Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-6156

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.

Published

2019-04-10T17:29:00.463

Last Modified

2024-11-21T04:46:02.577

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 3.3 (LOW)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-667
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lenovo 510-15ikl_firmware - Yes
Hardware lenovo 510-15ikl - No
Operating System lenovo 510s-08ikl_firmware - Yes
Hardware lenovo 510s-08ikl - No
Operating System lenovo ideacentre_300-20ish_firmware - Yes
Hardware lenovo ideacentre_300-20ish - No
Operating System lenovo ideacentre_300s-11ish_firmware - Yes
Hardware lenovo ideacentre_300s-11ish - No
Operating System lenovo ideacentre_510-15icb_firmware < o3qkt32a Yes
Hardware lenovo ideacentre_510-15icb - No
Operating System lenovo ideacentre_510a-15icb_firmware < o3qkt32a Yes
Hardware lenovo ideacentre_510a-15icb - No
Operating System lenovo ideacentre_510s-08ish_firmware - Yes
Hardware lenovo ideacentre_510s-08ish - No
Operating System lenovo ideacentre_620s-03ikl_firmware - Yes
Hardware lenovo ideacentre_620s-03ikl - No
Operating System lenovo ideacentre_700_firmware < fwkt9aa Yes
Hardware lenovo ideacentre_700 - No
Operating System lenovo ideacentre_720-18icb_firmware < o3qkt32a Yes
Hardware lenovo ideacentre_720-18icb - No
Operating System lenovo legion_c530-19icb_firmware < o3lkt20a Yes
Hardware lenovo legion_c530-19icb - No
Operating System lenovo legion_c730-19ico_firmware < o3nkt20a Yes
Hardware lenovo legion_c730-19ico - No
Operating System lenovo legion_t530-28icb_firmware < o3lkt20a Yes
Hardware lenovo legion_t530-28icb - No
Operating System lenovo legion_t730-28ico_firmware < o3nkt20a Yes
Hardware lenovo legion_t730-28ico - No
Operating System lenovo legion_y520t_z370_firmware - Yes
Hardware lenovo legion_y520t_z370 - No
Operating System lenovo legion_y720_tower_firmware - Yes
Hardware lenovo legion_y720_tower - No
Operating System lenovo legion_y920_tower_firmware - Yes
Hardware lenovo legion_y920_tower - No
Operating System lenovo lenovo_63_firmware - Yes
Hardware lenovo lenovo_63 - No
Operating System lenovo h50-30g_desktop_firmware - Yes
Hardware lenovo h50-30g_desktop - No
Operating System lenovo m4500_firmware - Yes
Hardware lenovo m4500 - No
Operating System lenovo m4500_id_firmware - Yes
Hardware lenovo m4500_id - No
Operating System lenovo m4550_id_firmware - Yes
Hardware lenovo m4550_id - No
Operating System lenovo 530s-07icb_firmware - Yes
Hardware lenovo 530s-07icb - No
Operating System lenovo qitian_4500_firmware - Yes
Hardware lenovo qitian_4500 - No
Operating System lenovo qitian_b4550_firmware - Yes
Hardware lenovo qitian_b4550 - No
Operating System lenovo qitian_b4650_firmware - Yes
Hardware lenovo qitian_b4650 - No
Operating System lenovo qitian_m4550_firmware - Yes
Hardware lenovo qitian_m4550 - No
Operating System lenovo qitian_m4600_firmware - Yes
Hardware lenovo qitian_m4600 - No
Operating System lenovo qitian_m4650_firmware - Yes
Hardware lenovo qitian_m4650 - No
Operating System lenovo qt_m410_firmware - Yes
Hardware lenovo qt_m410 - No
Operating System lenovo qt_b415_firmware - Yes
Hardware lenovo qt_b415 - No
Operating System lenovo qt_m415_firmware - Yes
Hardware lenovo qt_m415 - No
Operating System lenovo thinkcentre_e73_\(sff\)_firmware - Yes
Hardware lenovo thinkcentre_e73_\(sff\) - No
Operating System lenovo thinkcentre_e73_\(twr\)_firmware - Yes
Hardware lenovo thinkcentre_e73_\(twr\) - No
Operating System lenovo thinkcentre_e73s_firmware - Yes
Hardware lenovo thinkcentre_e73s - No
Operating System lenovo thinkcentre_e74_firmware - Yes
Hardware lenovo thinkcentre_e74 - No
Operating System lenovo thinkcentre_e74s_firmware - Yes
Hardware lenovo thinkcentre_e74s - No
Operating System lenovo thinkcentre_e75t_firmware - Yes
Hardware lenovo thinkcentre_e75t - No
Operating System lenovo thinkcentre_e75s_firmware - Yes
Hardware lenovo thinkcentre_e75s - No
Operating System lenovo thinkcentre_e93_\(sff\)_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_e93_\(sff\) - No
Operating System lenovo thinkcentre_e93_\(twr\)_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_e93_\(twr\) - No
Operating System lenovo thinkcentre_m4500k_firmware - Yes
Hardware lenovo thinkcentre_m4500k - No
Operating System lenovo thinkcentre_m4500q_firmware - Yes
Hardware lenovo thinkcentre_m4500q - No
Operating System lenovo thinkcentre_m4500t_firmware - Yes
Hardware lenovo thinkcentre_m4500t - No
Operating System lenovo thinkcentre_m4500s_firmware - Yes
Hardware lenovo thinkcentre_m4500s - No
Operating System lenovo thinkcentre_m4600t_firmware - Yes
Hardware lenovo thinkcentre_m4600t - No
Operating System lenovo thinkcentre_m4600s_firmware - Yes
Hardware lenovo thinkcentre_m4600s - No
Operating System lenovo thinkcentre_m610_firmware < m1akt3fa Yes
Hardware lenovo thinkcentre_m610 - No
Operating System lenovo thinkcentre_m6500t_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_m6500t - No
Operating System lenovo thinkcentre_m6500s_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_m6500s - No
Operating System lenovo thinkcentre_m6600_firmware < fwkt9aa Yes
Hardware lenovo thinkcentre_m6600 - No
Operating System lenovo thinkcentre_m6600q_firmware < fwkt9aa Yes
Hardware lenovo thinkcentre_m6600q - No
Operating System lenovo thinkcentre_m6600t_firmware < fwkt9aa Yes
Hardware lenovo thinkcentre_m6600t - No
Operating System lenovo thinkcentre_m6600s_firmware < fwkt9aa Yes
Hardware lenovo thinkcentre_m6600s - No
Operating System lenovo thinkcentre_m700q_firmware < fwkt9aa Yes
Hardware lenovo thinkcentre_m700q - No
Operating System lenovo thinkcentre_m700t_firmware - Yes
Hardware lenovo thinkcentre_m700t - No
Operating System lenovo thinkcentre_m700s_firmware - Yes
Hardware lenovo thinkcentre_m700s - No
Operating System lenovo thinkcentre_m710e_firmware - Yes
Hardware lenovo thinkcentre_m710e - No
Operating System lenovo thinkcentre_m710q_firmware < m1akt3fa Yes
Hardware lenovo thinkcentre_m710q - No
Operating System lenovo thinkcentre_m710t_firmware - Yes
Hardware lenovo thinkcentre_m710t - No
Operating System lenovo thinkcentre_m710s_firmware - Yes
Hardware lenovo thinkcentre_m710s - No
Operating System lenovo thinkcentre_m720q_firmware < m1ukt33a Yes
Hardware lenovo thinkcentre_m720q - No
Operating System lenovo thinkcentre_m720t_firmware ≤ m1ukt33a Yes
Hardware lenovo thinkcentre_m720t - No
Operating System lenovo thinkcentre_m720s_firmware < m1ukt33a Yes
Hardware lenovo thinkcentre_m720s - No
Operating System lenovo thinkcentre_m73_\(sff\)_firmware - Yes
Hardware lenovo thinkcentre_m73_\(sff\) - No
Operating System lenovo thinkcentre_m73_\(twr\)_firmware - Yes
Hardware lenovo thinkcentre_m73_\(twr\) - No
Operating System lenovo thinkcentre_m73_tiny_firmware - Yes
Hardware lenovo thinkcentre_m73_tiny - No
Operating System lenovo thinkcentre_m73p_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_m73p - No
Operating System lenovo thinkcentre_m800_firmware < fwkt9aa Yes
Hardware lenovo thinkcentre_m800 - No
Operating System lenovo thinkcentre_m83_\(sff\)_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_m83_\(sff\) - No
Operating System lenovo thinkcentre_m83_\(tiny\)_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_m83_\(tiny\) - No
Operating System lenovo thinkcentre_m83_\(twr\)_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_m83_\(twr\) - No
Operating System lenovo thinkcentre_m8500t_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_m8500t - No
Operating System lenovo thinkcentre_m8500s_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_m8500s - No
Operating System lenovo thinkcentre_m8600t_firmware < fwkt9aa Yes
Hardware lenovo thinkcentre_m8600t - No
Operating System lenovo thinkcentre_m8600s_firmware < fwkt9aa Yes
Hardware lenovo thinkcentre_m8600s - No
Operating System lenovo thinkcentre_m900_firmware < fwkt9aa Yes
Hardware lenovo thinkcentre_m900 - No
Operating System lenovo thinkcentre_m910t_firmware < m1akt3fa Yes
Hardware lenovo thinkcentre_m910t - No
Operating System lenovo thinkcentre_m910s_firmware < m1akt3fa Yes
Hardware lenovo thinkcentre_m910s - No
Operating System lenovo thinkcentre_m910q_firmware < m1akt3fa Yes
Hardware lenovo thinkcentre_m910q - No
Operating System lenovo thinkcentre_m910x_firmware < m1akt3fa Yes
Hardware lenovo thinkcentre_m910x - No
Operating System lenovo thinkcentre_m920q_firmware < m1ukt33a Yes
Hardware lenovo thinkcentre_m920q - No
Operating System lenovo thinkcentre_m920x_firmware < m1ukt33a Yes
Hardware lenovo thinkcentre_m920x - No
Operating System lenovo thinkcentre_m920t_firmware < m1ukt33a Yes
Hardware lenovo thinkcentre_m920t - No
Operating System lenovo thinkcentre_m920s_firmware < m1ukt33a Yes
Hardware lenovo thinkcentre_m920s - No
Operating System lenovo thinkcentre_m93_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_m93 - No
Operating System lenovo thinkcentre_m93p_\(sff\)_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_m93p_\(sff\) - No
Operating System lenovo thinkcentre_m93p_\(twr\)_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_m93p_\(twr\) - No
Operating System lenovo thinkcentre_m93p_tiny_firmware < fbktd5a Yes
Hardware lenovo thinkcentre_m93p_tiny - No
Operating System lenovo thinkcentre_s510_firmware - Yes
Hardware lenovo thinkcentre_s510 - No
Operating System lenovo v520s-08ikl_firmware - Yes
Hardware lenovo v520s-08ikl - No
Operating System lenovo v520t-15ikl_firmware - Yes
Hardware lenovo v520t-15ikl - No
Operating System lenovo yangtian_afh110_firmware - Yes
Hardware lenovo yangtian_afh110 - No
Operating System lenovo yangtian_afh81_firmware - Yes
Hardware lenovo yangtian_afh81 - No
Operating System lenovo yangtian_afq150_firmware < fwkt9aa Yes
Hardware lenovo yangtian_afq150 - No
Operating System lenovo yangtian_mc_h110_firmware - Yes
Hardware lenovo yangtian_mc_h110 - No
Operating System lenovo yangtian_mc_h110_pci_firmware - Yes
Hardware lenovo yangtian_mc_h110_pci - No
Operating System lenovo yangtian_mc_h81_firmware - Yes
Hardware lenovo yangtian_mc_h81 - No
Operating System lenovo yangtian_me\/we_h110_firmware - Yes
Hardware lenovo yangtian_me\/we_h110 - No
Operating System lenovo yangtian_mf\/wf_h110_pci_firmware - Yes
Hardware lenovo yangtian_mf\/wf_h110_pci - No
Operating System lenovo yangtian_mf\/wf_h81_pci_firmware - Yes
Hardware lenovo yangtian_mf\/wf_h81_pci - No
Operating System lenovo yangtian_ms\/ws_h81_firmware - Yes
Hardware lenovo yangtian_ms\/ws_h81 - No
Operating System lenovo yangtian_tc\/wc_h110_pci_firmware - Yes
Hardware lenovo yangtian_tc\/wc_h110_pci - No
Operating System lenovo yangtian_tc\/wcc_h81_pci_firmware - Yes
Hardware lenovo yangtian_tc\/wcc_h81_pci - No
Operating System lenovo yangtian_ytm6900e-00_firmware - Yes
Hardware lenovo yangtian_ytm6900e-00 - No
Operating System lenovo yta8900f_firmware < fwkt9aa Yes
Hardware lenovo yta8900f - No
Operating System lenovo aio_910-27ish_firmware < o37kt13a Yes
Hardware lenovo aio_910-27ish - No
Operating System lenovo aio_y910-27ish_firmware - Yes
Hardware lenovo aio_y910-27ish - No
Operating System lenovo aio300-23isu\(c5130\)_firmware < o1lkt46a Yes
Hardware lenovo aio300-23isu\(c5130\) - No
Operating System lenovo aio520-22ikl_firmware - Yes
Hardware lenovo aio520-22ikl - No
Operating System lenovo aio520-22iku_firmware - Yes
Hardware lenovo aio520-22iku - No
Operating System lenovo aio520-24ikl_firmware - Yes
Hardware lenovo aio520-24ikl - No
Operating System lenovo aio520-24iku_firmware - Yes
Hardware lenovo aio520-24iku - No
Operating System lenovo aio520-27ikl_firmware - Yes
Hardware lenovo aio520-27ikl - No
Operating System lenovo ideacentre_520s-23iku_firmware < o34kt23a Yes
Hardware lenovo ideacentre_520s-23iku - No
Operating System lenovo ideacentre_730s-24ikb_firmware < o3wkt15a Yes
Hardware lenovo ideacentre_730s-24ikb - No
Operating System lenovo qt_a7400_firmware - Yes
Hardware lenovo qt_a7400 - No
Operating System lenovo thinkcenter_m700z_firmware - Yes
Hardware lenovo thinkcenter_m700z - No
Operating System lenovo thinkcenter_m800z_firmware - Yes
Hardware lenovo thinkcenter_m800z - No
Operating System lenovo thinkcentre_e74z_firmware - Yes
Hardware lenovo thinkcentre_e74z - No
Operating System lenovo thinkcentre_e95z_firmware < m1lkt20a Yes
Hardware lenovo thinkcentre_e95z - No
Operating System lenovo thinkcentre_e96z_firmware < m26kt11a Yes
Hardware lenovo thinkcentre_e96z - No
Operating System lenovo thinkcentre_m700z_firmware - Yes
Hardware lenovo thinkcentre_m700z - No
Operating System lenovo thinkcentre_m7300z_firmware - Yes
Hardware lenovo thinkcentre_m7300z - No
Operating System lenovo thinkcentre_m800z_firmware - Yes
Hardware lenovo thinkcentre_m800z - No
Operating System lenovo thinkcentre_m810z_firmware - Yes
Hardware lenovo thinkcentre_m810z - No
Operating System lenovo thinkcentre_m818z_firmware - Yes
Hardware lenovo thinkcentre_m818z - No
Operating System lenovo thinkcentre_m820z_firmware - Yes
Hardware lenovo thinkcentre_m820z - No
Operating System lenovo thinkcentre_m8300z_firmware - Yes
Hardware lenovo thinkcentre_m8300z - No
Operating System lenovo thinkcentre_m8350z_firmware - Yes
Hardware lenovo thinkcentre_m8350z - No
Operating System lenovo thinkcentre_m83z_\(aio\)_firmware - Yes
Hardware lenovo thinkcentre_m83z_\(aio\) - No
Operating System lenovo thinkcentre_m900z_firmware - Yes
Hardware lenovo thinkcentre_m900z - No
Operating System lenovo thinkcentre_m910z_firmware - Yes
Hardware lenovo thinkcentre_m910z - No
Operating System lenovo thinkcentre_m920z_firmware - Yes
Hardware lenovo thinkcentre_m920z - No
Operating System lenovo thinkcentre_m9500z_firmware - Yes
Hardware lenovo thinkcentre_m9500z - No
Operating System lenovo thinkcentre_m9550z_firmware - Yes
Hardware lenovo thinkcentre_m9550z - No
Operating System lenovo thinkcentre_x1_aio_firmware - Yes
Hardware lenovo thinkcentre_x1_aio - No
Operating System lenovo v310z\(yt_s3150\)_firmware < m18kt25a Yes
Hardware lenovo v310z\(yt_s3150\) - No
Operating System lenovo v410z\(yt_s4250\)_firmware < m17kt41a Yes
Hardware lenovo v410z\(yt_s4250\) - No
Operating System lenovo v510z_\(yt_s5250\)_firmware < m1dkt26a Yes
Hardware lenovo v510z_\(yt_s5250\) - No
Operating System lenovo v530-22icb\(yt_s4350\)_firmware < m20kt38a Yes
Hardware lenovo v530-22icb\(yt_s4350\) - No
Operating System lenovo v530-24icb\(yt_s5350\)_firmware < m20kt38a Yes
Hardware lenovo v530-24icb\(yt_s5350\) - No
