CVE-2019-6188
ThinkPad T460p and T470p BIOS Tamper Mechanism
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in R0FET50W, R07ET90W
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.
Timeline
- CVE published
- Record last updated
Affected versions
- Lenovo ThinkPad T470p
fixed in R0FET50W
- Lenovo ThinkPad T460p
fixed in R07ET90W