{"answers":{"affected":"It affects 392 products.","exploited":"There is no known exploitation of CVE-2019-6172 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2019-6172 yet. Limit exposure of the affected software until one is available.","what":"CVE-2019-6172 is a medium-severity code injection vulnerability in Lenovo ThinkPad, published on 12 Nov 2019. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2019-6172 and fix it if it is affected.\n\nWhat it is: CVE-2019-6172 is a medium-severity code injection vulnerability in Lenovo ThinkPad, published on 12 Nov 2019. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2019-6172 in the wild and no public exploit code.\n\nAffected product: Lenovo ThinkPad. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2019-6172/ (Markdown: https://insights.sbomify.com/CVE-2019-6172/index.md)","id":"CVE-2019-6172","markdown":"https://insights.sbomify.com/CVE-2019-6172/index.md","name":"CVE-2019-6172","record":{"aliases":["GHSA-75rw-5mh8-g8gf"],"analysis":{"component_type":"hardware_firmware","fix_type":"patch","impacts":["code_execution"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Lenovo ThinkPad firmware","requires_auth":"high_privilege","summary":"Insufficient parameter checking in the Legacy USB driver SMI callback allows arbitrary code execution on Lenovo ThinkPad models.","user_interaction":"not_required","vuln_class":"code_injection"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"lenovo","cpe":[{"product":"130-14ikb_firmware","vendor":"lenovo"},{"product":"130-15ikb_firmware","vendor":"lenovo"},{"product":"330-14ikb_firmware","vendor":"lenovo"},{"product":"330-14ikbr_firmware","vendor":"lenovo"},{"product":"330-15ich_firmware","vendor":"lenovo"},{"product":"330-15ikb_firmware","vendor":"lenovo"},{"product":"330-15ikbr_firmware","vendor":"lenovo"},{"product":"330-15ikbr_touch_firmware","vendor":"lenovo"},{"product":"330-17ich_firmware","vendor":"lenovo"},{"product":"330-17ikb_firmware","vendor":"lenovo"},{"product":"330-17ikbr_firmware","vendor":"lenovo"},{"product":"330c-14ikb_firmware","vendor":"lenovo"},{"product":"330c-15ikb_firmware","vendor":"lenovo"},{"product":"330c-15ikbr_firmware","vendor":"lenovo"},{"product":"340c-15ikb_firmware","vendor":"lenovo"},{"product":"340c-15iwl_firmware","vendor":"lenovo"},{"product":"510-15ikl_firmware","vendor":"lenovo"},{"product":"510s-08ikl_firmware","vendor":"lenovo"},{"product":"530s-14ikb_firmware","vendor":"lenovo"},{"product":"530s-14iwl_firmware","vendor":"lenovo"},{"product":"530s-15ikb_firmware","vendor":"lenovo"},{"product":"530s-15iwl_firmware","vendor":"lenovo"},{"product":"63_firmware","vendor":"lenovo"},{"product":"720s-14ikbr_firmware","vendor":"lenovo"},{"product":"720s-15ikb_firmware","vendor":"lenovo"},{"product":"720s_touch-15ikb_firmware","vendor":"lenovo"},{"product":"730s-13iwl_firmware","vendor":"lenovo"},{"product":"a340-22_iwl_firmware","vendor":"lenovo"},{"product":"a340-22ast_firmware","vendor":"lenovo"},{"product":"a340-22icb_firmware","vendor":"lenovo"},{"product":"a340-24_iwl_firmware","vendor":"lenovo"},{"product":"a340-24icb_firmware","vendor":"lenovo"},{"product":"aio520-22ikl_firmware","vendor":"lenovo"},{"product":"aio520-22iku_firmware","vendor":"lenovo"},{"product":"aio520-24arr_firmware","vendor":"lenovo"},{"product":"aio520-24ikl_firmware","vendor":"lenovo"},{"product":"aio520-24iku_firmware","vendor":"lenovo"},{"product":"aio520-27ikl_firmware","vendor":"lenovo"},{"product":"aio_330-20ast_firmware","vendor":"lenovo"},{"product":"aio_330-20igm_firmware","vendor":"lenovo"},{"product":"aio_520-24ast_firmware","vendor":"lenovo"},{"product":"c340-14iwl_firmware","vendor":"lenovo"},{"product":"c340-15iwl_firmware","vendor":"lenovo"},{"product":"e42-80_firmware","vendor":"lenovo"},{"product":"e52-80_firmware","vendor":"lenovo"},{"product":"flex-14iwl_firmware","vendor":"lenovo"},{"product":"flex-15iwl_firmware","vendor":"lenovo"},{"product":"flex_5-1570\\(r\\)_firmware","vendor":"lenovo"},{"product":"flex_6-1470_firmware","vendor":"lenovo"},{"product":"flex_6-14ikb_firmware","vendor":"lenovo"},{"product":"h50-30g_desktop_firmware","vendor":"lenovo"},{"product":"ideacentre_300-20ish_firmware","vendor":"lenovo"},{"product":"ideacentre_300s-11ish_firmware","vendor":"lenovo"},{"product":"ideacentre_310s-08asr_firmware","vendor":"lenovo"},{"product":"ideacentre_310s-08igm_firmware","vendor":"lenovo"},{"product":"ideacentre_510-15icb_firmware","vendor":"lenovo"},{"product":"ideacentre_510a-15icb_firmware","vendor":"lenovo"},{"product":"ideacentre_510s-08ish_firmware","vendor":"lenovo"},{"product":"ideacentre_700_firmware","vendor":"lenovo"},{"product":"ideacentre_720-18apr_firmware","vendor":"lenovo"},{"product":"ideacentre_720-18icb_firmware","vendor":"lenovo"},{"product":"ideacentre_730s-24ikb_firmware","vendor":"lenovo"},{"product":"k43c-80_firmware","vendor":"lenovo"},{"product":"l340-15irh_firmware","vendor":"lenovo"},{"product":"l340-15iwl_firmware","vendor":"lenovo"},{"product":"l340-15iwltouch_firmware","vendor":"lenovo"},{"product":"l340-17irh_firmware","vendor":"lenovo"},{"product":"l340-17iwl_firmware","vendor":"lenovo"},{"product":"legion_c530-19icb_firmware","vendor":"lenovo"},{"product":"legion_c730-19ico_firmware","vendor":"lenovo"},{"product":"legion_t530-28apr_firmware","vendor":"lenovo"},{"product":"legion_t530-28apr_reflash_firmware","vendor":"lenovo"},{"product":"legion_t530-28icb_firmware","vendor":"lenovo"},{"product":"legion_t530-28icb_reflash_firmware","vendor":"lenovo"},{"product":"legion_t730-28ico_firmware","vendor":"lenovo"},{"product":"legion_y520t_z370_firmware","vendor":"lenovo"},{"product":"legion_y530-15ich\\(1060\\)_firmware","vendor":"lenovo"},{"product":"legion_y530-15ich_firmware","vendor":"lenovo"},{"product":"legion_y7000p-1060_firmware","vendor":"lenovo"},{"product":"legion_y730-15ich_firmware","vendor":"lenovo"},{"product":"legion_y730-17ich_firmware","vendor":"lenovo"},{"product":"legion_y740-15ichg_firmware","vendor":"lenovo"},{"product":"legion_y740-15irhg_firmware","vendor":"lenovo"},{"product":"legion_y740-17ichg_firmware","vendor":"lenovo"},{"product":"legion_y740-17irhg_firmware","vendor":"lenovo"},{"product":"legion_y9000k_2019_firmware","vendor":"lenovo"},{"product":"legion_y9000p_2019_firmware","vendor":"lenovo"},{"product":"lenovo_v720-14ikb_firmware","vendor":"lenovo"},{"product":"m4500_firmware","vendor":"lenovo"},{"product":"m4500_id_firmware","vendor":"lenovo"},{"product":"m4550_id_firmware","vendor":"lenovo"},{"product":"miix_720-12ikb_firmware","vendor":"lenovo"},{"product":"qitian_4500_firmware","vendor":"lenovo"},{"product":"qitian_a815_firmware","vendor":"lenovo"},{"product":"qitian_b4550_firmware","vendor":"lenovo"},{"product":"qitian_b4650_firmware","vendor":"lenovo"},{"product":"qitian_b5900_firmware","vendor":"lenovo"},{"product":"qitian_m4550_firmware","vendor":"lenovo"},{"product":"qitian_m4600_firmware","vendor":"lenovo"},{"product":"qitian_m4650_firmware","vendor":"lenovo"},{"product":"qt_a7400_firmware","vendor":"lenovo"},{"product":"qt_b415_firmware","vendor":"lenovo"},{"product":"qt_m410_firmware","vendor":"lenovo"},{"product":"qt_m415_firmware","vendor":"lenovo"},{"product":"rescuer_y7000\\(1060\\)_firmware","vendor":"lenovo"},{"product":"rescuer_y7000_firmware","vendor":"lenovo"},{"product":"rescuer_y7000p\\(1060\\)_firmware","vendor":"lenovo"},{"product":"rescuer_y7000p_firmware","vendor":"lenovo"},{"product":"s145-14ikb_firmware","vendor":"lenovo"},{"product":"s145-14iwl_firmware","vendor":"lenovo"},{"product":"s145-15ikb_firmware","vendor":"lenovo"},{"product":"s145-15iwl_firmware","vendor":"lenovo"},{"product":"s340-14iwl_firmware","vendor":"lenovo"},{"product":"s340-14iwl_touch_firmware","vendor":"lenovo"},{"product":"s340-15iwl_firmware","vendor":"lenovo"},{"product":"s340-15iwl_touch_firmware","vendor":"lenovo"},{"product":"s530-13iwl_firmware","vendor":"lenovo"},{"product":"s540-14iwl_firmware","vendor":"lenovo"},{"product":"s540-14iwl_touch_firmware","vendor":"lenovo"},{"product":"s540-15iwl_firmware","vendor":"lenovo"},{"product":"s940-14iwl_firmware","vendor":"lenovo"},{"product":"thinkcentre_e73_firmware","vendor":"lenovo"},{"product":"thinkcentre_e73s_firmware","vendor":"lenovo"},{"product":"thinkcentre_e74_firmware","vendor":"lenovo"},{"product":"thinkcentre_e74s_firmware","vendor":"lenovo"},{"product":"thinkcentre_e74z_firmware","vendor":"lenovo"},{"product":"thinkcentre_e75s_firmware","vendor":"lenovo"},{"product":"thinkcentre_e75t_firmware","vendor":"lenovo"},{"product":"thinkcentre_e93_firmware","vendor":"lenovo"},{"product":"thinkcentre_e95z_firmware","vendor":"lenovo"},{"product":"thinkcentre_e96z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m4500k_firmware","vendor":"lenovo"},{"product":"thinkcentre_m4500q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m4500s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m4500t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m4600s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m4600t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m600_firmware","vendor":"lenovo"},{"product":"thinkcentre_m610_firmware","vendor":"lenovo"},{"product":"thinkcentre_m625q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m6500s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m6500t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m6600_firmware","vendor":"lenovo"},{"product":"thinkcentre_m6600q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m6600s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m6600t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m700q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m700s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m700t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m700z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m710e_firmware","vendor":"lenovo"},{"product":"thinkcentre_m710q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m710s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m710t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m715q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m715q_rr_firmware","vendor":"lenovo"},{"product":"thinkcentre_m715s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m715t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m720q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m720s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m720t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m725s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m7300z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m73_firmware","vendor":"lenovo"},{"product":"thinkcentre_m73_tiny_firmware","vendor":"lenovo"},{"product":"thinkcentre_m73p_firmware","vendor":"lenovo"},{"product":"thinkcentre_m79_firmware","vendor":"lenovo"},{"product":"thinkcentre_m800_firmware","vendor":"lenovo"},{"product":"thinkcentre_m800z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m810z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m818z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m820z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m8300z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m8350z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m83_firmware","vendor":"lenovo"},{"product":"thinkcentre_m83z_\\(aio\\)_firmware","vendor":"lenovo"},{"product":"thinkcentre_m8500s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m8500t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m8600s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m8600t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m900_firmware","vendor":"lenovo"},{"product":"thinkcentre_m900z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m90n-1_firmware","vendor":"lenovo"},{"product":"thinkcentre_m910q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m910s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m910t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m910x_firmware","vendor":"lenovo"},{"product":"thinkcentre_m910z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m920q_firmware","vendor":"lenovo"},{"product":"thinkcentre_m920s_firmware","vendor":"lenovo"},{"product":"thinkcentre_m920t_firmware","vendor":"lenovo"},{"product":"thinkcentre_m920x_firmware","vendor":"lenovo"},{"product":"thinkcentre_m920z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m9350z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m93_firmware","vendor":"lenovo"},{"product":"thinkcentre_m93p_firmware","vendor":"lenovo"},{"product":"thinkcentre_m93z_\\(aio\\)_firmware","vendor":"lenovo"},{"product":"thinkcentre_m9500z_firmware","vendor":"lenovo"},{"product":"thinkcentre_m9550z_firmware","vendor":"lenovo"},{"product":"thinkcentre_s510_firmware","vendor":"lenovo"},{"product":"thinkcentre_x1_aio_firmware","vendor":"lenovo"},{"product":"thinkpad_10_firmware","vendor":"lenovo"},{"product":"thinkpad_11e_firmware","vendor":"lenovo"},{"product":"thinkpad_13_firmware","vendor":"lenovo"},{"product":"thinkpad_e450_firmware","vendor":"lenovo"},{"product":"thinkpad_e450c_firmware","vendor":"lenovo"},{"product":"thinkpad_e460_firmware","vendor":"lenovo"},{"product":"thinkpad_e470_firmware","vendor":"lenovo"},{"product":"thinkpad_e480_firmware","vendor":"lenovo"},{"product":"thinkpad_e490_firmware","vendor":"lenovo"},{"product":"thinkpad_e490s_firmware","vendor":"lenovo"},{"product":"thinkpad_e550_firmware","vendor":"lenovo"},{"product":"thinkpad_e550c_firmware","vendor":"lenovo"},{"product":"thinkpad_e560_firmware","vendor":"lenovo"},{"product":"thinkpad_e560p_firmware","vendor":"lenovo"},{"product":"thinkpad_e570_firmware","vendor":"lenovo"},{"product":"thinkpad_e580_firmware","vendor":"lenovo"},{"product":"thinkpad_e590_firmware","vendor":"lenovo"},{"product":"thinkpad_helix_firmware","vendor":"lenovo"},{"product":"thinkpad_l380_firmware","vendor":"lenovo"},{"product":"thinkpad_l380_yoga_firmware","vendor":"lenovo"},{"product":"thinkpad_l390_yoga_firmware","vendor":"lenovo"},{"product":"thinkpad_l450_firmware","vendor":"lenovo"},{"product":"thinkpad_l460_firmware","vendor":"lenovo"},{"product":"thinkpad_l470_firmware","vendor":"lenovo"},{"product":"thinkpad_l480_firmware","vendor":"lenovo"},{"product":"thinkpad_l490_firmware","vendor":"lenovo"},{"product":"thinkpad_l560_firmware","vendor":"lenovo"},{"product":"thinkpad_l570_firmware","vendor":"lenovo"},{"product":"thinkpad_l580_firmware","vendor":"lenovo"},{"product":"thinkpad_l590_firmware","vendor":"lenovo"},{"product":"thinkpad_p1_firmware","vendor":"lenovo"},{"product":"thinkpad_p43s_\\(20rx\\)_firmware","vendor":"lenovo"},{"product":"thinkpad_p50_firmware","vendor":"lenovo"},{"product":"thinkpad_p50s_firmware","vendor":"lenovo"},{"product":"thinkpad_p51_firmware","vendor":"lenovo"},{"product":"thinkpad_p51s_firmware","vendor":"lenovo"},{"product":"thinkpad_p52_firmware","vendor":"lenovo"},{"product":"thinkpad_p52s_firmware","vendor":"lenovo"},{"product":"thinkpad_p53_firmware","vendor":"lenovo"},{"product":"thinkpad_p53s_firmware","vendor":"lenovo"},{"product":"thinkpad_p70_firmware","vendor":"lenovo"},{"product":"thinkpad_p71_firmware","vendor":"lenovo"},{"product":"thinkpad_p72_firmware","vendor":"lenovo"},{"product":"thinkpad_p73_firmware","vendor":"lenovo"},{"product":"thinkpad_r490_firmware","vendor":"lenovo"},{"product":"thinkpad_r590_firmware","vendor":"lenovo"},{"product":"thinkpad_s1_3rd_firmware","vendor":"lenovo"},{"product":"thinkpad_s1_yoga_firmware","vendor":"lenovo"},{"product":"thinkpad_s2_yoga_3rd_gen_firmware","vendor":"lenovo"},{"product":"thinkpad_s2_yoga_4th_gen_firmware","vendor":"lenovo"},{"product":"thinkpad_s3_3rd_gen_firmware","vendor":"lenovo"},{"product":"thinkpad_s3_firmware","vendor":"lenovo"},{"product":"thinkpad_s531_firmware","vendor":"lenovo"},{"product":"thinkpad_s540_firmware","vendor":"lenovo"},{"product":"thinkpad_s5_2nd_generation_firmware","vendor":"lenovo"},{"product":"thinkpad_s5_firmware","vendor":"lenovo"},{"product":"thinkpad_s5_yoga_15_firmware","vendor":"lenovo"},{"product":"thinkpad_t25_firmware","vendor":"lenovo"},{"product":"thinkpad_t440_firmware","vendor":"lenovo"},{"product":"thinkpad_t440p_firmware","vendor":"lenovo"},{"product":"thinkpad_t440s_firmware","vendor":"lenovo"},{"product":"thinkpad_t450_firmware","vendor":"lenovo"},{"product":"thinkpad_t450s_firmware","vendor":"lenovo"},{"product":"thinkpad_t460_firmware","vendor":"lenovo"},{"product":"thinkpad_t460p_firmware","vendor":"lenovo"},{"product":"thinkpad_t460s_firmware","vendor":"lenovo"},{"product":"thinkpad_t470_firmware","vendor":"lenovo"},{"product":"thinkpad_t470p_firmware","vendor":"lenovo"},{"product":"thinkpad_t470s_firmware","vendor":"lenovo"},{"product":"thinkpad_t480_firmware","vendor":"lenovo"},{"product":"thinkpad_t480s_firmware","vendor":"lenovo"},{"product":"thinkpad_t490_firmware","vendor":"lenovo"},{"product":"thinkpad_t490s_firmware","vendor":"lenovo"},{"product":"thinkpad_t540p_firmware","vendor":"lenovo"},{"product":"thinkpad_t550_firmware","vendor":"lenovo"},{"product":"thinkpad_t560_firmware","vendor":"lenovo"},{"product":"thinkpad_t570_firmware","vendor":"lenovo"},{"product":"thinkpad_t580_firmware","vendor":"lenovo"},{"product":"thinkpad_t590_firmware","vendor":"lenovo"},{"product":"thinkpad_tablet_10_firmware","vendor":"lenovo"},{"product":"thinkpad_tablet_8_firmware","vendor":"lenovo"},{"product":"thinkpad_w540_firmware","vendor":"lenovo"},{"product":"thinkpad_w541_firmware","vendor":"lenovo"},{"product":"thinkpad_w550s_firmware","vendor":"lenovo"},{"product":"thinkpad_x131e_firmware","vendor":"lenovo"},{"product":"thinkpad_x140e_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_carbon_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_extreme_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_tablet_firmware","vendor":"lenovo"},{"product":"thinkpad_x1_yoga_firmware","vendor":"lenovo"},{"product":"thinkpad_x240_firmware","vendor":"lenovo"},{"product":"thinkpad_x240s_firmware","vendor":"lenovo"},{"product":"thinkpad_x250_firmware","vendor":"lenovo"},{"product":"thinkpad_x260_firmware","vendor":"lenovo"},{"product":"thinkpad_x270_firmware","vendor":"lenovo"},{"product":"thinkpad_x280_firmware","vendor":"lenovo"},{"product":"thinkpad_x380_yoga_firmware","vendor":"lenovo"},{"product":"thinkpad_x390_firmware","vendor":"lenovo"},{"product":"thinkpad_x390_yoga_firmware","vendor":"lenovo"},{"product":"thinkpad_yoga_11e_firmware","vendor":"lenovo"},{"product":"thinkpad_yoga_260-s1_firmware","vendor":"lenovo"},{"product":"thinkpad_yoga_370_firmware","vendor":"lenovo"},{"product":"thinkstation_e32_firmware","vendor":"lenovo"},{"product":"thinkstation_p300_firmware","vendor":"lenovo"},{"product":"thinkstation_p310_firmware","vendor":"lenovo"},{"product":"thinkstation_p318_firmware","vendor":"lenovo"},{"product":"thinkstation_p320_firmware","vendor":"lenovo"},{"product":"thinkstation_p320_tiny_firmware","vendor":"lenovo"},{"product":"thinkstation_p330_firmware","vendor":"lenovo"},{"product":"thinkstation_p330_tiny_firmware","vendor":"lenovo"},{"product":"thinksystem_hr630x_\\(skl\\)_firmware","vendor":"lenovo"},{"product":"thinksystem_hr650x_\\(skl\\)_firmware","vendor":"lenovo"},{"product":"thinksystem_odc5200-cn650s_firmware","vendor":"lenovo"},{"product":"v110-14ikb_firmware","vendor":"lenovo"},{"product":"v110-15ikb_firmware","vendor":"lenovo"},{"product":"v130-14ikb_firmware","vendor":"lenovo"},{"product":"v130-15ikb_firmware","vendor":"lenovo"},{"product":"v310-14ikb_firmware","vendor":"lenovo"},{"product":"v310-14isk_firmware","vendor":"lenovo"},{"product":"v310-15ikb_firmware","vendor":"lenovo"},{"product":"v310-15isk_firmware","vendor":"lenovo"},{"product":"v310z\\(yt_s3150\\)_firmware","vendor":"lenovo"},{"product":"v320-14ikb_firmware","vendor":"lenovo"},{"product":"v320-15ikb_firmware","vendor":"lenovo"},{"product":"v320-17ikbr_firmware","vendor":"lenovo"},{"product":"v330-14ikb_firmware","vendor":"lenovo"},{"product":"v330-14isk_firmware","vendor":"lenovo"},{"product":"v330-15igm_firmware","vendor":"lenovo"},{"product":"v330-15ikb_firmware","vendor":"lenovo"},{"product":"v330-15isk_firmware","vendor":"lenovo"},{"product":"v410z\\(yt_s4250\\)_firmware","vendor":"lenovo"},{"product":"v510-14ikb_firmware","vendor":"lenovo"},{"product":"v510-15ikb_firmware","vendor":"lenovo"},{"product":"v510z_\\(yt_s5250\\)_firmware","vendor":"lenovo"},{"product":"v520s-08ikl_firmware","vendor":"lenovo"},{"product":"v520t-15ikl_firmware","vendor":"lenovo"},{"product":"v530-22icb\\(yt_s4350\\)_firmware","vendor":"lenovo"},{"product":"v530-24icb\\(yt_s5350\\)_firmware","vendor":"lenovo"},{"product":"v530s-07icb_firmware","vendor":"lenovo"},{"product":"v540-24iwl\\(yt_s5430\\)_firmware","vendor":"lenovo"},{"product":"v730-15ikb_firmware","vendor":"lenovo"},{"product":"wei5-14ikb_firmware","vendor":"lenovo"},{"product":"wei5-15ikb_firmware","vendor":"lenovo"},{"product":"xiaoxin-14_2019iwl_firmware","vendor":"lenovo"},{"product":"xiaoxin-14iwl_qc_2019_firmware","vendor":"lenovo"},{"product":"xiaoxin-15_2019iwl_firmware","vendor":"lenovo"},{"product":"xiaoxin_air-14iwl_2019_firmware","vendor":"lenovo"},{"product":"xiaoxin_air-15iwl_2019_firmware","vendor":"lenovo"},{"product":"xiaoxin_air_13iwl_firmware","vendor":"lenovo"},{"product":"xiaoxin_air_14ikbr_firmware","vendor":"lenovo"},{"product":"xiaoxin_air_14iwl_firmware","vendor":"lenovo"},{"product":"xiaoxin_air_15ikbr_firmware","vendor":"lenovo"},{"product":"xiaoxin_air_15iwl_firmware","vendor":"lenovo"},{"product":"xiaoxin_tide_7000-15_u22_firmware","vendor":"lenovo"},{"product":"xiaoxin_tide_7000-15_u42_firmware","vendor":"lenovo"},{"product":"xx_chao5000-ikbra_firmware","vendor":"lenovo"},{"product":"y7000_2019_1050_firmware","vendor":"lenovo"},{"product":"yangtian_afh110_firmware","vendor":"lenovo"},{"product":"yangtian_afh81_firmware","vendor":"lenovo"},{"product":"yangtian_afq150_firmware","vendor":"lenovo"},{"product":"yangtian_mc_h110_firmware","vendor":"lenovo"},{"product":"yangtian_mc_h110_pci_firmware","vendor":"lenovo"},{"product":"yangtian_mc_h81_firmware","vendor":"lenovo"},{"product":"yangtian_me_h110_firmware","vendor":"lenovo"},{"product":"yangtian_mf_h110_pci_firmware","vendor":"lenovo"},{"product":"yangtian_mf_h81_pci_firmware","vendor":"lenovo"},{"product":"yangtian_ms_h81_firmware","vendor":"lenovo"},{"product":"yangtian_tc_h110_pci_firmware","vendor":"lenovo"},{"product":"yangtian_tc_h81_pci_firmware","vendor":"lenovo"},{"product":"yangtian_wc_h110_pci_firmware","vendor":"lenovo"},{"product":"yangtian_wcc_h81_pci_firmware","vendor":"lenovo"},{"product":"yangtian_we_h110_firmware","vendor":"lenovo"},{"product":"yangtian_wf_h110_pci_firmware","vendor":"lenovo"},{"product":"yangtian_wf_h81_pci_firmware","vendor":"lenovo"},{"product":"yangtian_ws_h81_firmware","vendor":"lenovo"},{"product":"yangtian_ytm6900e-00_firmware","vendor":"lenovo"},{"product":"yoga530-14ikb_firmware","vendor":"lenovo"},{"product":"yoga_11e_3rd_gen_firmware","vendor":"lenovo"},{"product":"yoga_11e_4th_gen_firmware","vendor":"lenovo"},{"product":"yoga_520-14ikb_firmware","vendor":"lenovo"},{"product":"yoga_730-13ikb_firmware","vendor":"lenovo"},{"product":"yoga_730-13iwl_firmware","vendor":"lenovo"},{"product":"yoga_730-15ikb_firmware","vendor":"lenovo"},{"product":"yoga_730-15iwl_firmware","vendor":"lenovo"},{"product":"yoga_s730-13iwl_firmware","vendor":"lenovo"},{"product":"yoga_s940-14iwl_firmware","vendor":"lenovo"},{"product":"yogo_a940-27icb_firmware","vendor":"lenovo"},{"product":"yta8900f_firmware","vendor":"lenovo"},{"product":"zhaoyang_e43-80_kbl_firmware","vendor":"lenovo"},{"product":"zhaoyang_e53-80_firmware","vendor":"lenovo"},{"product":"zhaoyang_k42-80_firmware","vendor":"lenovo"}],"cvss":{"score":6.4,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"cwes":[],"description":"A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Code injection in ThinkPad","id":"CVE-2019-6172","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"code_injection","year":"2019"},"n_packages":0,"n_references":1,"next":{"headline":"Privilege escalation in Installation Packages","id":"CVE-2019-6173"},"packages":[],"prev":{"headline":"Security feature bypass in BIOS","id":"CVE-2019-6171"},"products":["ThinkPad"],"published":"2019-11-12","related":[{"cvss_score":9.8,"headline":"ThinkPad T460p and T470p BIOS Tamper Mechanism","id":"CVE-2019-6188","kev_date_added":null,"published":"2019-11-12"},{"cvss_score":6.4,"headline":"Code injection in ThinkPad","id":"CVE-2019-6170","kev_date_added":null,"published":"2019-11-12"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2024-08-04","vendors":["Lenovo"]},"summary":"Insufficient parameter checking in the Legacy USB driver SMI callback allows arbitrary code execution on Lenovo ThinkPad models.","url":"https://insights.sbomify.com/CVE-2019-6172/"}