CVE & CISA-KEV Catalog

CVE-2019-10724

MEDIUM
6.5
CVSS v3
NVD

Description

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520T_Z370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642, AIO510-23ISH 6.0.1.8642, AIO520-22IKL 6.0.1.8642, AIO520-22IKU 6.0.1.8642, AIO520-24IKL 6.0.1.8642, AIO520-24IKU 6.0.1.8642, AIO520-27IKL 6.0.1.8642, AIO720-24IKB 6.0.1.8642, IdeaCentre 520S-23IKU 6.0.1.8642, ThinkCentre M700z 6.0.1.8642, ThinkCentre M800z 6.0.1.8642, ThinkCentre M810z 6.0.1.8642, ThinkCentre M818z 6.0.1.8642, ThinkCentre M900Z 6.0.1.8642, ThinkCentre M910z 6.0.1.8642, V410z(YT S4250) 6.0.1.8642, 330-14IKBR Win10:6.0.1.8652, 330-15IKBR Win10:6.0.1.8652, 330-15IKBR (Brazil) Win10:6.0.1.8652, 330-15IKBR Touch Win10:6.0.1.8652, 330-17IKBR Win10:6.0.1.8652, YOGA 730-13IKB Win10:6.0.1.8644, YOGA 730-15IKB Win10:6.0.1.8644, ThinkPad L560 6.0.1.8644 and 6.0.1.8652, ThinkPad L570 6.0.1.8644 and 6.0.1.8652, ThinkPad P50 6.0.1.8642, ThinkPad P50s 6.0.1.8642, ThinkPad P51s (20Jx, 20Kx) 6.0.1.8642, ThinkPad P51s (20Hx) 6.0.1.8642, ThinkPad P52s 6.0.1.8642, ThinkPad P70 6.0.1.8642, ThinkPad T25 6.0.1.8642, ThinkPad T460s 6.0.1.8642, ThinkPad T470 6.0.1.8642, ThinkPad T470s 6.0.1.8642, ThinkPad T480 6.0.1.8642, ThinkPad T480s 6.0.1.8642, ThinkPad T560 6.0.1.8642, ThinkPad T570 6.0.1.8642, ThinkPad T580 6.0.1.8642, ThinkPad X1 Carbon 8.66.76.72 and 8.66.68.54, ThinkPad X1 Carbon 6th 6.0.1.8642, ThinkPad X1 Carbon, X1 Yoga 8.66.62.92 and 8.66.62.54, ThinkPad X1 Tablet (20Gx) 6.0.1.8642, ThinkPad X1 Tablet (20Jx) 6.0.1.8642, ThinkPad X1 Tablet Gen 3 6.0.1.8642, ThinkPad X1 Yoga (20Jx) 8.66.88.60, ThinkPad X1 Yoga 3rd 6.0.1.8642, ThinkPad X280 6.0.1.8642, ThinkPad Yoga 260, S1 8.66.62.92 and 8.66.62.54.

How to fix

Remediation Available
330-14ikbr firmwareNVD
Affected:< 6.0.1.8652Fixed in:6.0.1.8652CVE-2019-10724derived from NVD
330-15ikbr firmwareNVD
Affected:< 6.0.1.8652Fixed in:6.0.1.8652CVE-2019-10724derived from NVD
330-15ikbr touch firmwareNVD
Affected:< 6.0.1.8652Fixed in:6.0.1.8652CVE-2019-10724derived from NVD
330-17ikbr firmwareNVD
Affected:< 6.0.1.8652Fixed in:6.0.1.8652CVE-2019-10724derived from NVD
aio310-20iap firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
aio510-22ish firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
aio510-23ish firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
aio520-22ikl firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
aio520-22iku firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
aio520-24ikl firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
aio520-24iku firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
aio520-27ikl firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
aio720-24ikb firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
ideacentre 520s-23iku firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
legion y520t z370 firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkcentre m700z firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkcentre m800z firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkcentre m810z firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkcentre m818z firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkcentre m900z firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkcentre m910z firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad l560 firmwareNVD
Affected:< 6.0.1.8644Fixed in:6.0.1.8644CVE-2019-10724derived from NVD
thinkpad l570 firmwareNVD
Affected:< 6.0.1.8644Fixed in:6.0.1.8644CVE-2019-10724derived from NVD
thinkpad p50 firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad p50s firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad p51s firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad p52s firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad p70 firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad t25 firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad t460s firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad t470 firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad t470s firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad t480 firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad t480s firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad t560 firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad t570 firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad t580 firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad x1 carbon firmwareNVD
Affected:< 8.66.76.72Fixed in:8.66.76.72CVE-2019-10724derived from NVD
thinkpad x1 tablet firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad x1 yoga 3rd firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad x1 yoga firmwareNVD
Affected:< 8.66.62.92Fixed in:8.66.62.92CVE-2019-10724derived from NVD
thinkpad x280 firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
thinkpad yoga 260 firmwareNVD
Affected:< 8.66.62.92Fixed in:8.66.62.92CVE-2019-10724derived from NVD
thinkpad yoga s1 firmwareNVD
Affected:< 8.66.62.92Fixed in:8.66.62.92CVE-2019-10724derived from NVD
v410z\(yt s4250\) firmwareNVD
Affected:< 6.0.1.8642Fixed in:6.0.1.8642CVE-2019-10724derived from NVD
yoga 730-13ikb firmwareNVD
Affected:< 6.0.1.8644Fixed in:6.0.1.8644CVE-2019-10724derived from NVD
yoga 730-15ikb firmwareNVD
Affected:< 6.0.1.8644Fixed in:6.0.1.8644CVE-2019-10724derived from NVD

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityNone
IntegrityNone
AvailabilityHigh

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploit Intelligence

1.22%probability of exploitation in 30 days
65thpercentile

Moderate risk: more likely to be exploited than 65% of all known CVEs.

References

Embed a live status badge for CVE-2019-10724
CVE-2019-10724 severity badge

Markdown

[![CVE-2019-10724](https://tridentstack.com/cve/badge/CVE-2019-10724.svg)](https://tridentstack.com/cve/CVE-2019-10724)

HTML

<a href="https://tridentstack.com/cve/CVE-2019-10724"><img src="https://tridentstack.com/cve/badge/CVE-2019-10724.svg" alt="CVE-2019-10724"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.