ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-6156

—
CVSS 3.0
3.3 low
EPSS
<1%p15
Published
()
Modified
Description

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.

Vendors
lenovo
Products
510-15ikl firmware, 510s-08ikl firmware, ideacentre 300-20ish firmware, ideacentre 300s-11ish firmware, ideacentre 510-15icb firmware, ideacentre 510a-15icb firmware, ideacentre 510s-08ish firmware, ideacentre 620s-03ikl firmware, ideacentre 700 firmware, ideacentre 720-18icb firmware, legion c530-19icb firmware, legion c730-19ico firmware
Weakness
CWE-667
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.