Operating System lenovo 330-14igm_firmware < 7xcn30ww Yes
Hardware lenovo 330-14igm - No
Operating System lenovo 330-15igm_firmware < 7xcn30ww Yes
Hardware lenovo 330-15igm - No
Operating System lenovo thinkpad_e480_firmware < r0pet54w Yes
Hardware lenovo thinkpad_e480 - No
Operating System lenovo thinkpad_e580_firmware < r0pet54w Yes
Hardware lenovo thinkpad_e580 - No
Operating System lenovo thinkpad_e570p_firmware < r0met46w Yes
Hardware lenovo thinkpad_e570p - No
Operating System lenovo thinkpad_s5_firmware < r0met46w Yes
Hardware lenovo thinkpad_s5 - No
Operating System lenovo thinkpad_l480_firmware < r0qet54w Yes
Hardware lenovo thinkpad_l480 - No
Operating System lenovo thinkpad_l580_firmware < r0qet54w Yes
Hardware lenovo thinkpad_l580 - No
Operating System lenovo thinkpad_s5_firmware < r09et70w Yes
Hardware lenovo thinkpad_s5 - No
Operating System lenovo thinkpad_e560p_firmware < r09et70w Yes
Hardware lenovo thinkpad_e560p - No
Operating System lenovo thinkpad_t460_firmware < r06et66w Yes
Hardware lenovo thinkpad_t460 - No
Operating System lenovo thinkpad_t460p_firmware < r07et88w Yes
Hardware lenovo thinkpad_t460p - No
Operating System lenovo thinkpad_x260_firmware < r02et70w Yes
Hardware lenovo thinkpad_x260 - No
Operating System lenovo thinkpad_x380_yoga_firmware < r0set42w Yes
Hardware lenovo thinkpad_x380_yoga - No
Operating System lenovo thinkstation_c30_refresh_firmware - Yes
Hardware lenovo thinkstation_c30_refresh - No
Operating System lenovo thinkstation_d30_refresh_firmware - Yes
Hardware lenovo thinkstation_d30_refresh - No
Operating System lenovo thinkstation_e32_firmware < fbktd5a Yes
Hardware lenovo thinkstation_e32 - No
Operating System lenovo thinkstation_p300_firmware < fbktd5a Yes
Hardware lenovo thinkstation_p300 - No
Operating System lenovo thinkstation_p310_firmware - Yes
Hardware lenovo thinkstation_p310 - No
Operating System lenovo thinkstation_p318_firmware < m1akt3fa Yes
Hardware lenovo thinkstation_p318 - No
Operating System lenovo thinkstation_p320_firmware < s06kt40a Yes
Hardware lenovo thinkstation_p320 - No
Operating System lenovo thinkstation_p320_tiny_firmware < m1akt3fa Yes
Hardware lenovo thinkstation_p320_tiny - No
Operating System lenovo thinkstation_p330_firmware < m1vkt34a Yes
Hardware lenovo thinkstation_p330 - No
Operating System lenovo thinkstation_p330_tiny_firmware < m1ukt33a Yes
Hardware lenovo thinkstation_p330_tiny - No
Operating System lenovo thinkstation_p410_firmware - Yes
Hardware lenovo thinkstation_p410 - No
Operating System lenovo thinkstation_p500_firmware - Yes
Hardware lenovo thinkstation_p500 - No
Operating System lenovo thinkstation_p510_firmware - Yes
Hardware lenovo thinkstation_p510 - No
Operating System lenovo thinkstation_p520_firmware - Yes
Hardware lenovo thinkstation_p520 - No
Operating System lenovo thinkstation_p520c_firmware - Yes
Hardware lenovo thinkstation_p520c - No
Operating System lenovo thinkstation_p700_firmware - Yes
Hardware lenovo thinkstation_p700 - No
Operating System lenovo thinkstation_p710_firmware - Yes
Hardware lenovo thinkstation_p710 - No
Operating System lenovo thinkstation_p720_firmware - Yes
Hardware lenovo thinkstation_p720 - No
Operating System lenovo thinkstation_p900_firmware - Yes
Hardware lenovo thinkstation_p900 - No
Operating System lenovo thinkstation_p910_firmware - Yes
Hardware lenovo thinkstation_p910 - No
Operating System lenovo thinkstation_p920_firmware - Yes
Hardware lenovo thinkstation_p920 - No
Operating System lenovo thinkstation_s30_refresh_firmware - Yes
Hardware lenovo thinkstation_s30_refresh - No
References