Description
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.
Published: 2019-04-10
Score: 3.3 Low
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

No action required. Lenovo has updated BIOS for systems in the product impact section to implement this secondary protection, PRx.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2019-15723 In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.
History

No history.

Subscriptions

Lenovo 330-14igm 330-14igm Firmware 330-15igm 330-15igm Firmware 510-15ikl 510-15ikl Firmware 510s-08ikl 510s-08ikl Firmware 530s-07icb 530s-07icb Firmware Aio300-23isu\(c5130\) Aio300-23isu\(c5130\) Firmware Aio520-22ikl Aio520-22ikl Firmware Aio520-22iku Aio520-22iku Firmware Aio520-24ikl Aio520-24ikl Firmware Aio520-24iku Aio520-24iku Firmware Aio520-27ikl Aio520-27ikl Firmware Aio 910-27ish Aio 910-27ish Firmware Aio Y910-27ish Aio Y910-27ish Firmware H50-30g Desktop H50-30g Desktop Firmware Ideacentre 300-20ish Ideacentre 300-20ish Firmware Ideacentre 300s-11ish Ideacentre 300s-11ish Firmware Ideacentre 510-15icb Ideacentre 510-15icb Firmware Ideacentre 510a-15icb Ideacentre 510a-15icb Firmware Ideacentre 510s-08ish Ideacentre 510s-08ish Firmware Ideacentre 520s-23iku Ideacentre 520s-23iku Firmware Ideacentre 620s-03ikl Ideacentre 620s-03ikl Firmware Ideacentre 700 Ideacentre 700 Firmware Ideacentre 720-18icb Ideacentre 720-18icb Firmware Ideacentre 730s-24ikb Ideacentre 730s-24ikb Firmware Legion C530-19icb Legion C530-19icb Firmware Legion C730-19ico Legion C730-19ico Firmware Legion T530-28icb Legion T530-28icb Firmware Legion T730-28ico Legion T730-28ico Firmware Legion Y520t Z370 Legion Y520t Z370 Firmware Legion Y720 Tower Legion Y720 Tower Firmware Legion Y920 Tower Legion Y920 Tower Firmware Lenovo 63 Lenovo 63 Firmware M4500 M4500 Firmware M4500 Id M4500 Id Firmware M4550 Id M4550 Id Firmware Qitian 4500 Qitian 4500 Firmware Qitian B4550 Qitian B4550 Firmware Qitian B4650 Qitian B4650 Firmware Qitian M4550 Qitian M4550 Firmware Qitian M4600 Qitian M4600 Firmware Qitian M4650 Qitian M4650 Firmware Qt A7400 Qt A7400 Firmware Qt B415 Qt B415 Firmware Qt M410 Qt M410 Firmware Qt M415 Qt M415 Firmware Thinkcenter M700z Thinkcenter M700z Firmware Thinkcenter M800z Thinkcenter M800z Firmware Thinkcentre E73 \(sff\) Thinkcentre E73 \(sff\) Firmware Thinkcentre E73 \(twr\) Thinkcentre E73 \(twr\) Firmware Thinkcentre E73s Thinkcentre E73s Firmware Thinkcentre E74 Thinkcentre E74 Firmware Thinkcentre E74s Thinkcentre E74s Firmware Thinkcentre E74z Thinkcentre E74z Firmware Thinkcentre E75s Thinkcentre E75s Firmware Thinkcentre E75t Thinkcentre E75t Firmware Thinkcentre E93 \(sff\) Thinkcentre E93 \(sff\) Firmware Thinkcentre E93 \(twr\) Thinkcentre E93 \(twr\) Firmware Thinkcentre E95z Thinkcentre E95z Firmware Thinkcentre E96z Thinkcentre E96z Firmware Thinkcentre M4500k Thinkcentre M4500k Firmware Thinkcentre M4500q Thinkcentre M4500q Firmware Thinkcentre M4500s Thinkcentre M4500s Firmware Thinkcentre M4500t Thinkcentre M4500t Firmware Thinkcentre M4600s Thinkcentre M4600s Firmware Thinkcentre M4600t Thinkcentre M4600t Firmware Thinkcentre M610 Thinkcentre M610 Firmware Thinkcentre M6500s Thinkcentre M6500s Firmware Thinkcentre M6500t Thinkcentre M6500t Firmware Thinkcentre M6600 Thinkcentre M6600 Firmware Thinkcentre M6600q Thinkcentre M6600q Firmware Thinkcentre M6600s Thinkcentre M6600s Firmware Thinkcentre M6600t Thinkcentre M6600t Firmware Thinkcentre M700q Thinkcentre M700q Firmware Thinkcentre M700s Thinkcentre M700s Firmware Thinkcentre M700t Thinkcentre M700t Firmware Thinkcentre M700z Thinkcentre M700z Firmware Thinkcentre M710e Thinkcentre M710e Firmware Thinkcentre M710q Thinkcentre M710q Firmware Thinkcentre M710s Thinkcentre M710s Firmware Thinkcentre M710t Thinkcentre M710t Firmware Thinkcentre M720q Thinkcentre M720q Firmware Thinkcentre M720s Thinkcentre M720s Firmware Thinkcentre M720t Thinkcentre M720t Firmware Thinkcentre M7300z Thinkcentre M7300z Firmware Thinkcentre M73 \(sff\) Thinkcentre M73 \(sff\) Firmware Thinkcentre M73 \(twr\) Thinkcentre M73 \(twr\) Firmware Thinkcentre M73 Tiny Thinkcentre M73 Tiny Firmware Thinkcentre M73p Thinkcentre M73p Firmware Thinkcentre M800 Thinkcentre M800 Firmware Thinkcentre M800z Thinkcentre M800z Firmware Thinkcentre M810z Thinkcentre M810z Firmware Thinkcentre M818z Thinkcentre M818z Firmware Thinkcentre M820z Thinkcentre M820z Firmware Thinkcentre M8300z Thinkcentre M8300z Firmware Thinkcentre M8350z Thinkcentre M8350z Firmware Thinkcentre M83 \(sff\) Thinkcentre M83 \(sff\) Firmware Thinkcentre M83 \(tiny\) Thinkcentre M83 \(tiny\) Firmware Thinkcentre M83 \(twr\) Thinkcentre M83 \(twr\) Firmware Thinkcentre M83z \(aio\) Thinkcentre M83z \(aio\) Firmware Thinkcentre M8500s Thinkcentre M8500s Firmware Thinkcentre M8500t Thinkcentre M8500t Firmware Thinkcentre M8600s Thinkcentre M8600s Firmware Thinkcentre M8600t Thinkcentre M8600t Firmware Thinkcentre M900 Thinkcentre M900 Firmware Thinkcentre M900z Thinkcentre M900z Firmware Thinkcentre M910q Thinkcentre M910q Firmware Thinkcentre M910s Thinkcentre M910s Firmware Thinkcentre M910t Thinkcentre M910t Firmware Thinkcentre M910x Thinkcentre M910x Firmware Thinkcentre M910z Thinkcentre M910z Firmware Thinkcentre M920q Thinkcentre M920q Firmware Thinkcentre M920s Thinkcentre M920s Firmware Thinkcentre M920t Thinkcentre M920t Firmware Thinkcentre M920x Thinkcentre M920x Firmware Thinkcentre M920z Thinkcentre M920z Firmware Thinkcentre M93 Thinkcentre M93 Firmware Thinkcentre M93p \(sff\) Thinkcentre M93p \(sff\) Firmware Thinkcentre M93p \(twr\) Thinkcentre M93p \(twr\) Firmware Thinkcentre M93p Tiny Thinkcentre M93p Tiny Firmware Thinkcentre M9500z Thinkcentre M9500z Firmware Thinkcentre M9550z