MediumCVE-2019-10724

    Lenovo 100e 2nd Gen Firmware: security vulnerability (CVE-2019-10724)

    Published Sources: CVE.org

    What is affected, what to do

    There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520T_Z370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642, AIO510-23ISH 6.0.1.8642, AIO520-22IKL 6.0.1.8642, AIO520-22IKU 6.0.1.8642, AIO520-24IKL 6.0.1.8642, AIO520-24IKU 6.0.1.8642, AIO520-27IKL 6.0.1.8642, AIO720-24IKB 6.0.1.8642, IdeaCentre 520S-23IKU 6.0.1.8642, ThinkCentre M700z 6.0.1.8642, ThinkCentre M800z 6.0.1.8642, ThinkCentre M810z 6.0.1.8642, ThinkCentre M818z 6.0.1.8642, ThinkCentre M900Z 6.0.1.8642, ThinkCentre M910z 6.0.1.8642, V410z(YT S4250) 6.0.1.8642, 330-14IKBR Win10:6.0.1.8652, 330-15IKBR Win10:6.0.1.8652, 330-15IKBR (Brazil) Win10:6.0.1.8652, 330-15IKBR Touch Win10:6.0.1.8652, 330-17IKBR Win10:6.0.1.8652, YOGA 730-13IKB Win10:6.0.1.8644, YOGA 730-15IKB Win10:6.0.1.8644, ThinkPad L560 6.0.1.8644 and 6.0.1.8652, ThinkPad L570 6.0.1.8644 and 6.0.1.8652, ThinkPad P50 6.0.1.8642, ThinkPad P50s 6.0.1.8642, ThinkPad P51s (20Jx, 20Kx) 6.0.1.8642, ThinkPad P51s (20Hx) 6.0.1.8642, ThinkPad P52s 6.0.1.8642, ThinkPad P70 6.0.1.8642, ThinkPad T25 6.0.1.8642, ThinkPad T460s 6.0.1.8642, ThinkPad T470 6.0.1.8642, ThinkPad T470s 6.0.1.8642, ThinkPad T480 6.0.1.8642, ThinkPad T480s 6.0.1.8642, ThinkPad T560 6.0.1.8642, ThinkPad T570 6.0.1.8642, ThinkPad T580 6.0.1.8642, ThinkPad X1 Carbon 8.66.76.72 and 8.66.68.54, ThinkPad X1 Carbon 6th 6.0.1.8642, ThinkPad X1 Carbon, X1 Yoga 8.66.62.92 and 8.66.62.54, ThinkPad X1 Tablet (20Gx) 6.0.1.8642, ThinkPad X1 Tablet (20Jx) 6.0.1.8642, ThinkPad X1 Tablet Gen 3 6.0.1.8642, ThinkPad X1 Yoga (20Jx) 8.66.88.60, ThinkPad X1 Yoga 3rd 6.0.1.8642, ThinkPad X280 6.0.1.8642, ThinkPad Yoga 260, S1 8.66.62.92 and 8.66.62.54.

    Update Lenovo Legion Y520t Z370 Firmware to version 6.0.1.8642, Lenovo AIO310-20IAP Firmware to version 6.0.1.8642, Lenovo AIO510-22ISH Firmware to version 6.0.1.8642.

