CVE-2019-6192 EXPLOIT
4.4
MEDIUM · CVSS 3.1 · EPSS 1.7% (pctl 77)
Patch early
A public exploit exists.
Description
A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service.
Scoring
| CVSS | 4.4 (MEDIUM, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
| EPSS | 1.74% — more likely to be exploited than 77% of all CVEs |
| Weakness | CWE-120 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2019-12-10 |
| Last modified | 2026-06-17 |
Affected (40)
| Vendor | Product |
|---|---|
| lenovo | power management driver |
| lenovo | thinkpad 13 gen 2 |
| lenovo | thinkpad 25 |
| lenovo | thinkpad a275 |
| lenovo | thinkpad a285 |
| lenovo | thinkpad a475 |
| lenovo | thinkpad a485 |
| lenovo | thinkpad e14 |
| lenovo | thinkpad e15 |
| lenovo | thinkpad e470 |
| lenovo | thinkpad e470c |
| lenovo | thinkpad e475 |
| lenovo | thinkpad e480 |
| lenovo | thinkpad e490 |
| lenovo | thinkpad e495 |
| lenovo | thinkpad e570 |
| lenovo | thinkpad e570c |
| lenovo | thinkpad e575 |
| lenovo | thinkpad e580 |
| lenovo | thinkpad e590 |
| lenovo | thinkpad e595 |
| lenovo | thinkpad l13 |
| lenovo | thinkpad l13 yoga |
| lenovo | thinkpad l380 |
| lenovo | thinkpad l380 yoga |
| lenovo | thinkpad l390 |
| lenovo | thinkpad l390 yoga |
| lenovo | thinkpad l470 |
| lenovo | thinkpad l480 |
| lenovo | thinkpad l490 |
| lenovo | thinkpad l570 |
| lenovo | thinkpad l580 |
| lenovo | thinkpad l590 |
| lenovo | thinkpad p1 |
| lenovo | thinkpad p1 gen 2 |
| lenovo | thinkpad p43s |
| lenovo | thinkpad p51 |
| lenovo | thinkpad p51s |
| lenovo | thinkpad p52 |
| lenovo | thinkpad p52s |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service (PoC) | 2019-12-12 |
References
→ the Explorer · watch your stack · NVD