Thinkcentre M9550z Firmware Thinkcentre S510 Thinkcentre S510 Firmware Thinkcentre X1 Aio Thinkcentre X1 Aio Firmware Thinkpad E480 Thinkpad E480 Firmware Thinkpad E560p Thinkpad E560p Firmware Thinkpad E570p Thinkpad E570p Firmware Thinkpad E580 Thinkpad E580 Firmware Thinkpad L480 Thinkpad L480 Firmware Thinkpad L580 Thinkpad L580 Firmware Thinkpad S5 Thinkpad S5 Firmware Thinkpad T460 Thinkpad T460 Firmware Thinkpad T460p Thinkpad T460p Firmware Thinkpad X260 Thinkpad X260 Firmware Thinkpad X380 Yoga Thinkpad X380 Yoga Firmware Thinkstation C30 Refresh Thinkstation C30 Refresh Firmware Thinkstation D30 Refresh Thinkstation D30 Refresh Firmware Thinkstation E32 Thinkstation E32 Firmware Thinkstation P300 Thinkstation P300 Firmware Thinkstation P310 Thinkstation P310 Firmware Thinkstation P318 Thinkstation P318 Firmware Thinkstation P320 Thinkstation P320 Firmware Thinkstation P320 Tiny Thinkstation P320 Tiny Firmware Thinkstation P330 Thinkstation P330 Firmware Thinkstation P330 Tiny Thinkstation P330 Tiny Firmware Thinkstation P410 Thinkstation P410 Firmware Thinkstation P500 Thinkstation P500 Firmware Thinkstation P510 Thinkstation P510 Firmware Thinkstation P520 Thinkstation P520 Firmware Thinkstation P520c Thinkstation P520c Firmware Thinkstation P700 Thinkstation P700 Firmware Thinkstation P710 Thinkstation P710 Firmware Thinkstation P720 Thinkstation P720 Firmware Thinkstation P900 Thinkstation P900 Firmware Thinkstation P910 Thinkstation P910 Firmware Thinkstation P920 Thinkstation P920 Firmware Thinkstation S30 Refresh Thinkstation S30 Refresh Firmware V310z\(yt S3150\) V310z\(yt S3150\) Firmware V410z\(yt S4250\) V410z\(yt S4250\) Firmware V510z \(yt S5250\) V510z \(yt S5250\) Firmware V520s-08ikl V520s-08ikl Firmware V520t-15ikl V520t-15ikl Firmware V530-22icb\(yt S4350\) V530-22icb\(yt S4350\) Firmware V530-24icb\(yt S5350\) V530-24icb\(yt S5350\) Firmware Yangtian Afh110 Yangtian Afh110 Firmware Yangtian Afh81 Yangtian Afh81 Firmware Yangtian Afq150 Yangtian Afq150 Firmware Yangtian Mc H110 Yangtian Mc H110 Firmware Yangtian Mc H110 Pci Yangtian Mc H110 Pci Firmware Yangtian Mc H81 Yangtian Mc H81 Firmware Yangtian Me\/we H110 Yangtian Me\/we H110 Firmware Yangtian Mf\/wf H110 Pci Yangtian Mf\/wf H110 Pci Firmware Yangtian Mf\/wf H81 Pci Yangtian Mf\/wf H81 Pci Firmware Yangtian Ms\/ws H81 Yangtian Ms\/ws H81 Firmware Yangtian Tc\/wc H110 Pci Yangtian Tc\/wc H110 Pci Firmware Yangtian Tc\/wcc H81 Pci Yangtian Tc\/wcc H81 Pci Firmware Yangtian Ytm6900e-00 Yangtian Ytm6900e-00 Firmware Yta8900f Yta8900f Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2024-09-16T22:02:37.776Z

Reserved: 2019-01-11T00:00:00.000Z

Link: CVE-2019-6156

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-04-10T17:29:00.463

Modified: 2024-11-21T04:46:02.577

Link: CVE-2019-6156

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses