CVE-2019-6156
Low
Description
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.
SeverityLow
CVSS3.3
Exploit probability—
ProductLenovo 63 Firmware
PublishedApr 10, 2019
First seenApr 10, 2019
How to fix
Update
- lenovo ideacentre_510-15icb_firmwareo3qkt32a or later
- lenovo ideacentre_510a-15icb_firmwareo3qkt32a or later
- lenovo ideacentre_700_firmwarefwkt9aa or later
- lenovo ideacentre_720-18icb_firmwareo3qkt32a or later
- lenovo legion_c530-19icb_firmwareo3lkt20a or later
- lenovo legion_c730-19ico_firmwareo3nkt20a or later
- lenovo legion_t530-28icb_firmwareo3lkt20a or later
- lenovo legion_t730-28ico_firmwareo3nkt20a or later
- lenovo thinkcentre_e93_\(sff\)_firmwarefbktd5a or later
- lenovo thinkcentre_e93_\(twr\)_firmwarefbktd5a or later
- lenovo thinkcentre_m610_firmwarem1akt3fa or later
- lenovo thinkcentre_m6500t_firmwarefbktd5a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo lenovo_63_firmware | No range specified | — |
| lenovo 510-15ikl_firmware | No range specified | — |
| lenovo 510s-08ikl_firmware | No range specified | — |
| lenovo ideacentre_300-20ish_firmware | No range specified | — |
| lenovo ideacentre_300s-11ish_firmware | No range specified | — |
| lenovo ideacentre_510-15icb_firmware | v < o3qkt32a | o3qkt32a |
| lenovo ideacentre_510a-15icb_firmware | v < o3qkt32a | o3qkt32a |
| lenovo ideacentre_510s-08ish_firmware | No range specified | — |
| lenovo ideacentre_620s-03ikl_firmware | No range specified | — |
| lenovo ideacentre_700_firmware | v < fwkt9aa | fwkt9aa |
| lenovo ideacentre_720-18icb_firmware | v < o3qkt32a | o3qkt32a |
| lenovo legion_c530-19icb_firmware | v < o3lkt20a | o3lkt20a |
| lenovo legion_c730-19ico_firmware | v < o3nkt20a | o3nkt20a |
| lenovo legion_t530-28icb_firmware | v < o3lkt20a | o3lkt20a |
| lenovo legion_t730-28ico_firmware | v < o3nkt20a | o3nkt20a |
| lenovo legion_y520t_z370_firmware | No range specified | — |
| lenovo legion_y720_tower_firmware | No range specified | — |
| lenovo legion_y920_tower_firmware | No range specified | — |
| lenovo h50-30g_desktop_firmware | No range specified | — |
| lenovo m4500_firmware | No range specified | — |
| lenovo m4500_id_firmware | No range specified | — |
| lenovo m4550_id_firmware | No range specified | — |
| lenovo 530s-07icb_firmware | No range specified | — |
| lenovo qitian_4500_firmware | No range specified | — |
| lenovo qitian_b4550_firmware | No range specified | — |
| lenovo qitian_b4650_firmware | No range specified | — |
| lenovo qitian_m4550_firmware | No range specified | — |
| lenovo qitian_m4600_firmware | No range specified | — |
| lenovo qitian_m4650_firmware | No range specified | — |
| lenovo qt_m410_firmware | No range specified | — |
| lenovo qt_b415_firmware | No range specified | — |
| lenovo qt_m415_firmware | No range specified | — |
| lenovo thinkcentre_e73_\(sff\)_firmware | No range specified | — |
| lenovo thinkcentre_e73_\(twr\)_firmware | No range specified | — |
| lenovo thinkcentre_e73s_firmware | No range specified | — |
| lenovo thinkcentre_e74_firmware | No range specified | — |
| lenovo thinkcentre_e74s_firmware | No range specified | — |
| lenovo thinkcentre_e75t_firmware | No range specified | — |
| lenovo thinkcentre_e75s_firmware | No range specified | — |
| lenovo thinkcentre_e93_\(sff\)_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_e93_\(twr\)_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_m4500k_firmware | No range specified | — |
| lenovo thinkcentre_m4500q_firmware | No range specified | — |
| lenovo thinkcentre_m4500t_firmware | No range specified | — |
| lenovo thinkcentre_m4500s_firmware | No range specified | — |
| lenovo thinkcentre_m4600t_firmware | No range specified | — |
| lenovo thinkcentre_m4600s_firmware | No range specified | — |
| lenovo thinkcentre_m610_firmware | v < m1akt3fa | m1akt3fa |
| lenovo thinkcentre_m6500t_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_m6500s_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_m6600_firmware | v < fwkt9aa | fwkt9aa |
| lenovo thinkcentre_m6600q_firmware | v < fwkt9aa | fwkt9aa |
| lenovo thinkcentre_m6600t_firmware | v < fwkt9aa | fwkt9aa |
| lenovo thinkcentre_m6600s_firmware | v < fwkt9aa | fwkt9aa |
| lenovo thinkcentre_m700q_firmware | v < fwkt9aa | fwkt9aa |
| lenovo thinkcentre_m700t_firmware | No range specified | — |
| lenovo thinkcentre_m700s_firmware | No range specified | — |
| lenovo thinkcentre_m710e_firmware | No range specified | — |
| lenovo thinkcentre_m710q_firmware | v < m1akt3fa | m1akt3fa |
| lenovo thinkcentre_m710t_firmware | No range specified | — |
| lenovo thinkcentre_m710s_firmware | No range specified | — |
| lenovo thinkcentre_m720q_firmware | v < m1ukt33a | m1ukt33a |
| lenovo thinkcentre_m720t_firmware | v ≤ m1ukt33a | — |
| lenovo thinkcentre_m720s_firmware | v < m1ukt33a | m1ukt33a |
| lenovo thinkcentre_m73_\(sff\)_firmware | No range specified | — |
| lenovo thinkcentre_m73_\(twr\)_firmware | No range specified | — |
| lenovo thinkcentre_m73_tiny_firmware | No range specified | — |
| lenovo thinkcentre_m73p_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_m800_firmware | v < fwkt9aa | fwkt9aa |
| lenovo thinkcentre_m83_\(sff\)_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_m83_\(tiny\)_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_m83_\(twr\)_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_m8500t_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_m8500s_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_m8600t_firmware | v < fwkt9aa | fwkt9aa |
| lenovo thinkcentre_m8600s_firmware | v < fwkt9aa | fwkt9aa |
| lenovo thinkcentre_m900_firmware | v < fwkt9aa | fwkt9aa |
| lenovo thinkcentre_m910t_firmware | v < m1akt3fa | m1akt3fa |
| lenovo thinkcentre_m910s_firmware | v < m1akt3fa | m1akt3fa |
| lenovo thinkcentre_m910q_firmware | v < m1akt3fa | m1akt3fa |
| lenovo thinkcentre_m910x_firmware | v < m1akt3fa | m1akt3fa |
| lenovo thinkcentre_m920q_firmware | v < m1ukt33a | m1ukt33a |
| lenovo thinkcentre_m920x_firmware | v < m1ukt33a | m1ukt33a |
| lenovo thinkcentre_m920t_firmware | v < m1ukt33a | m1ukt33a |
| lenovo thinkcentre_m920s_firmware | v < m1ukt33a | m1ukt33a |
| lenovo thinkcentre_m93_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_m93p_\(sff\)_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_m93p_\(twr\)_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_m93p_tiny_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkcentre_s510_firmware | No range specified | — |
| lenovo v520s-08ikl_firmware | No range specified | — |
| lenovo v520t-15ikl_firmware | No range specified | — |
| lenovo yangtian_afh110_firmware | No range specified | — |
| lenovo yangtian_afh81_firmware | No range specified | — |
| lenovo yangtian_afq150_firmware | v < fwkt9aa | fwkt9aa |
| lenovo yangtian_mc_h110_firmware | No range specified | — |
| lenovo yangtian_mc_h110_pci_firmware | No range specified | — |
| lenovo yangtian_mc_h81_firmware | No range specified | — |
| lenovo yangtian_me\/we_h110_firmware | No range specified | — |
| lenovo yangtian_mf\/wf_h110_pci_firmware | No range specified | — |
| lenovo yangtian_mf\/wf_h81_pci_firmware | No range specified | — |
| lenovo yangtian_ms\/ws_h81_firmware | No range specified | — |
| lenovo yangtian_tc\/wc_h110_pci_firmware | No range specified | — |
| lenovo yangtian_tc\/wcc_h81_pci_firmware | No range specified | — |
| lenovo yangtian_ytm6900e-00_firmware | No range specified | — |
| lenovo yta8900f_firmware | v < fwkt9aa | fwkt9aa |
| lenovo aio_910-27ish_firmware | v < o37kt13a | o37kt13a |
| lenovo aio_y910-27ish_firmware | No range specified | — |
| lenovo aio300-23isu\(c5130\)_firmware | v < o1lkt46a | o1lkt46a |
| lenovo aio520-22ikl_firmware | No range specified | — |
| lenovo aio520-22iku_firmware | No range specified | — |
| lenovo aio520-24ikl_firmware | No range specified | — |
| lenovo aio520-24iku_firmware | No range specified | — |
| lenovo aio520-27ikl_firmware | No range specified | — |
