510 15Ikl Firmware CVE-2019-6156

LOW

Improper Locking (CWE-667)

2019-04-10 psirt@lenovo.com

Lenovo Information Disclosure 510 15Ikl Firmware 510S 08Ikl Firmware Ideacentre 300 20Ish Firmware Ideacentre 300S 11Ish Firmware Ideacentre 510 15Icb Firmware Ideacentre 510A 15Icb Firmware Ideacentre 510S 08Ish Firmware Ideacentre 620S 03Ikl Firmware Ideacentre 700 Firmware Ideacentre 720 18Icb Firmware Legion C530 19Icb Firmware Legion C730 19Ico Firmware Legion T530 28Icb Firmware Legion T730 28Ico Firmware Legion Y520T Z370 Firmware Legion Y720 Tower Firmware Legion Y920 Tower Firmware Lenovo 63 Firmware H50 30G Desktop Firmware M4500 Firmware M4500 Id Firmware M4550 Id Firmware 530S 07Icb Firmware Qitian 4500 Firmware Qitian B4550 Firmware Qitian B4650 Firmware Qitian M4550 Firmware Qitian M4600 Firmware Qitian M4650 Firmware Qt M410 Firmware Qt B415 Firmware Qt M415 Firmware Thinkcentre E73 Sff Firmware Thinkcentre E73 Twr Firmware Thinkcentre E73S Firmware Thinkcentre E74 Firmware Thinkcentre E74S Firmware Thinkcentre E75T Firmware Thinkcentre E75S Firmware Thinkcentre E93 Sff Firmware Thinkcentre E93 Twr Firmware Thinkcentre M4500K Firmware Thinkcentre M4500Q Firmware Thinkcentre M4500T Firmware Thinkcentre M4500S Firmware Thinkcentre M4600T Firmware Thinkcentre M4600S Firmware Thinkcentre M610 Firmware Thinkcentre M6500T Firmware Thinkcentre M6500S Firmware Thinkcentre M6600 Firmware Thinkcentre M6600Q Firmware Thinkcentre M6600T Firmware Thinkcentre M6600S Firmware Thinkcentre M700Q Firmware Thinkcentre M700T Firmware Thinkcentre M700S Firmware Thinkcentre M710E Firmware Thinkcentre M710Q Firmware Thinkcentre M710T Firmware Thinkcentre M710S Firmware Thinkcentre M720Q Firmware Thinkcentre M720T Firmware Thinkcentre M720S Firmware Thinkcentre M73 Sff Firmware Thinkcentre M73 Twr Firmware Thinkcentre M73 Tiny Firmware Thinkcentre M73P Firmware Thinkcentre M800 Firmware Thinkcentre M83 Sff Firmware Thinkcentre M83 Tiny Firmware Thinkcentre M83 Twr Firmware Thinkcentre M8500T Firmware Thinkcentre M8500S Firmware Thinkcentre M8600T Firmware Thinkcentre M8600S Firmware Thinkcentre M900 Firmware Thinkcentre M910T Firmware Thinkcentre M910S Firmware Thinkcentre M910Q Firmware Thinkcentre M910X Firmware Thinkcentre M920Q Firmware Thinkcentre M920X Firmware Thinkcentre M920T Firmware Thinkcentre M920S Firmware Thinkcentre M93 Firmware Thinkcentre M93P Sff Firmware Thinkcentre M93P Twr Firmware Thinkcentre M93P Tiny Firmware Thinkcentre S510 Firmware V520S 08Ikl Firmware V520T 15Ikl Firmware Yangtian Afh110 Firmware Yangtian Afh81 Firmware Yangtian Afq150 Firmware Yangtian Mc H110 Firmware Yangtian Mc H110 Pci Firmware Yangtian Mc H81 Firmware Yangtian Me We H110 Firmware Yangtian Mf Wf H110 Pci Firmware Yangtian Mf Wf H81 Pci Firmware Yangtian Ms Ws H81 Firmware Yangtian Tc Wc H110 Pci Firmware Yangtian Tc Wcc H81 Pci Firmware Yangtian Ytm6900E 00 Firmware Yta8900F Firmware Aio 910 27Ish Firmware Aio Y910 27Ish Firmware Aio300 23Isu C5130 Firmware Aio520 22Ikl Firmware Aio520 22Iku Firmware Aio520 24Ikl Firmware Aio520 24Iku Firmware Aio520 27Ikl Firmware Ideacentre 520S 23Iku Firmware Ideacentre 730S 24Ikb Firmware Qt A7400 Firmware Thinkcenter M700Z Firmware Thinkcenter M800Z Firmware Thinkcentre E74Z Firmware Thinkcentre E95Z Firmware Thinkcentre E96Z Firmware Thinkcentre M700Z Firmware Thinkcentre M7300Z Firmware Thinkcentre M800Z Firmware Thinkcentre M810Z Firmware Thinkcentre M818Z Firmware Thinkcentre M820Z Firmware Thinkcentre M8300Z Firmware Thinkcentre M8350Z Firmware Thinkcentre M83Z Aio Firmware Thinkcentre M900Z Firmware Thinkcentre M910Z Firmware Thinkcentre M920Z Firmware Thinkcentre M9500Z Firmware Thinkcentre M9550Z Firmware Thinkcentre X1 Aio Firmware V310Z Yt S3150 Firmware V410Z Yt S4250 Firmware V510Z Yt S5250 Firmware V530 22Icb Yt S4350 Firmware V530 24Icb Yt S5350 Firmware 330 14Igm Firmware 330 15Igm Firmware Thinkpad E480 Firmware Thinkpad E580 Firmware Thinkpad E570P Firmware Thinkpad S5 Firmware Thinkpad L480 Firmware Thinkpad L580 Firmware Thinkpad E560P Firmware Thinkpad T460 Firmware Thinkpad T460P Firmware Thinkpad X260 Firmware Thinkpad X380 Yoga Firmware Thinkstation C30 Refresh Firmware Thinkstation D30 Refresh Firmware Thinkstation E32 Firmware Thinkstation P300 Firmware Thinkstation P310 Firmware Thinkstation P318 Firmware Thinkstation P320 Firmware Thinkstation P320 Tiny Firmware Thinkstation P330 Firmware Thinkstation P330 Tiny Firmware Thinkstation P410 Firmware Thinkstation P500 Firmware Thinkstation P510 Firmware Thinkstation P520 Firmware Thinkstation P520C Firmware Thinkstation P700 Firmware Thinkstation P710 Firmware Thinkstation P720 Firmware Thinkstation P900 Firmware Thinkstation P910 Firmware Thinkstation P920 Firmware Thinkstation S30 Refresh Firmware

3.3

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

3.3 LOW

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

1

CVE Published

Apr 10, 2019 - 17:29 nvd

LOW 3.3

DescriptionNVD

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.

AnalysisAI

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-667. In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected. Affected products include: Lenovo 510-15Ikl Firmware, Lenovo 510S-08Ikl Firmware, Lenovo Ideacentre 300-20Ish Firmware, Lenovo Ideacentre 300S-11Ish Firmware, Lenovo Ideacentre 510-15Icb Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in 510 15Ikl Firmware

View all

CVE-2019-6188 CRITICAL Act Now

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p,

CVE-2019-6172 MEDIUM This Month

A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficie

CVE-2019-6170 MEDIUM This Month

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in ru

Same weakness CWE-667 – Improper Locking

View all

CVE-2025-43510 HIGH POC

CVE-2019-5886 CRITICAL POC

CVE-2020-13246 HIGH POC

CVE-2019-15513 HIGH POC

CVE-2019-11599 HIGH POC

CVE-2023-21400 MEDIUM POC

CVE-2021-20291 MEDIUM POC

CVE-2020-12658 CRITICAL

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2019-6156 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy