CVE-2019-6163 - Vulnerability Details

Vendors	Products
Lenovo	B Series C100 C200 E Series J100 J105 J110 J115 J200 J200p J205 K Series N100 N200 S200 S200p S205 System Update Thinkcentre Thinkpad Thinkstation V100 V200 V Series

Link	Providers
https://support.lenovo.com/solutions/LEN-27348

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "System Update", "vendor": "Lenovo", "versions": [{"lessThan": "5.07.0084", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Lenovo would like to thank Eran Shimony at CyberArk Labs for reporting this issue."}], "datePublic": "2019-06-25T00:00:00", "descriptions": [{"lang": "en", "value": "A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "privilege escalation", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-09-13T18:56:07", "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://support.lenovo.com/solutions/LEN-27348"}], "solutions": [{"lang": "en", "value": "Upgrade to the Lenovo System Update version 5.07.0084 (or newer)."}], "source": {"advisory": "LEN-27348", "discovery": "UNKNOWN"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@lenovo.com", "DATE_PUBLIC": "2019-06-25T16:00:00.000Z", "ID": "CVE-2019-6163", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "System Update", "version": {"version_data": [{"affected": "<", "version_affected": "<", "version_value": "5.07.0084"}]}}]}, "vendor_name": "Lenovo"}]}}, "credit": [{"lang": "eng", "value": "Lenovo would like to thank Eran Shimony at CyberArk Labs for reporting this issue."}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations."}]}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "privilege escalation"}]}]}, "references": {"reference_data": [{"name": "https://support.lenovo.com/solutions/LEN-27348", "refsource": "MISC", "url": "https://support.lenovo.com/solutions/LEN-27348"}]}, "solution": [{"lang": "en", "value": "Upgrade to the Lenovo System Update version 5.07.0084 (or newer)."}], "source": {"advisory": "LEN-27348", "discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T20:16:23.827Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://support.lenovo.com/solutions/LEN-27348"}]}]}, "cveMetadata": {"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "assignerShortName": "lenovo", "cveId": "CVE-2019-6163", "datePublished": "2019-06-26T14:12:34.696699Z", "dateReserved": "2019-01-11T00:00:00", "dateUpdated": "2024-09-16T23:41:01.176Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : System Update (string)

vendor : Lenovo (string)

versions : [ »

0 : { »

lessThan : 5.07.0084 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

]

credits : [ »

0 : { »

lang : en (string)

value : Lenovo would like to thank Eran Shimony at CyberArk Labs for reporting this issue. (string)

}

]

datePublic : 2019-06-25T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations. (string)

}

]

metrics : [ »

0 : { »

cvssV3_0 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 5.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.0 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : privilege escalation (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2019-09-13T18:56:07 (string)

orgId : da227ddf-6e25-4b41-b023-0f976dcaca4b (string)

shortName : lenovo (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://support.lenovo.com/solutions/LEN-27348 (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

value : Upgrade to the Lenovo System Update version 5.07.0084 (or newer). (string)

}

]

source : { »

advisory : LEN-27348 (string)

discovery : UNKNOWN (string)

}

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@lenovo.com (string)

DATE_PUBLIC : 2019-06-25T16:00:00.000Z (string)

ID : CVE-2019-6163 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : System Update (string)

version : { »

version_data : [ »

0 : { »

affected : < (string)

version_affected : < (string)

version_value : 5.07.0084 (string)

}

]

}

]

}

vendor_name : Lenovo (string)

}

]

}

credit : [ »

0 : { »

lang : eng (string)

value : Lenovo would like to thank Eran Shimony at CyberArk Labs for reporting this issue. (string)

}

]

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations. (string)

}

]

}

impact : { »

cvss : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 5.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.0 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : privilege escalation (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://support.lenovo.com/solutions/LEN-27348 (string)

refsource : MISC (string)

url : https://support.lenovo.com/solutions/LEN-27348 (string)

}

]

}

solution : [ »

0 : { »

lang : en (string)

value : Upgrade to the Lenovo System Update version 5.07.0084 (or newer). (string)

}

]

source : { »

advisory : LEN-27348 (string)

discovery : UNKNOWN (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T20:16:23.827Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://support.lenovo.com/solutions/LEN-27348 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : da227ddf-6e25-4b41-b023-0f976dcaca4b (string)

assignerShortName : lenovo (string)

cveId : CVE-2019-6163 (string)

datePublished : 2019-06-26T14:12:34.696699Z (string)

dateReserved : 2019-01-11T00:00:00 (string)

dateUpdated : 2024-09-16T23:41:01.176Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:lenovo:system_update:*:*:*:*:*:*:*:*", "matchCriteriaId": "425E8D8C-9D57-421C-B9D8-91570342F37C", "versionEndExcluding": "5.07.0084", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:b_series:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF35A407-04DB-4484-8C92-44E9CA35784B", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:c100:-:*:*:*:*:*:*:*", "matchCriteriaId": "2679679A-86BF-4346-B49A-1CF59066A3C7", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:c200:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF289431-1E47-4AAE-9664-CB70EBDBE835", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:e_series:-:*:*:*:*:*:*:*", "matchCriteriaId": "20A22C95-1285-46B8-A9BB-8BE1D7824C41", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:j100:-:*:*:*:*:*:*:*", "matchCriteriaId": "59F2C7AD-9AC4-4582-952B-561D86C98BB5", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:j105:-:*:*:*:*:*:*:*", "matchCriteriaId": "0B7C3A94-C947-47CF-94EF-A36D51E568A9", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:j110:-:*:*:*:*:*:*:*", "matchCriteriaId": "72664BC5-3936-455A-AF94-96686CD4E3B4", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:j115:-:*:*:*:*:*:*:*", "matchCriteriaId": "1B111141-88BD-46D8-9FE1-2D72CD9D9383", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:j200:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CAC20A5-7F62-4BEF-A489-B14EC1AF24C0", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:j200p:-:*:*:*:*:*:*:*", "matchCriteriaId": "165777CC-AEA0-4AF6-813A-0BCF19C011B7", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:j205:-:*:*:*:*:*:*:*", "matchCriteriaId": "56E48F87-3FAE-4AFB-B691-F60CAA0D264C", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:k_series:-:*:*:*:*:*:*:*", "matchCriteriaId": "50C2A201-9452-4753-AB38-29F7B53E3C4C", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:n100:-:*:*:*:*:*:*:*", "matchCriteriaId": "969C2FCE-A6C7-4D61-8ECC-CAE595829EAD", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:n200:-:*:*:*:*:*:*:*", "matchCriteriaId": "414F3F97-0D2C-4B3A-B5AB-59B308652FD7", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:s200:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CD73A62-B205-4D80-9516-F1603198E0E8", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:s200p:-:*:*:*:*:*:*:*", "matchCriteriaId": "C10BB43C-D47F-4CA1-B69C-CAB260D58EE5", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:s205:-:*:*:*:*:*:*:*", "matchCriteriaId": "25405CB9-280E-4EDD-A2AE-3869F781BE66", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:thinkcentre:-:*:*:*:*:*:*:*", "matchCriteriaId": "A0E8DBDC-AA46-4DF0-B557-275DB8CF3CD6", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:thinkpad:-:*:*:*:*:*:*:*", "matchCriteriaId": "E7BD24F8-2446-4657-A1A1-B6DDF52D2250", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:thinkstation:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A7A1F41-8BA5-4A8B-80DA-24A4C43FCF21", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:v_series:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4199C75-BB7A-4F1B-911B-28FCB859474E", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:v100:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F32E145-62E2-4A52-8E48-C5CD9CBFB1C5", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:v200:-:*:*:*:*:*:*:*", "matchCriteriaId": "547B731E-658D-4312-BDC2-22A3F584833E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations."}, {"lang": "es", "value": "Se comunic\u00f3 una vulnerabilidad de denegaci\u00f3n de servicio en Lenovo System Update en versiones anteriores a la 5.07.0084 que podr\u00eda permitir que los archivos de registro de servicio sean escritos en ubicaciones no standard."}], "id": "CVE-2019-6163", "lastModified": "2024-11-21T04:46:03.560", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "psirt@lenovo.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-06-26T14:15:10.107", "references": [{"source": "psirt@lenovo.com", "tags": ["Vendor Advisory"], "url": "https://support.lenovo.com/solutions/LEN-27348"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.lenovo.com/solutions/LEN-27348"}], "sourceIdentifier": "psirt@lenovo.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-404"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:lenovo:system_update:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 425E8D8C-9D57-421C-B9D8-91570342F37C (string)

