CVE-2019-6177

Description

A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege escalation. Lenovo ended support for Lenovo Solution Center and recommended that customers migrate to Lenovo Vantage or Lenovo Diagnostics in April 2018.

Remediation

Solution:

  • Users should uninstall Lenovo Solution Center, using Programs and Features from the Control Panel, and migrate to Lenovo Vantage or Lenovo Diagnostics.

Category

9.8
CVSS
Severity: Critical
CVSS 3.1 •
CVSS 3.0 •
CVSS 2.0 •
EPSS 0.30%
Vendor Advisory lenovo.com
Affected: Lenovo Solution Center
Published at:
Updated at:

References

Link Tags
https://support.lenovo.com/solutions/LEN-27811 vendor advisory

Frequently Asked Questions

What is the severity of CVE-2019-6177?
CVE-2019-6177 has been scored as a critical severity vulnerability.
How to fix CVE-2019-6177?
To fix CVE-2019-6177: Users should uninstall Lenovo Solution Center, using Programs and Features from the Control Panel, and migrate to Lenovo Vantage or Lenovo Diagnostics.
Is CVE-2019-6177 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2019-6177 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2019-6177?
CVE-2019-6177 affects Lenovo Solution Center.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.