CVE-2019-6188 json
ThinkPad T460p and T470p BIOS Tamper Mechanism
published 2019-11-12 6 y ago modified 2026-06-17 4 mo ago also EUVD-2019-15755
- cvss
- 9.8
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.3%
- EPSS 1.3% chance of exploitation in 30 days, percentile 71%
- public exploits
- 0
- none known
Summary
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.
Patch / fix
- Lenovo ThinkPad T470p R0FET50W
- Lenovo ThinkPad T460p R07ET90W
Exploit prediction
1.32% chance of exploitation in the next 30 days, higher than 71% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- Lenovo ThinkPad T470p
- Lenovo ThinkPad T460p
References
-
support.lenovo.com
/us/en/product_security/LEN-27714
vendor-advisory
Sources
- CVE List CVE-2019-6188
- NVD CVE-2019-6188
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.