versionEndExcluding : 5.07.0084 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:lenovo:b_series:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EF35A407-04DB-4484-8C92-44E9CA35784B (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:lenovo:c100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2679679A-86BF-4346-B49A-1CF59066A3C7 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:lenovo:c200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BF289431-1E47-4AAE-9664-CB70EBDBE835 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:lenovo:e_series:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 20A22C95-1285-46B8-A9BB-8BE1D7824C41 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:lenovo:j100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 59F2C7AD-9AC4-4582-952B-561D86C98BB5 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:lenovo:j105:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0B7C3A94-C947-47CF-94EF-A36D51E568A9 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:lenovo:j110:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 72664BC5-3936-455A-AF94-96686CD4E3B4 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:lenovo:j115:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1B111141-88BD-46D8-9FE1-2D72CD9D9383 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:lenovo:j200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2CAC20A5-7F62-4BEF-A489-B14EC1AF24C0 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:lenovo:j200p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 165777CC-AEA0-4AF6-813A-0BCF19C011B7 (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:lenovo:j205:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 56E48F87-3FAE-4AFB-B691-F60CAA0D264C (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:lenovo:k_series:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 50C2A201-9452-4753-AB38-29F7B53E3C4C (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:lenovo:n100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 969C2FCE-A6C7-4D61-8ECC-CAE595829EAD (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:lenovo:n200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 414F3F97-0D2C-4B3A-B5AB-59B308652FD7 (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:lenovo:s200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8CD73A62-B205-4D80-9516-F1603198E0E8 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:lenovo:s200p:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C10BB43C-D47F-4CA1-B69C-CAB260D58EE5 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:lenovo:s205:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 25405CB9-280E-4EDD-A2AE-3869F781BE66 (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:lenovo:thinkcentre:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A0E8DBDC-AA46-4DF0-B557-275DB8CF3CD6 (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:lenovo:thinkpad:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E7BD24F8-2446-4657-A1A1-B6DDF52D2250 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:lenovo:thinkstation:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8A7A1F41-8BA5-4A8B-80DA-24A4C43FCF21 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:lenovo:v_series:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F4199C75-BB7A-4F1B-911B-28FCB859474E (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:lenovo:v100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3F32E145-62E2-4A52-8E48-C5CD9CBFB1C5 (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:lenovo:v200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 547B731E-658D-4312-BDC2-22A3F584833E (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations. (string)

}

1 : { »

lang : es (string)

value : Se comunicó una vulnerabilidad de denegación de servicio en Lenovo System Update en versiones anteriores a la 5.07.0084 que podría permitir que los archivos de registro de servicio sean escritos en ubicaciones no standard. (string)

}

]

id : CVE-2019-6163 (string)

lastModified : 2024-11-21T04:46:03.560 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 5 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:N/I:N/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 5.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 3.6 (number)

source : psirt@lenovo.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2019-06-26T14:15:10.107 (string)

references : [ »

0 : { »

source : psirt@lenovo.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.lenovo.com/solutions/LEN-27348 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.lenovo.com/solutions/LEN-27348 (string)

}

]

sourceIdentifier : psirt@lenovo.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-404 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object