Low severity · published Apr 10, 2019
CVE-2019-6156
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash
3.3
CVSS
0.2%
EPSS
No
On KEV
Description
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
5F
510-15ikl Firmware · Lenovo
All versions, or not specified · source: NVD
5F
510s-08ikl Firmware · Lenovo
All versions, or not specified · source: NVD
5F
530s-07icb Firmware · Lenovo
All versions, or not specified · source: NVD
HD
H50-30g Desktop Firmware · Lenovo
All versions, or not specified · source: NVD
I3
Ideacentre 300-20ish Firmware · Lenovo
All versions, or not specified · source: NVD
I3
Ideacentre 300s-11ish Firmware · Lenovo
All versions, or not specified · source: NVD
I5
Ideacentre 510-15icb Firmware · Lenovo
before o3qkt32a · source: NVD
I5
Ideacentre 510a-15icb Firmware · Lenovo
before o3qkt32a · source: NVD
I5
Ideacentre 510s-08ish Firmware · Lenovo
All versions, or not specified · source: NVD
I6
Ideacentre 620s-03ikl Firmware · Lenovo
All versions, or not specified · source: NVD
I7
Ideacentre 700 Firmware · Lenovo
before fwkt9aa · source: NVD
I7
Ideacentre 720-18icb Firmware · Lenovo
before o3qkt32a · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-6156
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-6156
Patch
https://support.lenovo.com/solutions/LEN-26332
More from 510-15ikl Firmware
9.8
CVE-2019-6188
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for…
6.4
CVE-2019-6172
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow…
6.4
CVE-2019-6170
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow…