low3.3
CVE-2019-6156
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash.
Impact
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | 510-15ikl Firmware | All versions |
| Lenovo | 510s-08ikl Firmware | All versions |
| Lenovo | Ideacentre 300-20ish Firmware | All versions |
| Lenovo | Ideacentre 300s-11ish Firmware | All versions |
| Lenovo | Ideacentre 510-15icb Firmware | before o3qkt32a |
| Lenovo | Ideacentre 510a-15icb Firmware | before o3qkt32a |
| Lenovo | Ideacentre 510s-08ish Firmware | All versions |
| Lenovo | Ideacentre 620s-03ikl Firmware | All versions |
| Lenovo | Ideacentre 700 Firmware | before fwkt9aa |
| Lenovo | Ideacentre 720-18icb Firmware | before o3qkt32a |
| Lenovo | Legion C530-19icb Firmware | before o3lkt20a |
| Lenovo | Legion C730-19ico Firmware | before o3nkt20a |