CVE-2019-6170: Lenovo 130-14ikb Firmware

Medium severity, CVSS 6.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.

Affected products

• Lenovo 130-14ikb Firmware: affected versions not specified
• Lenovo 130-15ikb Firmware: affected versions not specified
• Lenovo 330-14ikb Firmware: affected versions not specified
• Lenovo 330-14ikbr Firmware: affected versions not specified
• Lenovo 330-15ich Firmware: affected versions not specified
• Lenovo 330-15ikb Firmware: affected versions not specified
• Lenovo 330-15ikbr Firmware: affected versions not specified
• Lenovo 330-15ikbr Touch Firmware: affected versions not specified
• Lenovo 330-17ich Firmware: affected versions not specified
• Lenovo 330-17ikb Firmware: affected versions not specified
• Lenovo 330-17ikbr Firmware: affected versions not specified
• Lenovo 330c-14ikb Firmware: affected versions not specified
• Lenovo 330c-15ikb Firmware: affected versions not specified
• Lenovo 330c-15ikbr Firmware: affected versions not specified
• Lenovo 340c-15ikb Firmware: affected versions not specified
• Lenovo 340c-15iwl Firmware: affected versions not specified
• Lenovo 510-15ikl Firmware: affected versions not specified
• Lenovo 510s-08ikl Firmware: affected versions not specified
• Lenovo 530s-14ikb Firmware: affected versions not specified
• Lenovo 530s-14iwl Firmware: affected versions not specified
• Lenovo 530s-15ikb Firmware: affected versions not specified
• Lenovo 530s-15iwl Firmware: affected versions not specified
• Lenovo 63 Firmware: affected versions not specified
• Lenovo 720s-14ikbr Firmware: affected versions not specified
• Lenovo 720s-15ikb Firmware: affected versions not specified
• and 367 more

Published 2019-11-12. Last modified 2026-06-17.