    Affected
    • Lenovo Legion Y520t Z370 Firmware lt *..6.0.1.8642
    • Lenovo AIO310-20IAP Firmware lt *..6.0.1.8642
    • Lenovo AIO510-22ISH Firmware lt *..6.0.1.8642
    • Lenovo AIO510-23ISH Firmware lt *..6.0.1.8642
    • Lenovo Aio520-22ikl Firmware lt *..6.0.1.8642
    • Lenovo AIO520-22IKU Firmware lt *..6.0.1.8642
    • Lenovo Aio520-24ikl Firmware lt *..6.0.1.8642
    • Lenovo AIO520-24IKU Firmware lt *..6.0.1.8642
    • Lenovo Aio520-27ikl Firmware lt *..6.0.1.8642
    • Lenovo AIO720-24IKB Firmware lt *..6.0.1.8642
    • Lenovo Ideacentre 520s-23iku Firmware lt *..6.0.1.8642
    • Lenovo ThinkCentre M700z Firmware lt *..6.0.1.8642
    • Lenovo ThinkCentre M800z Firmware lt *..6.0.1.8642
    • Lenovo ThinkCentre M810z Firmware lt *..6.0.1.8642
    • Lenovo ThinkCentre M818z Firmware lt *..6.0.1.8642
    • Lenovo ThinkCentre M900z Firmware lt *..6.0.1.8642
    • Lenovo ThinkCentre M910z Firmware lt *..6.0.1.8642
    • Lenovo V410z (YT S4250) Firmware lt *..6.0.1.8642
    • Lenovo 330-14IKBR Firmware lt *..6.0.1.8652
    • Lenovo 330-15IKBR Firmware lt *..6.0.1.8652
    • Lenovo 330-15IKBR Touch Firmware lt *..6.0.1.8652
    • Lenovo 330-17IKBR Firmware lt *..6.0.1.8652
    • Lenovo Yoga 730-13IKB Firmware lt *..6.0.1.8644
    • Lenovo Yoga 730-15IKB Firmware lt *..6.0.1.8644
    • Lenovo ThinkPad L560 Firmware lt *..6.0.1.8644
    • Lenovo ThinkPad L570 Firmware lt *..6.0.1.8644
    • Lenovo ThinkPad P50 Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad P50s Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad P51s Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad P52s Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad P70 Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad T25 Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad T460s Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad T470 Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad T470s Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad T480 Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad T480s Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad T560 Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad T570 Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad T580 Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad X1 Carbon Firmware lt *..8.66.76.72
    • Lenovo ThinkPad X1 Yoga Firmware lt *..8.66.62.92
    • Lenovo ThinkPad X1 Tablet Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad X1 Yoga 3rd Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad X280 Firmware lt *..6.0.1.8642
    • Lenovo ThinkPad Yoga 260 Firmware lt *..8.66.62.92
    • Lenovo ThinkPad Yoga S1 Firmware lt *..8.66.62.92
    Fixed in
    • Lenovo Legion Y520t Z370 Firmware 6.0.1.8642
    • Lenovo AIO310-20IAP Firmware 6.0.1.8642
    • Lenovo AIO510-22ISH Firmware 6.0.1.8642
    • Lenovo AIO510-23ISH Firmware 6.0.1.8642
    • Lenovo Aio520-22ikl Firmware 6.0.1.8642
    • Lenovo AIO520-22IKU Firmware 6.0.1.8642
    • Lenovo Aio520-24ikl Firmware 6.0.1.8642
    • Lenovo AIO520-24IKU Firmware 6.0.1.8642
    • Lenovo Aio520-27ikl Firmware 6.0.1.8642
    • Lenovo AIO720-24IKB Firmware 6.0.1.8642
    • Lenovo Ideacentre 520s-23iku Firmware 6.0.1.8642
    • Lenovo ThinkCentre M700z Firmware 6.0.1.8642
    • Lenovo ThinkCentre M800z Firmware 6.0.1.8642
    • Lenovo ThinkCentre M810z Firmware 6.0.1.8642
    • Lenovo ThinkCentre M818z Firmware 6.0.1.8642
    • Lenovo ThinkCentre M900z Firmware 6.0.1.8642
    • Lenovo ThinkCentre M910z Firmware 6.0.1.8642
    • Lenovo V410z (YT S4250) Firmware 6.0.1.8642
    • Lenovo 330-14IKBR Firmware 6.0.1.8652
    • Lenovo 330-15IKBR Firmware 6.0.1.8652
    • Lenovo 330-15IKBR Touch Firmware 6.0.1.8652
    • Lenovo 330-17IKBR Firmware 6.0.1.8652
    • Lenovo Yoga 730-13IKB Firmware 6.0.1.8644
    • Lenovo Yoga 730-15IKB Firmware 6.0.1.8644
    • Lenovo ThinkPad L560 Firmware 6.0.1.8644
    • Lenovo ThinkPad L570 Firmware 6.0.1.8644
    • Lenovo ThinkPad P50 Firmware 6.0.1.8642
    • Lenovo ThinkPad P50s Firmware 6.0.1.8642
    • Lenovo ThinkPad P51s Firmware 6.0.1.8642
    • Lenovo ThinkPad P52s Firmware 6.0.1.8642
    • Lenovo ThinkPad P70 Firmware 6.0.1.8642
    • Lenovo ThinkPad T25 Firmware 6.0.1.8642
    • Lenovo ThinkPad T460s Firmware 6.0.1.8642
    • Lenovo ThinkPad T470 Firmware 6.0.1.8642
    • Lenovo ThinkPad T470s Firmware 6.0.1.8642
    • Lenovo ThinkPad T480 Firmware 6.0.1.8642
    • Lenovo ThinkPad T480s Firmware 6.0.1.8642
    • Lenovo ThinkPad T560 Firmware 6.0.1.8642
    • Lenovo ThinkPad T570 Firmware 6.0.1.8642
    • Lenovo ThinkPad T580 Firmware 6.0.1.8642
    • Lenovo ThinkPad X1 Carbon Firmware 8.66.76.72
    • Lenovo ThinkPad X1 Yoga Firmware 8.66.62.92
    • Lenovo ThinkPad X1 Tablet Firmware 6.0.1.8642
    • Lenovo ThinkPad X1 Yoga 3rd Firmware 6.0.1.8642
    • Lenovo ThinkPad X280 Firmware 6.0.1.8642
    • Lenovo ThinkPad Yoga 260 Firmware 8.66.62.92
    • Lenovo ThinkPad Yoga S1 Firmware 8.66.62.92

    Not sure whether and how you are affected? Ask a question about this vulnerability

    Metrics

    6.5

    Priority

    XIEM Effective CVSS: highest available CVSS rating from NVD and vendor data.

    Source: NVD, CVSS v3

    6.5

    CVSS v3

    Severity Medium on the scale from 0 to 10.

    Source: CVE.org

    1.2 %

    EPSS score

    Moderate — model estimates 1-10% exploitation likelihood.

    Source: FIRST EPSS, percentile 68.6

    Show all metrics
    Severity
    Medium
    Priority (0–325)

    The priority score is a consolidated metric that condenses several individual signals into a single, action-guiding ranking: technical severity (CVSS), exploitation likelihood (EPSS), known-exploited status (KEV) and the context of the affected asset. The aim is to answer the only truly important question in vulnerability management: what first?

    Read in glossary
    70.17 Methodology
    Exploit maturity

    An exploit is code or a technique that specifically uses a concrete vulnerability to force unintended behaviour — such as executing code or escalating privileges. It is the tool that turns a theoretical flaw into a practical attack.

    Read in glossary
    no public PoC known
    XIEM Effective CVSS

    XIEM® is the tiered managed-security operating model from NEOSEC and a registered trademark of NEOSEC GmbH. It extends classic SIEM — the central collection, normalisation and correlation of security-relevant events — with endpoint forensics, network visibility and deception technology, and consolidates them into three building tiers: Sentry, Orchestrate and Command.

    Read in glossary
    6.5 Methodology
    CVSS v3

    CVSS is the globally established, open standard for assessing the technical severity of a vulnerability on a scale from 0 to 10. It describes how easily a flaw can be exploited and what damage it can cause — but not how likely its actual exploitation is. CVSS and the complementary EPSS deliberately answer different questions.

    Read in glossary
    6.5
    EPSS score

    The EPSS score is the absolute model output for an individual vulnerability: the estimated probability of real-world exploitation within the next 30 days, expressed as a value between 0 and 1 (i.e. 0 % to 100 %). A score of 0.42 means „the model estimates a 42 % chance of real-world exploitation within 30 days“.

    Read in glossary
    1.2 %
    Moderate — model estimates 1-10% exploitation likelihood.
    EPSS percentile

    The EPSS percentile is the relative position of a vulnerability within all EPSS-scored CVEs, expressed as a value between 0 and 1. A percentile of 0.90 means „this CVE has a higher EPSS score than 90 % of all other scored CVEs“. Unlike the EPSS score, it is not a probability — but a positioning within a ranking.

    Read in glossary
    68.6
    High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
    KEV status

    The KEV catalogue is a list maintained by the US authority CISA of vulnerabilities for which active exploitation in the wild has been confirmed. It answers not the question „how severe?“ but „is it already being attacked?“ — thereby sharply prioritising patching.

    Read in glossary
    —
    Published

    Detection rules

    No NEOSEC detection rule is available for this vulnerability yet.

    Classification under NIS2 and CRA

    Rule-based classification from exploitation status and severity. It does not replace a case-by-case assessment.

    NIS2

    NIS2 is EU Directive (EU) 2022/2555 to raise the level of cybersecurity across the Union. It substantially broadens obligations compared with the first NIS directive: more sectors, mandatory risk management, staged reporting duties and personal accountability of senior management.

    Read in glossary
    Handle the vulnerability in regular vulnerability handling under Art. 21(2)(e) NIS2.
    CRA

    The CRA is EU Regulation (EU) 2024/2847 setting horizontal cybersecurity requirements for „products with digital elements“ — from industrial controllers and software to connected consumer devices. For the first time manufacturers must ensure security across the entire product lifecycle, handle vulnerabilities and provide security updates.

    Read in glossary
    From 11.12.2027, Annex I Part II CRA requires manufacturers of affected products with digital elements to handle vulnerabilities without delay and provide security updates.
    ISO/IEC 27001

    ISO/IEC 27001 is the internationally leading standard for an information security management system (ISMS). It describes a risk-based, process-oriented framework to systematically plan, implement, review and improve information security.

    Read in glossary
    Control A.8.8, management of technical vulnerabilities: assess relevance to your systems, plan remediation and keep evidence.

    Description

    There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520T_Z370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642, AIO510-23ISH 6.0.1.8642, AIO520-22IKL 6.0.1.8642, AIO520-22IKU 6.0.1.8642, AIO520-24IKL 6.0.1.8642, AIO520-24IKU 6.0.1.8642, AIO520-27IKL 6.0.1.8642, AIO720-24IKB 6.0.1.8642, IdeaCentre 520S-23IKU 6.0.1.8642, ThinkCentre M700z 6.0.1.8642, ThinkCentre M800z 6.0.1.8642, ThinkCentre M810z 6.0.1.8642, ThinkCentre M818z 6.0.1.8642, ThinkCentre M900Z 6.0.1.8642, ThinkCentre M910z 6.0.1.8642, V410z(YT S4250) 6.0.1.8642, 330-14IKBR Win10:6.0.1.8652, 330-15IKBR Win10:6.0.1.8652, 330-15IKBR (Brazil) Win10:6.0.1.8652, 330-15IKBR Touch Win10:6.0.1.8652, 330-17IKBR Win10:6.0.1.8652, YOGA 730-13IKB Win10:6.0.1.8644, YOGA 730-15IKB Win10:6.0.1.8644, ThinkPad L560 6.0.1.8644 and 6.0.1.8652, ThinkPad L570 6.0.1.8644 and 6.0.1.8652, ThinkPad P50 6.0.1.8642, ThinkPad P50s 6.0.1.8642, ThinkPad P51s (20Jx, 20Kx) 6.0.1.8642, ThinkPad P51s (20Hx) 6.0.1.8642, ThinkPad P52s 6.0.1.8642, ThinkPad P70 6.0.1.8642, ThinkPad T25 6.0.1.8642, ThinkPad T460s 6.0.1.8642, ThinkPad T470 6.0.1.8642, ThinkPad T470s 6.0.1.8642, ThinkPad T480 6.0.1.8642, ThinkPad T480s 6.0.1.8642, ThinkPad T560 6.0.1.8642, ThinkPad T570 6.0.1.8642, ThinkPad T580 6.0.1.8642, ThinkPad X1 Carbon 8.66.76.72 and 8.66.68.54, ThinkPad X1 Carbon 6th 6.0.1.8642, ThinkPad X1 Carbon, X1 Yoga 8.66.62.92 and 8.66.62.54, ThinkPad X1 Tablet (20Gx) 6.0.1.8642, ThinkPad X1 Tablet (20Jx) 6.0.1.8642, ThinkPad X1 Tablet Gen 3 6.0.1.8642, ThinkPad X1 Yoga (20Jx) 8.66.88.60, ThinkPad X1 Yoga 3rd 6.0.1.8642, ThinkPad X280 6.0.1.8642, ThinkPad Yoga 260, S1 8.66.62.92 and 8.66.62.54.

    Source: NVD (NIST), cvelistv5

    Vendors and products

    Affected operating systems

    Affected operating systems
    Otherlenovo100e_2nd_gen_firmware—
    Otherlenovo300e_2nd_gen_firmware—
    Otherlenovo330-14ikbr_firmware—
    Otherlenovo330-15ikbr_firmware—
    Otherlenovo330-15ikbr_touch_firmware—
    Otherlenovo330-17ikbr_firmware—
    Otherlenovo720s-15ikb_firmware—
    Otherlenovo720s_touch-15ikb_firmware—
    Otherlenovoaio310-20iap_firmware—
    Otherlenovoaio510-22ish_firmware—
    Otherlenovoaio510-23ish_firmware—
    Otherlenovoaio520-22ikl_firmware—
    Otherlenovoaio520-22iku_firmware—
    Otherlenovoaio520-24ikl_firmware—
    Otherlenovoaio520-24iku_firmware—
    Otherlenovoaio520-27ikl_firmware—
    Otherlenovoaio720-24ikb_firmware—
    Otherlenovob330-15ikbr_firmware—
    Otherlenovoe43-80_firmware—
    Otherlenovoe53-80_firmware—
    Otherlenovoflex_5-1470\(r\)_firmware—
    Otherlenovoflex_5-1570\(r\)_firmware—
    Otherlenovoideacentre_520s-23iku_firmware—
    Otherlenovok42-80_firmware—

    References & sources

    Embed badge

    Show the severity and KEV status of this vulnerability on your site – with a link back here. The image is updated hourly.

    Badge preview for CVE-2019-10724
    <a href="https://intel.neosec.eu/en/cve/CVE-2019-10724"><img src="https://intel.neosec.eu/badge/cve/CVE-2019-10724.svg?lang=en" alt="CVE-2019-10724 – NEOSEC Intel" height="20"></a>