In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.

Project Subscriptions

Vendors Products
330-14igm Subscribe
330-14igm Firmware Subscribe
330-15igm Subscribe
330-15igm Firmware Subscribe
510-15ikl Subscribe
510-15ikl Firmware Subscribe
510s-08ikl Subscribe
510s-08ikl Firmware Subscribe
530s-07icb Subscribe
530s-07icb Firmware Subscribe
Aio300-23isu\(c5130\) Subscribe
Aio300-23isu\(c5130\) Firmware Subscribe
Aio520-22ikl Subscribe
Aio520-22ikl Firmware Subscribe
Aio520-22iku Subscribe
Aio520-22iku Firmware Subscribe
Aio520-24ikl Subscribe
Aio520-24ikl Firmware Subscribe
Aio520-24iku Subscribe
Aio520-24iku Firmware Subscribe
Aio520-27ikl Subscribe
Aio520-27ikl Firmware Subscribe
Aio 910-27ish Subscribe
Aio 910-27ish Firmware Subscribe
Aio Y910-27ish Subscribe
Aio Y910-27ish Firmware Subscribe
H50-30g Desktop Subscribe
H50-30g Desktop Firmware Subscribe
Ideacentre 300-20ish Subscribe
Ideacentre 300-20ish Firmware Subscribe
Ideacentre 300s-11ish Subscribe
Ideacentre 300s-11ish Firmware Subscribe
Ideacentre 510-15icb Subscribe
Ideacentre 510-15icb Firmware Subscribe
Ideacentre 510a-15icb Subscribe
Ideacentre 510a-15icb Firmware Subscribe
Ideacentre 510s-08ish Subscribe
Ideacentre 510s-08ish Firmware Subscribe
Ideacentre 520s-23iku Subscribe
Ideacentre 520s-23iku Firmware Subscribe
Ideacentre 620s-03ikl Subscribe
Ideacentre 620s-03ikl Firmware Subscribe
Ideacentre 700 Subscribe
Ideacentre 700 Firmware Subscribe
Ideacentre 720-18icb Subscribe
Ideacentre 720-18icb Firmware Subscribe
Ideacentre 730s-24ikb Subscribe
Ideacentre 730s-24ikb Firmware Subscribe
Legion C530-19icb Subscribe
Legion C530-19icb Firmware Subscribe
Legion C730-19ico Subscribe
Legion C730-19ico Firmware Subscribe
Legion T530-28icb Subscribe
Legion T530-28icb Firmware Subscribe
Legion T730-28ico Subscribe
Legion T730-28ico Firmware Subscribe
Legion Y520t Z370 Subscribe
Legion Y520t Z370 Firmware Subscribe
Legion Y720 Tower Subscribe
Legion Y720 Tower Firmware Subscribe
Legion Y920 Tower Subscribe
Legion Y920 Tower Firmware Subscribe
Lenovo 63 Subscribe
Lenovo 63 Firmware Subscribe
M4500 Firmware Subscribe
M4500 Id Subscribe
M4500 Id Firmware Subscribe
M4550 Id Subscribe
M4550 Id Firmware Subscribe
Qitian 4500 Subscribe
Qitian 4500 Firmware Subscribe
Qitian B4550 Subscribe
Qitian B4550 Firmware Subscribe
Qitian B4650 Subscribe
Qitian B4650 Firmware Subscribe
Qitian M4550 Subscribe
Qitian M4550 Firmware Subscribe
Qitian M4600 Subscribe
Qitian M4600 Firmware Subscribe
Qitian M4650 Subscribe
Qitian M4650 Firmware Subscribe
Qt A7400 Subscribe
Qt A7400 Firmware Subscribe
Qt B415 Subscribe
Qt B415 Firmware Subscribe
Qt M410 Subscribe
Qt M410 Firmware Subscribe
Qt M415 Subscribe
Qt M415 Firmware Subscribe
Thinkcenter M700z Subscribe
Thinkcenter M700z Firmware Subscribe
Thinkcenter M800z Subscribe
Thinkcenter M800z Firmware Subscribe
Thinkcentre E73 \(sff\) Subscribe
Thinkcentre E73 \(sff\) Firmware Subscribe
Thinkcentre E73 \(twr\) Subscribe
Thinkcentre E73 \(twr\) Firmware Subscribe
Thinkcentre E73s Subscribe
