var-201904-0088
Vulnerability from variot
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected. Lenovo There are vulnerabilities related to security functions in the system.Information may be tampered with. Lenovo 510-15IKL and others are all desktop computers produced by China Lenovo (Lenovo). This vulnerability is due to the lack of security measures such as authentication, access control, and rights management in network systems or products. The following products are affected: Lenovo 510-15IKL; 510S-08IKL; IdeaCentre 300-20ISH; IdeaCentre 300S-11ISH; IdeaCentre 510-15ICB;
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201904-0088", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "thinkcentre m83 \\", "scope": "lt", "trust": 3.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre m93p \\", "scope": "lt", "trust": 2.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre m73 \\", "scope": "eq", "trust": 2.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre e93 \\", "scope": "lt", "trust": 2.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre e73 \\", "scope": "eq", "trust": 2.0, "vendor": "lenovo", "version": null }, { "model": "yangtian mc h81", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m818z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m73 tiny", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p300", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "530s-07icb", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "qitian m4650", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m800", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "yangtian mc h110 pci", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m9550z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p900", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian mf\\/wf h110 pci", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "ideacentre 300s-11ish", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m7300z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre e73s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian mf\\/wf h81 pci", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p318", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "thinkstation p710", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m920z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m920x", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "v520s-08ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "qitian m4600", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m4500q", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m900", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkpad x260", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r02et70w" }, { "model": "qt b415", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m6600q", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "510s-08ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "ideacentre 300-20ish", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation e32", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre m93", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "ideacentre 620s-03ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "v530-24icb\\", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m20kt38a" }, { "model": "thinkcentre m900z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "v520t-15ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "63", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m8500s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "legion t530-28icb", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3lkt20a" }, { "model": "yangtian ytm6900e-00", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "legion c730-19ico", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3nkt20a" }, { "model": "yangtian mc h110", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p510", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "m4550 id", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "v510z \\", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1dkt26a" }, { "model": "thinkstation p500", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "legion c530-19icb", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3lkt20a" }, { "model": "thinkcentre e74z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m93p tiny", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre m720t", "scope": "lte", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "aio520-24iku", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m820z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m9500z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre e75t", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m8600s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkcentre m710q", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "thinkcentre e74s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian afq150", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkcentre m920q", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "thinkcentre m73p", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkstation c30 refresh", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m700z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m920t", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "thinkcentre m920s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "yangtian afh110", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian ms\\/ws h81", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "qt m415", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m910x", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "thinkstation p520c", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m6500t", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre m910s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "thinkcentre m83z \\", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation s30 refresh", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkpad s5", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r09et70w" }, { "model": "ideacentre 730s-24ikb", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3wkt15a" }, { "model": "aio520-22iku", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m8300z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "v530-22icb\\", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m20kt38a" }, { "model": "thinkpad e580", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0pet54w" }, { "model": "thinkpad t460", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r06et66w" }, { "model": "thinkcentre e96z", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m26kt11a" }, { "model": "510-15ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "aio520-27ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yta8900f", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "m4500 id", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian me\\/we h110", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkpad l580", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0qet54w" }, { "model": "thinkstation p320", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "s06kt40a" }, { "model": "thinkcentre m8600t", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "ideacentre 700", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkcentre m700s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m910t", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "thinkstation p910", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkpad t460p", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r07et88w" }, { "model": "thinkcentre m710s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m720s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "thinkcentre m800z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkpad e480", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0pet54w" }, { "model": "qitian m4550", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m4500k", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m6500s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkpad x380 yoga", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0set42w" }, { "model": "thinkcentre m910z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p330", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1vkt34a" }, { "model": "ideacentre 510s-08ish", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcenter m700z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p520", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p920", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation d30 refresh", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m6600t", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkcentre x1 aio", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "ideacentre 520s-23iku", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o34kt23a" }, { "model": "thinkcentre m700t", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m700q", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkstation p330 tiny", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "thinkcentre m720q", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "thinkcentre m910q", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "qt a7400", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p720", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre e74", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkpad e560p", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r09et70w" }, { "model": "ideacentre 510-15icb", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3qkt32a" }, { "model": "thinkcentre m4500s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian afh81", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "legion y720 