What’s Vulnerable › Vulnerabilities

CVE-2019-6149

• Severity: medium (CVSS 6.7 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-03-18 · updated 2026-06-17
• Weakness: CWE-428

Description

An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges.

Affected products

• Lenovo Dynamic Power Reduction: before 2.2.2.0 — fixed in 2.2.2.0

How to fix

Upgrade to a fixed version: Lenovo Dynamic Power Reduction 2.2.2.0. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/107438
• https://support.lenovo.com/solutions/LEN-25674
• http://www.securityfocus.com/bid/107438
• https://support.lenovo.com/solutions/LEN-25674

Get alerted when CVE-2019-6149 or the next vulnerability affects your stack