CVEvulnerability

CVE-2019-6156

3.3 LOW Published 2019-04-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-04-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
3.3 LOW — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-667

Description

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.

Affected configurations

• lenovo 510-15ikl firmware • lenovo 510s-08ikl firmware • lenovo ideacentre 300-20ish firmware • lenovo ideacentre 300s-11ish firmware • lenovo ideacentre 510-15icb firmware (< o3qkt32a) • lenovo ideacentre 510a-15icb firmware (< o3qkt32a) • lenovo ideacentre 510s-08ish firmware • lenovo ideacentre 620s-03ikl firmware • lenovo ideacentre 700 firmware (< fwkt9aa) • lenovo ideacentre 720-18icb firmware (< o3qkt32a) • lenovo legion c530-19icb firmware (< o3lkt20a) • lenovo legion c730-19ico firmware (< o3nkt20a) • lenovo legion t530-28icb firmware (< o3lkt20a) • lenovo legion t730-28ico firmware (< o3nkt20a) • lenovo legion y520t z370 firmware • lenovo legion y720 tower firmware • lenovo legion y920 tower firmware • lenovo lenovo 63 firmware • lenovo h50-30g desktop firmware • lenovo m4500 firmware • lenovo m4500 id firmware • lenovo m4550 id firmware • lenovo 530s-07icb firmware • lenovo qitian 4500 firmware • lenovo qitian b4550 firmware • lenovo qitian b4650 firmware • lenovo qitian m4550 firmware • lenovo qitian m4600 firmware • lenovo qitian m4650 firmware • lenovo qt m410 firmware • lenovo qt b415 firmware • lenovo qt m415 firmware • lenovo thinkcentre e73 \(sff\) firmware • lenovo thinkcentre e73 \(twr\) firmware • lenovo thinkcentre e73s firmware • lenovo thinkcentre e74 firmware • lenovo thinkcentre e74s firmware • lenovo thinkcentre e75t firmware • lenovo thinkcentre e75s firmware • lenovo thinkcentre e93 \(sff\) firmware (< fbktd5a) • lenovo thinkcentre e93 \(twr\) firmware (< fbktd5a) • lenovo thinkcentre m4500k firmware • lenovo thinkcentre m4500q firmware • lenovo thinkcentre m4500t firmware • lenovo thinkcentre m4500s firmware • lenovo thinkcentre m4600t firmware • lenovo thinkcentre m4600s firmware • lenovo thinkcentre m610 firmware (< m1akt3fa) • lenovo thinkcentre m6500t firmware (< fbktd5a) • lenovo thinkcentre m6500s firmware (< fbktd5a) • lenovo thinkcentre m6600 firmware (< fwkt9aa) • lenovo thinkcentre m6600q firmware (< fwkt9aa) • lenovo thinkcentre m6600t firmware (< fwkt9aa) • lenovo thinkcentre m6600s firmware (< fwkt9aa) • lenovo thinkcentre m700q firmware (< fwkt9aa) • lenovo thinkcentre m700t firmware • lenovo thinkcentre m700s firmware • lenovo thinkcentre m710e firmware • lenovo thinkcentre m710q firmware (< m1akt3fa) • lenovo thinkcentre m710t firmware … and 118 more

Related

Weakness · CWE (1)

  • CWE-667 Improper Locking weakness

References