tower", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "330-15igm", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "7xcn30ww" }, { "model": "qitian b4650", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "ideacentre 510a-15icb", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3qkt32a" }, { "model": "thinkcentre e75s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m6600", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "qitian 4500", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "aio y910-27ish", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "v310z\\", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m18kt25a" }, { "model": "thinkcentre m8350z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "aio520-22ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "aio520-24ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "legion t730-28ico", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3nkt20a" }, { "model": "thinkcentre s510", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "qitian b4550", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcenter m800z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "legion y520t z370", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "legion y920 tower", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "aio300-23isu\\", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o1lkt46a" }, { "model": "qt m410", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p700", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p310", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m710t", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkpad e570p", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0met46w" }, { "model": "thinkpad l480", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0qet54w" }, { "model": "thinkcentre e95z", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1lkt20a" }, { "model": "v410z\\", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m17kt41a" }, { "model": "thinkpad s5", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0met46w" }, { "model": "h50-30g desktop", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "ideacentre 720-18icb", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3qkt32a" }, { "model": "thinkcentre m4500t", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m610", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "yangtian tc\\/wcc h81 pci", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p320 tiny", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "thinkstation p410", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian tc\\/wc h110 pci", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m6600s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkcentre m710e", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "330-14igm", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "7xcn30ww" }, { "model": "thinkcentre m4600t", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m810z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m4600s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "aio 910-27ish", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o37kt13a" }, { "model": "m4500", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m8500t", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "510-15ikl", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "510s-08ikl", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 300-20ish", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 300s-11ish", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 510-15icb", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 510a-15icb", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 510s-08ish", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 620s-03ikl", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 700", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 720-18icb", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "NVD", "id": "CVE-2019-6156" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/o:lenovo:510-15ikl_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:510s-08ikl_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_300-20ish_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_300s-11ish_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_510-15icb_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_510a-15icb_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_510s-08ish_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_620s-03ikl_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_700_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_720-18icb_firmware", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2019-003417" } ] }, "cve": "CVE-2019-6156", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "NONE", "exploitabilityScore": 3.9, "id": "CVE-2019-6156", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "LOW", "trust": 1.8, "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "NONE", "exploitabilityScore": 3.9, "id": "VHN-157591", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "LOW", "trust": 0.1, "vectorString": "AV:L/AC:L/AU:N/C:N/I:P/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "LOCAL", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "exploitabilityScore": 1.8, "id": "CVE-2019-6156", "impactScore": 1.4, "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "trust": 1.8, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2019-6156", "trust": 1.0, "value": "LOW" }, { "author": "NVD", "id": "CVE-2019-6156", "trust": 0.8, "value": "Low" }, { "author": "CNNVD", "id": "CNNVD-201904-304", "trust": 0.6, "value": "LOW" }, { "author": "VULHUB", "id": "VHN-157591", "trust": 0.1, "value": "LOW" } ] } ], "sources": [ { "db": "VULHUB", "id": "VHN-157591" }, { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "CNNVD", "id": "CNNVD-201904-304" }, { "db": "NVD", "id": "CVE-2019-6156" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected. Lenovo There are vulnerabilities related to security functions in the system.Information may be tampered with. Lenovo 510-15IKL and others are all desktop computers produced by China Lenovo (Lenovo). This vulnerability is due to the lack of security measures such as authentication, access control, and rights management in network systems or products. The following products are affected: Lenovo 510-15IKL; 510S-08IKL; IdeaCentre 300-20ISH; IdeaCentre 300S-11ISH; IdeaCentre 510-15ICB;", "sources": [ { "db": "NVD", "id": "CVE-2019-6156" }, { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "VULHUB", "id": "VHN-157591" } ], "trust": 1.71 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2019-6156", "trust": 2.5 }, { "db": "LENOVO", "id": "LEN-26332", "trust": 1.7 }, { "db": "JVNDB", "id": "JVNDB-2019-003417", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201904-304", "trust": 0.7 }, { "db": "VULHUB", "id": "VHN-157591", "trust": 0.1 } ], "sources": [ { "db": "VULHUB", "id": "VHN-157591" }, { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "CNNVD", "id": "CNNVD-201904-304" }, { "db": "NVD", "id": "CVE-2019-6156" } ] }, "id": "VAR-201904-0088", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-157591" } ], "trust": 0.49312232999999994 }, "last_update_date": "2024-11-23T22:37:53.947000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "LEN-26332", "trust": 0.8, "url": "https://support.lenovo.com/solutions/LEN-26332" }, { "title": "Multiple Lenovo Product security vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=91143" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "CNNVD", "id": "CNNVD-201904-304" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-667", "trust": 1.1 }, { "problemtype": "CWE-254", "trust": 0.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-157591" }, { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "NVD", "id": "CVE-2019-6156" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.7, "url": "https://support.lenovo.com/solutions/len-26332" }, { "trust": 1.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-6156" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-6156" }, { "trust": 0.6, "url": "https://support.lenovo.com/us/en/product_security/len-26332" } ], "sources": [ { "db": "VULHUB", "id": "VHN-157591" }, { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "CNNVD", "id": "CNNVD-201904-304" }, { "db": "NVD", "id": "CVE-2019-6156" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "VULHUB", "id": "VHN-157591" }, { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "CNNVD", "id": "CNNVD-201904-304" }, { "db": "NVD", "id": "CVE-2019-6156" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2019-04-10T00:00:00", "db": "VULHUB", "id": "VHN-157591" }, { "date": "2019-05-16T00:00:00", "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "date": "2019-04-04T00:00:00", "db": "CNNVD", "id": "CNNVD-201904-304" }, { "date": "2019-04-10T17:29:00.463000", "db": "NVD", "id": "CVE-2019-6156" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2020-08-24T00:00:00", "db": "VULHUB", "id": "VHN-157591" }, { "date": "2019-05-16T00:00:00", "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "date": "2020-08-25T00:00:00", "db": "CNNVD", "id": "CNNVD-201904-304" }, { "date": "2024-11-21T04:46:02.577000", "db": "NVD", "id": "CVE-2019-6156" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "local", "sources": [ { "db": "CNNVD", "id": "CNNVD-201904-304" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Lenovo Vulnerabilities related to security functions in the system", "sources": [ { "db": "JVNDB", "id": "JVNDB-2019-003417" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "security feature problem", "sources": [ { "db": "CNNVD", "id": "CNNVD-201904-304" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.