CVE-2019-6183 Denial of service in Energy Management driver
A denial of service vulnerability in the Lenovo Energy Management Driver for Windows 10 allows attackers to cause a blue screen error.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-6183?
CVE-2019-6183 is a high-severity denial of service vulnerability in Lenovo Energy Management driver, published on 10 Dec 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A denial of service vulnerability has been reported in Lenovo Energy Management Driver for Windows 10 versions prior to 15.11.29.7 that could cause systems to experience a blue screen error. Lenovo Energy Management is a client utility. Lenovo XClarity Energy Manager is not affected.
Which versions are affected by CVE-2019-6183?
It affects 1 product.
Products include Lenovo Energy Management.
How do I fix CVE-2019-6183?
No fix has been published for CVE-2019-6183 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-6183 being exploited?
There is no known exploitation of CVE-2019-6183 in the wild and no public exploit code.
Sources
Also known as GHSA-3vv5-594j-w9p4.