CVE-2019-6188: Lenovo 130-14ikb Firmware

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.

Affected products

• Lenovo 130-14ikb Firmware: affected versions not specified
• Lenovo 130-15ikb Firmware: affected versions not specified
• Lenovo 330-14ikb Firmware: affected versions not specified
• Lenovo 330-14ikbr Firmware: affected versions not specified
• Lenovo 330-15ich Firmware: affected versions not specified
• Lenovo 330-15ikb Firmware: affected versions not specified
• Lenovo 330-15ikbr Firmware: affected versions not specified
• Lenovo 330-15ikbr Touch Firmware: affected versions not specified
• Lenovo 330-17ich Firmware: affected versions not specified
• Lenovo 330-17ikb Firmware: affected versions not specified
• Lenovo 330-17ikbr Firmware: affected versions not specified
• Lenovo 330c-14ikb Firmware: affected versions not specified
• Lenovo 330c-15ikb Firmware: affected versions not specified
• Lenovo 330c-15ikbr Firmware: affected versions not specified
• Lenovo 340c-15ikb Firmware: affected versions not specified
• Lenovo 340c-15iwl Firmware: affected versions not specified
• Lenovo 510-15ikl Firmware: affected versions not specified
• Lenovo 510s-08ikl Firmware: affected versions not specified
• Lenovo 530s-14ikb Firmware: affected versions not specified
• Lenovo 530s-14iwl Firmware: affected versions not specified
• Lenovo 530s-15ikb Firmware: affected versions not specified
• Lenovo 530s-15iwl Firmware: affected versions not specified
• Lenovo 63 Firmware: affected versions not specified
• Lenovo 720s-14ikbr Firmware: affected versions not specified
• Lenovo 720s-15ikb Firmware: affected versions not specified
• and 367 more

Published 2019-11-12. Last modified 2026-06-17.