CVE-2019-6188

ThinkPad T460p and T470p BIOS Tamper Mechanism

published November 12, 2019

CVSS
—
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky oversight in Lenovo ThinkPads! The BIOS tamper detection mechanism didn't trigger in certain models, leaving the door ajar for unauthorized access. 🔓 Think of it like a security guard who falls asleep at his post — he's supposed to catch anyone trying to sneak in, but if he's out cold, anyone can walk right past! This means a determined attacker could gain access to the BIOS, potentially altering crucial system settings or installing malicious software. It's like giving a burglar the keys to your house and allowing them to rearrange everything while you’re away!

Put simply

Think of it like a security guard who falls asleep at his post — he's supposed to catch anyone trying to sneak in, but if he's out cold, anyone can walk right past! The vulnerability lies in the BIOS of Lenovo ThinkPad T460p and T470p models, where the tamper detection feature fails to activate, allowing unauthorized access to sensitive system configurations.

What to do

This means a determined attacker could gain access to the BIOS, potentially altering crucial system settings or installing malicious software. It's like giving a burglar the keys to your house and allowing them to rearrange everything while you’re away! Check if your Lenovo ThinkPad is running BIOS versions up to R07ET90W (T460p) or R0FET50W (T470p), and update to the latest version immediately. Additionally, consider enabling any security features that are available to bolster your defenses! You've got this! With a quick update, you'll secure your system like a pro! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01323 · 70.7th percentile
Published
2019-11-12T20:40Z
EPSS history
Timeline
  • 12 NOV 20:40Z
    ThinkPad T460p and T470p BIOS Tamper Mechanism
    cvelistv5