| lenovo ideacentre_520s-23iku_firmware | v < o34kt23a | o34kt23a |
| lenovo ideacentre_730s-24ikb_firmware | v < o3wkt15a | o3wkt15a |
| lenovo qt_a7400_firmware | No range specified | — |
| lenovo thinkcenter_m700z_firmware | No range specified | — |
| lenovo thinkcenter_m800z_firmware | No range specified | — |
| lenovo thinkcentre_e74z_firmware | No range specified | — |
| lenovo thinkcentre_e95z_firmware | v < m1lkt20a | m1lkt20a |
| lenovo thinkcentre_e96z_firmware | v < m26kt11a | m26kt11a |
| lenovo thinkcentre_m700z_firmware | No range specified | — |
| lenovo thinkcentre_m7300z_firmware | No range specified | — |
| lenovo thinkcentre_m800z_firmware | No range specified | — |
| lenovo thinkcentre_m810z_firmware | No range specified | — |
| lenovo thinkcentre_m818z_firmware | No range specified | — |
| lenovo thinkcentre_m820z_firmware | No range specified | — |
| lenovo thinkcentre_m8300z_firmware | No range specified | — |
| lenovo thinkcentre_m8350z_firmware | No range specified | — |
| lenovo thinkcentre_m83z_\(aio\)_firmware | No range specified | — |
| lenovo thinkcentre_m900z_firmware | No range specified | — |
| lenovo thinkcentre_m910z_firmware | No range specified | — |
| lenovo thinkcentre_m920z_firmware | No range specified | — |
| lenovo thinkcentre_m9500z_firmware | No range specified | — |
| lenovo thinkcentre_m9550z_firmware | No range specified | — |
| lenovo thinkcentre_x1_aio_firmware | No range specified | — |
| lenovo v310z\(yt_s3150\)_firmware | v < m18kt25a | m18kt25a |
| lenovo v410z\(yt_s4250\)_firmware | v < m17kt41a | m17kt41a |
| lenovo v510z_\(yt_s5250\)_firmware | v < m1dkt26a | m1dkt26a |
| lenovo v530-22icb\(yt_s4350\)_firmware | v < m20kt38a | m20kt38a |
| lenovo v530-24icb\(yt_s5350\)_firmware | v < m20kt38a | m20kt38a |
| lenovo 330-14igm_firmware | v < 7xcn30ww | 7xcn30ww |
| lenovo 330-15igm_firmware | v < 7xcn30ww | 7xcn30ww |
| lenovo thinkpad_e480_firmware | v < r0pet54w | r0pet54w |
| lenovo thinkpad_e580_firmware | v < r0pet54w | r0pet54w |
| lenovo thinkpad_e570p_firmware | v < r0met46w | r0met46w |
| lenovo thinkpad_s5_firmware | v < r0met46w, v < r09et70w | r0met46w, r09et70w |
| lenovo thinkpad_l480_firmware | v < r0qet54w | r0qet54w |
| lenovo thinkpad_l580_firmware | v < r0qet54w | r0qet54w |
| lenovo thinkpad_e560p_firmware | v < r09et70w | r09et70w |
| lenovo thinkpad_t460_firmware | v < r06et66w | r06et66w |
| lenovo thinkpad_t460p_firmware | v < r07et88w | r07et88w |
| lenovo thinkpad_x260_firmware | v < r02et70w | r02et70w |
| lenovo thinkpad_x380_yoga_firmware | v < r0set42w | r0set42w |
| lenovo thinkstation_c30_refresh_firmware | No range specified | — |
| lenovo thinkstation_d30_refresh_firmware | No range specified | — |
| lenovo thinkstation_e32_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkstation_p300_firmware | v < fbktd5a | fbktd5a |
| lenovo thinkstation_p310_firmware | No range specified | — |
| lenovo thinkstation_p318_firmware | v < m1akt3fa | m1akt3fa |
| lenovo thinkstation_p320_firmware | v < s06kt40a | s06kt40a |
| lenovo thinkstation_p320_tiny_firmware | v < m1akt3fa | m1akt3fa |
| lenovo thinkstation_p330_firmware | v < m1vkt34a | m1vkt34a |
| lenovo thinkstation_p330_tiny_firmware | v < m1ukt33a | m1ukt33a |
| lenovo thinkstation_p410_firmware | No range specified | — |
| lenovo thinkstation_p500_firmware | No range specified | — |
| lenovo thinkstation_p510_firmware | No range specified | — |
| lenovo thinkstation_p520_firmware | No range specified | — |
| lenovo thinkstation_p520c_firmware | No range specified | — |
| lenovo thinkstation_p700_firmware | No range specified | — |
| lenovo thinkstation_p710_firmware | No range specified | — |
| lenovo thinkstation_p720_firmware | No range specified | — |
| lenovo thinkstation_p900_firmware | No range specified | — |
| lenovo thinkstation_p910_firmware | No range specified | — |
| lenovo thinkstation_p920_firmware | No range specified | — |
| lenovo thinkstation_s30_refresh_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.