Thinkcentre E73s Firmware Subscribe
Thinkcentre E74 Subscribe
Thinkcentre E74 Firmware Subscribe
Thinkcentre E74s Subscribe
Thinkcentre E74s Firmware Subscribe
Thinkcentre E74z Subscribe
Thinkcentre E74z Firmware Subscribe
Thinkcentre E75s Subscribe
Thinkcentre E75s Firmware Subscribe
Thinkcentre E75t Subscribe
Thinkcentre E75t Firmware Subscribe
Thinkcentre E93 \(sff\) Subscribe
Thinkcentre E93 \(sff\) Firmware Subscribe
Thinkcentre E93 \(twr\) Subscribe
Thinkcentre E93 \(twr\) Firmware Subscribe
Thinkcentre E95z Subscribe
Thinkcentre E95z Firmware Subscribe
Thinkcentre E96z Subscribe
Thinkcentre E96z Firmware Subscribe
Thinkcentre M4500k Subscribe
Thinkcentre M4500k Firmware Subscribe
Thinkcentre M4500q Subscribe
Thinkcentre M4500q Firmware Subscribe
Thinkcentre M4500s Subscribe
Thinkcentre M4500s Firmware Subscribe
Thinkcentre M4500t Subscribe
Thinkcentre M4500t Firmware Subscribe
Thinkcentre M4600s Subscribe
Thinkcentre M4600s Firmware Subscribe
Thinkcentre M4600t Subscribe
Thinkcentre M4600t Firmware Subscribe
Thinkcentre M610 Subscribe
Thinkcentre M610 Firmware Subscribe
Thinkcentre M6500s Subscribe
Thinkcentre M6500s Firmware Subscribe
Thinkcentre M6500t Subscribe
Thinkcentre M6500t Firmware Subscribe
Thinkcentre M6600 Subscribe
Thinkcentre M6600 Firmware Subscribe
Thinkcentre M6600q Subscribe
Thinkcentre M6600q Firmware Subscribe
Thinkcentre M6600s Subscribe
Thinkcentre M6600s Firmware Subscribe
Thinkcentre M6600t Subscribe
Thinkcentre M6600t Firmware Subscribe
Thinkcentre M700q Subscribe
Thinkcentre M700q Firmware Subscribe
Thinkcentre M700s Subscribe
Thinkcentre M700s Firmware Subscribe
Thinkcentre M700t Subscribe
Thinkcentre M700t Firmware Subscribe
Thinkcentre M700z Subscribe
Thinkcentre M700z Firmware Subscribe
Thinkcentre M710e Subscribe
Thinkcentre M710e Firmware Subscribe
Thinkcentre M710q Subscribe
Thinkcentre M710q Firmware Subscribe
Thinkcentre M710s Subscribe
Thinkcentre M710s Firmware Subscribe
Thinkcentre M710t Subscribe
Thinkcentre M710t Firmware Subscribe
Thinkcentre M720q Subscribe
Thinkcentre M720q Firmware Subscribe
Thinkcentre M720s Subscribe
Thinkcentre M720s Firmware Subscribe
Thinkcentre M720t Subscribe
Thinkcentre M720t Firmware Subscribe
Thinkcentre M7300z Subscribe
Thinkcentre M7300z Firmware Subscribe
Thinkcentre M73 \(sff\) Subscribe
Thinkcentre M73 \(sff\) Firmware Subscribe
Thinkcentre M73 \(twr\) Subscribe
Thinkcentre M73 \(twr\) Firmware Subscribe
Thinkcentre M73 Tiny Subscribe
Thinkcentre M73 Tiny Firmware Subscribe
Thinkcentre M73p Subscribe
Thinkcentre M73p Firmware Subscribe
Thinkcentre M800 Subscribe
Thinkcentre M800 Firmware Subscribe
Thinkcentre M800z Subscribe
Thinkcentre M800z Firmware Subscribe
Thinkcentre M810z Subscribe
Thinkcentre M810z Firmware Subscribe
Thinkcentre M818z Subscribe
Thinkcentre M818z Firmware Subscribe
Thinkcentre M820z Subscribe
Thinkcentre M820z Firmware Subscribe
Thinkcentre M8300z Subscribe
Thinkcentre M8300z Firmware Subscribe
Thinkcentre M8350z Subscribe
Thinkcentre M8350z Firmware Subscribe
Thinkcentre M83 \(sff\) Subscribe
Thinkcentre M83 \(sff\) Firmware Subscribe
Thinkcentre M83 \(tiny\) Subscribe
Thinkcentre M83 \(tiny\) Firmware Subscribe
Thinkcentre M83 \(twr\) Subscribe
Thinkcentre M83 \(twr\) Firmware Subscribe
Thinkcentre M83z \(aio\) Subscribe
Thinkcentre M83z \(aio\) Firmware Subscribe
Thinkcentre M8500s Subscribe
Thinkcentre M8500s Firmware Subscribe
Thinkcentre M8500t Subscribe
Thinkcentre M8500t Firmware Subscribe
Thinkcentre M8600s Subscribe
Thinkcentre M8600s Firmware Subscribe
Thinkcentre M8600t Subscribe
Thinkcentre M8600t Firmware Subscribe
Thinkcentre M900 Subscribe
Thinkcentre M900 Firmware Subscribe
Thinkcentre M900z Subscribe
Thinkcentre M900z Firmware Subscribe
Thinkcentre M910q Subscribe
Thinkcentre M910q Firmware Subscribe
Thinkcentre M910s Subscribe
Thinkcentre M910s Firmware Subscribe
Thinkcentre M910t Subscribe
Thinkcentre M910t Firmware Subscribe
Thinkcentre M910x Subscribe
Thinkcentre M910x Firmware Subscribe
Thinkcentre M910z Subscribe
Thinkcentre M910z Firmware Subscribe
Thinkcentre M920q Subscribe
Thinkcentre M920q Firmware Subscribe
Thinkcentre M920s Subscribe
Thinkcentre M920s Firmware Subscribe
Thinkcentre M920t Subscribe
Thinkcentre M920t Firmware Subscribe
Thinkcentre M920x Subscribe
Thinkcentre M920x Firmware Subscribe
Thinkcentre M920z Subscribe
Thinkcentre M920z Firmware Subscribe
Thinkcentre M93 Subscribe
Thinkcentre M93 Firmware Subscribe
Thinkcentre M93p \(sff\) Subscribe
Thinkcentre M93p \(sff\) Firmware Subscribe
Thinkcentre M93p \(twr\) Subscribe
Thinkcentre M93p \(twr\) Firmware Subscribe
Thinkcentre M93p Tiny Subscribe
Thinkcentre M93p Tiny Firmware Subscribe
Thinkcentre M9500z Subscribe
Thinkcentre M9500z Firmware Subscribe
Thinkcentre M9550z Subscribe
Thinkcentre M9550z Firmware Subscribe
Thinkcentre S510 Subscribe
Thinkcentre S510 Firmware Subscribe
Thinkcentre X1 Aio Subscribe
Thinkcentre X1 Aio Firmware Subscribe
Thinkpad E480 Subscribe
Thinkpad E480 Firmware Subscribe
Thinkpad E560p Subscribe
Thinkpad E560p Firmware Subscribe
Thinkpad E570p Subscribe
Thinkpad E570p Firmware Subscribe
Thinkpad E580 Subscribe
Thinkpad E580 Firmware Subscribe
Thinkpad L480 Subscribe
Thinkpad L480 Firmware Subscribe
Thinkpad L580 Subscribe
Thinkpad L580 Firmware Subscribe
Thinkpad S5 Subscribe
Thinkpad S5 Firmware Subscribe
Thinkpad T460 Subscribe
Thinkpad T460 Firmware Subscribe
Thinkpad T460p Subscribe
Thinkpad T460p Firmware Subscribe
Thinkpad X260 Subscribe
Thinkpad X260 Firmware Subscribe
Thinkpad X380 Yoga Subscribe
Thinkpad X380 Yoga Firmware Subscribe
Thinkstation C30 Refresh Subscribe
Thinkstation C30 Refresh Firmware Subscribe
Thinkstation D30 Refresh Subscribe
Thinkstation D30 Refresh Firmware Subscribe
Thinkstation E32 Subscribe
Thinkstation E32 Firmware Subscribe
Thinkstation P300 Subscribe
Thinkstation P300 Firmware Subscribe
Thinkstation P310 Subscribe
Thinkstation P310 Firmware Subscribe
Thinkstation P318 Subscribe
Thinkstation P318 Firmware Subscribe
Thinkstation P320 Subscribe
Thinkstation P320 Firmware Subscribe
Thinkstation P320 Tiny Subscribe
Thinkstation P320 Tiny Firmware Subscribe
Thinkstation P330 Subscribe
Thinkstation P330 Firmware Subscribe
Thinkstation P330 Tiny Subscribe
Thinkstation P330 Tiny Firmware Subscribe
Thinkstation P410 Subscribe
Thinkstation P410 Firmware Subscribe
Thinkstation P500 Subscribe
Thinkstation P500 Firmware Subscribe
Thinkstation P510 Subscribe
Thinkstation P510 Firmware Subscribe
Thinkstation P520 Subscribe
Thinkstation P520 Firmware Subscribe
Thinkstation P520c Subscribe
Thinkstation P520c Firmware Subscribe
Thinkstation P700 Subscribe
Thinkstation P700 Firmware Subscribe
Thinkstation P710 Subscribe
Thinkstation P710 Firmware Subscribe
Thinkstation P720 Subscribe
Thinkstation P720 Firmware Subscribe
Thinkstation P900 Subscribe
Thinkstation P900 Firmware Subscribe
Thinkstation P910 Subscribe
Thinkstation P910 Firmware Subscribe
Thinkstation P920 Subscribe
Thinkstation P920 Firmware Subscribe
Thinkstation S30 Refresh Subscribe
Thinkstation S30 Refresh Firmware Subscribe
V310z\(yt S3150\) Subscribe
V310z\(yt S3150\) Firmware Subscribe
V410z\(yt S4250\) Subscribe
V410z\(yt S4250\) Firmware Subscribe
V510z \(yt S5250\) Subscribe
V510z \(yt S5250\) Firmware Subscribe
V520s-08ikl Subscribe
V520s-08ikl Firmware Subscribe
V520t-15ikl Subscribe
V520t-15ikl Firmware Subscribe
V530-22icb\(yt S4350\) Subscribe
V530-22icb\(yt S4350\) Firmware Subscribe
V530-24icb\(yt S5350\) Subscribe
V530-24icb\(yt S5350\) Firmware Subscribe
Yangtian Afh110 Subscribe
Yangtian Afh110 Firmware Subscribe
Yangtian Afh81 Subscribe
Yangtian Afh81 Firmware Subscribe
Yangtian Afq150 Subscribe
Yangtian Afq150 Firmware Subscribe
Yangtian Mc H110 Subscribe
Yangtian Mc H110 Firmware Subscribe
Yangtian Mc H110 Pci Subscribe
Yangtian Mc H110 Pci Firmware Subscribe
Yangtian Mc H81 Subscribe
Yangtian Mc H81 Firmware Subscribe
Yangtian Me\/we H110 Subscribe
Yangtian Me\/we H110 Firmware Subscribe
Yangtian Mf\/wf H110 Pci Subscribe
Yangtian Mf\/wf H110 Pci Firmware Subscribe
Yangtian Mf\/wf H81 Pci Subscribe
Yangtian Mf\/wf H81 Pci Firmware Subscribe
Yangtian Ms\/ws H81 Subscribe
Yangtian Ms\/ws H81 Firmware Subscribe
Yangtian Tc\/wc H110 Pci Subscribe
Yangtian Tc\/wc H110 Pci Firmware Subscribe
Yangtian Tc\/wcc H81 Pci Subscribe
Yangtian Tc\/wcc H81 Pci Firmware Subscribe
Yangtian Ytm6900e-00 Subscribe
Yangtian Ytm6900e-00 Firmware Subscribe
Yta8900f Subscribe
Yta8900f Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2019-15723 In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.
Fixes

Solution

No action required. Lenovo has updated BIOS for systems in the product impact section to implement this secondary protection, PRx.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2024-09-16T22:02:37.776Z

Reserved: 2019-01-11T00:00:00

Link: CVE-2019-6156

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-04-10T17:29:00.463

Modified: 2024-11-21T04:46:02.577

Link: CVE-2019-6156

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses