CVE-2019-6149
First published: Thu Mar 14 2019(Updated: )
An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges.
Credit: psirt@lenovo.com psirt@lenovo.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Lenovo Dynamic Power Reduction | <2.2.2.0 | |
| Lenovo ThinkPad X1 Carbon | ||
| All of | ||
| Lenovo Dynamic Power Reduction | <2.2.2.0 | |
| Lenovo ThinkPad X1 Carbon |
Remedy
Update Dynamic Power Reduction Utility to version 2.2.2.0.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-6149?
CVE-2019-6149 is an unquoted search path vulnerability identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0.
What is the severity of CVE-2019-6149?
CVE-2019-6149 has a severity value of 6.7, which is considered high.
How does CVE-2019-6149 affect Lenovo Dynamic Power Reduction Utility?
CVE-2019-6149 could allow a malicious user with local access to execute code with administrative privileges in Lenovo Dynamic Power Reduction Utility versions prior to 2.2.2.0.
Is Lenovo ThinkPad X1 Carbon affected by CVE-2019-6149?
No, Lenovo ThinkPad X1 Carbon is not affected by CVE-2019-6149.
How can I fix CVE-2019-6149?
Update Lenovo Dynamic Power Reduction Utility to version 2.2.2.0 or later to fix the CVE-2019-6149 vulnerability.
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/remedy
- agent/description
- agent/first-publish-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/lenovo
- canonical/lenovo dynamic power reduction
- canonical/lenovo thinkpad x1 carbon