CVE-2019-6188: ThinkPad T460p and T470p BIOS Tamper Mechanism

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-11-12 · updated 2026-06-17

Description

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.

Affected products

Lenovo 130-14Ikb Firmware: all versions
Lenovo 130-15Ikb Firmware: all versions
Lenovo 330-14Ikb Firmware: all versions
Lenovo 330-14Ikbr Firmware: all versions
Lenovo 330-15Ich Firmware: all versions
Lenovo 330-15Ikb Firmware: all versions
Lenovo 330-15Ikbr Firmware: all versions
Lenovo 330-15Ikbr Touch Firmware: all versions
Lenovo 330-17Ich Firmware: all versions
Lenovo 330-17Ikb Firmware: all versions
Lenovo 330-17Ikbr Firmware: all versions
Lenovo 330C-14Ikb Firmware: all versions
Lenovo 330C-15Ikb Firmware: all versions
Lenovo 330C-15Ikbr Firmware: all versions
Lenovo 340C-15Ikb Firmware: all versions
Lenovo 340C-15Iwl Firmware: all versions
Lenovo 510-15Ikl Firmware: all versions
Lenovo 510S-08Ikl Firmware: all versions
Lenovo 530S-14Ikb Firmware: all versions
Lenovo 530S-14Iwl Firmware: all versions
Lenovo 530S-15Ikb Firmware: all versions
Lenovo 530S-15Iwl Firmware: all versions
Lenovo 63 Firmware: all versions
Lenovo 720S-14Ikbr Firmware: all versions
Lenovo 720S-15Ikb Firmware: all versions
Lenovo 720S Touch-15Ikb Firmware: all versions
Lenovo 730S-13Iwl Firmware: all versions
Lenovo A340-22 Iwl Firmware: all versions
Lenovo A340-22Ast Firmware: all versions
Lenovo A340-22Icb Firmware: all versions

References

Get alerted when CVE-2019-6188 or the next vulnerability affects your stack