Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
3.3
CVSSv3

CVE-2019-6156

Published: 10/04/2019 Updated: 24/08/2020
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 3.3 | Impact Score: 1.4 | Exploitability Score: 1.8
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Subscribe to 510-15ikl Firmware

Vulnerability Summary

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

lenovo 510-15ikl_firmware -

lenovo 510s-08ikl_firmware -

lenovo ideacentre_300-20ish_firmware -

lenovo ideacentre_300s-11ish_firmware -

lenovo ideacentre_510-15icb_firmware

lenovo ideacentre_510a-15icb_firmware

lenovo ideacentre_510s-08ish_firmware -

lenovo ideacentre_620s-03ikl_firmware -

lenovo ideacentre_700_firmware

lenovo ideacentre_720-18icb_firmware

lenovo legion_c530-19icb_firmware

lenovo legion_c730-19ico_firmware

lenovo legion_t530-28icb_firmware

lenovo legion_t730-28ico_firmware

lenovo legion_y520t_z370_firmware -

lenovo legion_y720_tower_firmware -

lenovo legion_y920_tower_firmware -

lenovo lenovo_63_firmware -

lenovo h50-30g_desktop_firmware -

lenovo m4500_firmware -

lenovo m4500_id_firmware -

lenovo m4550_id_firmware -

lenovo 530s-07icb_firmware -

lenovo qitian_4500_firmware -

lenovo qitian_b4550_firmware -

lenovo qitian_b4650_firmware -

lenovo qitian_m4550_firmware -

lenovo qitian_m4600_firmware -

lenovo qitian_m4650_firmware -

lenovo qt_m410_firmware -

lenovo qt_b415_firmware -

lenovo qt_m415_firmware -

lenovo thinkcentre_e73_\\(sff\\)_firmware -

lenovo thinkcentre_e73_\\(twr\\)_firmware -

lenovo thinkcentre_e73s_firmware -

lenovo thinkcentre_e74_firmware -

lenovo thinkcentre_e74s_firmware -

lenovo thinkcentre_e75t_firmware -

lenovo thinkcentre_e75s_firmware -

lenovo thinkcentre_e93_\\(sff\\)_firmware

lenovo thinkcentre_e93_\\(twr\\)_firmware

lenovo thinkcentre_m4500k_firmware -

lenovo thinkcentre_m4500q_firmware -

lenovo thinkcentre_m4500t_firmware -

lenovo thinkcentre_m4500s_firmware -

lenovo thinkcentre_m4600t_firmware -

lenovo thinkcentre_m4600s_firmware -

lenovo thinkcentre_m610_firmware

lenovo thinkcentre_m6500t_firmware

lenovo thinkcentre_m6500s_firmware

lenovo thinkcentre_m6600_firmware

lenovo thinkcentre_m6600q_firmware

lenovo thinkcentre_m6600t_firmware

lenovo thinkcentre_m6600s_firmware

lenovo thinkcentre_m700q_firmware

lenovo thinkcentre_m700t_firmware -

lenovo thinkcentre_m700s_firmware -

lenovo thinkcentre_m710e_firmware -

lenovo thinkcentre_m710q_firmware

lenovo thinkcentre_m710t_firmware -

lenovo thinkcentre_m710s_firmware -

lenovo thinkcentre_m720q_firmware

lenovo thinkcentre_m720t_firmware

lenovo thinkcentre_m720s_firmware

lenovo thinkcentre_m73_\\(sff\\)_firmware -

lenovo thinkcentre_m73_\\(twr\\)_firmware -

lenovo thinkcentre_m73_tiny_firmware -

lenovo thinkcentre_m73p_firmware

lenovo thinkcentre_m800_firmware

lenovo thinkcentre_m83_\\(sff\\)_firmware

lenovo thinkcentre_m83_\\(tiny\\)_firmware

lenovo thinkcentre_m83_\\(twr\\)_firmware

lenovo thinkcentre_m8500t_firmware

lenovo thinkcentre_m8500s_firmware

lenovo thinkcentre_m8600t_firmware

lenovo thinkcentre_m8600s_firmware

lenovo thinkcentre_m900_firmware

lenovo thinkcentre_m910t_firmware

lenovo thinkcentre_m910s_firmware

lenovo thinkcentre_m910q_firmware

lenovo thinkcentre_m910x_firmware

lenovo thinkcentre_m920q_firmware

lenovo thinkcentre_m920x_firmware

lenovo thinkcentre_m920t_firmware

lenovo thinkcentre_m920s_firmware

lenovo thinkcentre_m93_firmware

lenovo thinkcentre_m93p_\\(sff\\)_firmware

lenovo thinkcentre_m93p_\\(twr\\)_firmware

lenovo thinkcentre_m93p_tiny_firmware

lenovo thinkcentre_s510_firmware -

lenovo v520s-08ikl_firmware -

lenovo v520t-15ikl_firmware -

lenovo yangtian_afh110_firmware -

lenovo yangtian_afh81_firmware -

lenovo yangtian_afq150_firmware

lenovo yangtian_mc_h110_firmware -

lenovo yangtian_mc_h110_pci_firmware -

lenovo yangtian_mc_h81_firmware -

lenovo yangtian_me\\/we_h110_firmware -

lenovo yangtian_mf\\/wf_h110_pci_firmware -

lenovo yangtian_mf\\/wf_h81_pci_firmware -

lenovo yangtian_ms\\/ws_h81_firmware -

lenovo yangtian_tc\\/wc_h110_pci_firmware -

lenovo yangtian_tc\\/wcc_h81_pci_firmware -

lenovo yangtian_ytm6900e-00_firmware -

lenovo yta8900f_firmware

lenovo aio_910-27ish_firmware

lenovo aio_y910-27ish_firmware -

lenovo aio300-23isu\\(c5130\\)_firmware

lenovo aio520-22ikl_firmware -

lenovo aio520-22iku_firmware -

lenovo aio520-24ikl_firmware -

lenovo aio520-24iku_firmware -

lenovo aio520-27ikl_firmware -

lenovo ideacentre_520s-23iku_firmware

lenovo ideacentre_730s-24ikb_firmware

lenovo qt_a7400_firmware -

lenovo thinkcenter_m700z_firmware -

lenovo thinkcenter_m800z_firmware -

lenovo thinkcentre_e74z_firmware -

lenovo thinkcentre_e95z_firmware

lenovo thinkcentre_e96z_firmware

lenovo thinkcentre_m700z_firmware -

lenovo thinkcentre_m7300z_firmware -

lenovo thinkcentre_m800z_firmware -

lenovo thinkcentre_m810z_firmware -

lenovo thinkcentre_m818z_firmware -

lenovo thinkcentre_m820z_firmware -

lenovo thinkcentre_m8300z_firmware -

lenovo thinkcentre_m8350z_firmware -

lenovo thinkcentre_m83z_\\(aio\\)_firmware -

lenovo thinkcentre_m900z_firmware -

lenovo thinkcentre_m910z_firmware -

lenovo thinkcentre_m920z_firmware -

lenovo thinkcentre_m9500z_firmware -

lenovo thinkcentre_m9550z_firmware -

lenovo thinkcentre_x1_aio_firmware -

lenovo v310z\\(yt_s3150\\)_firmware

lenovo v410z\\(yt_s4250\\)_firmware

lenovo v510z_\\(yt_s5250\\)_firmware

lenovo v530-22icb\\(yt_s4350\\)_firmware

lenovo v530-24icb\\(yt_s5350\\)_firmware

lenovo 330-14igm_firmware

lenovo 330-15igm_firmware

lenovo thinkpad_e480_firmware

lenovo thinkpad_e580_firmware

lenovo thinkpad_e570p_firmware

lenovo thinkpad_s5_firmware

lenovo thinkpad_l480_firmware

lenovo thinkpad_l580_firmware

lenovo thinkpad_e560p_firmware

lenovo thinkpad_t460_firmware

lenovo thinkpad_t460p_firmware

lenovo thinkpad_x260_firmware

lenovo thinkpad_x380_yoga_firmware

lenovo thinkstation_c30_refresh_firmware -

lenovo thinkstation_d30_refresh_firmware -

lenovo thinkstation_e32_firmware

lenovo thinkstation_p300_firmware

lenovo thinkstation_p310_firmware -

lenovo thinkstation_p318_firmware

lenovo thinkstation_p320_firmware

lenovo thinkstation_p320_tiny_firmware

lenovo thinkstation_p330_firmware

lenovo thinkstation_p330_tiny_firmware

lenovo thinkstation_p410_firmware -

lenovo thinkstation_p500_firmware -

lenovo thinkstation_p510_firmware -

lenovo thinkstation_p520_firmware -

lenovo thinkstation_p520c_firmware -

lenovo thinkstation_p700_firmware -

lenovo thinkstation_p710_firmware -

lenovo thinkstation_p720_firmware -

lenovo thinkstation_p900_firmware -

lenovo thinkstation_p910_firmware -

lenovo thinkstation_p920_firmware -

lenovo thinkstation_s30_refresh_firmware -

References

CWE-667https://support.lenovo.com/solutions/LEN-26332https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook