CVE-2019-6188

ThinkPad T460p and T470p BIOS Tamper Mechanism

Description

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.

Remediation

Solution:

Update BIOS to version R07ET90W or higher for ThinkPad T460p Update BIOS to version R0FET50W or higher for ThinkPad T470p

9.8

CVSS

Severity: Critical

CVSS 3.1 •

CVSS 2.0 •

EPSS 0.62%

Vendor Advisory lenovo.com

Affected: Lenovo ThinkPad T470p

Affected: Lenovo ThinkPad T460p

References

Link	Tags
https://support.lenovo.com/us/en/product_security/LEN-27714	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2019-6188?: CVE-2019-6188 has been scored as a critical severity vulnerability.
How to fix CVE-2019-6188?: To fix CVE-2019-6188: Update BIOS to version R07ET90W or higher for ThinkPad T460p Update BIOS to version R0FET50W or higher for ThinkPad T470p
Is CVE-2019-6188 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2019-6188 is being actively exploited. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2019-6188?: CVE-2019-6188 affects Lenovo ThinkPad T470p, Lenovo ThinkPad T460p.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.