","published":"2022-05-24T16:53:56Z","modified":"2023-01-31T05:07:30Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T14:49:13.573597Z"}],"nvd":[{"id":"CVE-2019-6171","description":"A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.","status":"published","published":"2019-08-19T15:15:11.653Z","modified":"2026-06-17T02:38:43.623Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:05:22.878504Z"}]}}