Lenovo ThinkPad BIOS Firmware privilege escalation

guest · Aug 20, 2019

Lenovo ThinkPad BIOS Firmware privilege escalation
August 19, 2019
https://vuldb.com/?id.140318

A vulnerability was found in Lenovo ThinkPad (affected version not known). It has been rated as critical. Affected by this issue is an unknown part of the component BIOS. The manipulation as part of a Firmware leads to a privilege escalation vulnerability. Using CWE to declare the problem leads to CWE-269. Impacted is confidentiality, integrity, and availability.

The weakness was presented 08/19/2019. This vulnerability is handled as CVE-2019-6171 since 01/11/2019. The exploitation is known to be difficult. Local access is required to approach this attack. A single authentication is necessary for exploitation. The technical details are unknown and an exploit is not available.
Click to expand...

Lenovo: ThinkPad Embedded Controller Update Vulnerability

Mitigation Strategy for Customers (what you should do to protect yourself):
Update to the version of BIOS (or later) described for your system in the product impact section. [...]

Revision History:
Revision Date Description
3 2019-08-13 Updated fix target for some products
2 2019-08-09 Updated Product Impact
1 2019-08-08 Initial release
Click to expand...

Minimalist · Aug 23, 2019

Security gone in 600 seconds: Make-me-admin hole found in Lenovo Windows laptop crapware. Delete it now

Not only has a vulnerability been found in Lenovo Solution Centre (LSC), but the laptop maker fiddled with end-of-life dates to make it seem less important – and is now telling the world it EOL'd the vulnerable monitoring software before its final version was released.
Click to expand...

https://www.theregister.co.uk/2019/08/23/lenovo_solution_centre_cve_2019_6177/

Log in or Sign up

Lenovo ThinkPad BIOS Firmware privilege escalation

guest Guest

Minimalist Registered Member

Log in or Sign up

Lenovo ThinkPad BIOS Firmware privilege escalation

guest Guest

Minimalist Registered Member

Useful Searches