var-201904-0088
Vulnerability from variot
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected. Lenovo There are vulnerabilities related to security functions in the system.Information may be tampered with. Lenovo 510-15IKL and others are all desktop computers produced by China Lenovo (Lenovo). This vulnerability is due to the lack of security measures such as authentication, access control, and rights management in network systems or products. The following products are affected: Lenovo 510-15IKL; 510S-08IKL; IdeaCentre 300-20ISH; IdeaCentre 300S-11ISH; IdeaCentre 510-15ICB;
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201904-0088", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "thinkcentre m83 \\", "scope": "lt", "trust": 3.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre e93 \\", "scope": "lt", "trust": 2.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre m93p \\", "scope": "lt", "trust": 2.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre m73 \\", "scope": "eq", "trust": 2.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre e73 \\", "scope": "eq", "trust": 2.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m8500s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre m700t", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "aio y910-27ish", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre x1 aio", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian afh110", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkpad e480", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0pet54w" }, { "model": "thinkcentre m920z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "qt m415", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p900", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian tc\\/wcc h81 pci", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "ideacentre 720-18icb", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3qkt32a" }, { "model": "thinkcentre m920x", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "thinkpad e560p", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r09et70w" }, { "model": "ideacentre 510s-08ish", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian afh81", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m920s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "thinkcentre m910z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m910x", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "thinkcentre e96z", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m26kt11a" }, { "model": "thinkstation p700", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian mf\\/wf h110 pci", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "510s-08ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkpad l580", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0qet54w" }, { "model": "aio520-22ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m4500s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m720t", "scope": "lte", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "h50-30g desktop", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m700s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m93", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkstation p910", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "v520t-15ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre e73s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "ideacentre 730s-24ikb", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3wkt15a" }, { "model": "thinkstation p318", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "yangtian ms\\/ws h81", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p300", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "m4500 id", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "aio520-24iku", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m4500t", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcenter m700z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m6600q", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "yangtian mc h110 pci", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m710q", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "thinkcentre m6600s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkcentre m910t", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "thinkcentre m9550z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre e74s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p330", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1vkt34a" }, { "model": "qitian m4550", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "aio520-27ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m6500t", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre m710t", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m700z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkpad l480", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0qet54w" }, { "model": "thinkstation p310", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p320", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "s06kt40a" }, { "model": "thinkstation p720", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m910q", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "thinkpad s5", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0met46w" }, { "model": "thinkcentre e95z", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1lkt20a" }, { "model": "thinkcentre m8500t", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre m8600t", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkcentre m610", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "thinkcentre m800z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian me\\/we h110", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "legion t730-28ico", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3nkt20a" }, { "model": "thinkcentre m73 tiny", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre e74z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkpad s5", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r09et70w" }, { "model": "thinkcentre m9500z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre e74", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian mc h81", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkpad t460", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r06et66w" }, { "model": "thinkstation p520", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "ideacentre 300s-11ish", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m4500q", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "legion t530-28icb", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3lkt20a" }, { "model": "thinkpad e580", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0pet54w" }, { "model": "thinkcentre m920t", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "thinkpad t460p", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r07et88w" }, { "model": "legion y920 tower", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation c30 refresh", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m700q", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkcentre m93p tiny", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre m710s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "qitian 4500", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m73p", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "thinkcentre m810z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "legion c730-19ico", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3nkt20a" }, { "model": "thinkcentre s510", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkpad x380 yoga", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0set42w" }, { "model": "thinkcentre m720q", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "thinkstation s30 refresh", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p330 tiny", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "qt m410", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m720s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "v530-22icb\\", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m20kt38a" }, { "model": "thinkcentre m7300z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m6600t", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkstation p410", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "63", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "v310z\\", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m18kt25a" }, { "model": "thinkstation p710", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "ideacentre 620s-03ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m4500k", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "ideacentre 510-15icb", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3qkt32a" }, { "model": "m4550 id", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m900", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "ideacentre 300-20ish", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre e75t", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian mf\\/wf h81 pci", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "330-15igm", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "7xcn30ww" }, { "model": "aio 910-27ish", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o37kt13a" }, { "model": "510-15ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian mc h110", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "qitian m4600", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "qt b415", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "aio520-22iku", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m8350z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m83z \\", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m710e", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m900z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m6500s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "aio300-23isu\\", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o1lkt46a" }, { "model": "thinkcentre m4600s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m920q", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1ukt33a" }, { "model": "ideacentre 700", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "m4500", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yangtian tc\\/wc h110 pci", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "yta8900f", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkcentre m818z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre e75s", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "legion c530-19icb", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3lkt20a" }, { "model": "thinkcentre m8600s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "yangtian afq150", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkstation p320 tiny", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "thinkstation d30 refresh", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "qitian b4650", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation e32", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fbktd5a" }, { "model": "ideacentre 520s-23iku", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o34kt23a" }, { "model": "330-14igm", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "7xcn30ww" }, { "model": "yangtian ytm6900e-00", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "qitian m4650", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "v410z\\", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m17kt41a" }, { "model": "thinkcentre m910s", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1akt3fa" }, { "model": "thinkpad x260", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r02et70w" }, { "model": "qitian b4550", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p920", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "ideacentre 510a-15icb", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "o3qkt32a" }, { "model": "thinkcentre m4600t", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkpad e570p", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "r0met46w" }, { "model": "thinkcentre m6600", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "legion y520t z370", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p520c", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "legion y720 tower", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "v530-24icb\\", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m20kt38a" }, { "model": "thinkcentre m820z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "v510z \\", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "m1dkt26a" }, { "model": "aio520-24ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "530s-07icb", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "v520s-08ikl", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p500", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkstation p510", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcenter m800z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "thinkcentre m800", "scope": "lt", "trust": 1.0, "vendor": "lenovo", "version": "fwkt9aa" }, { "model": "thinkcentre m8300z", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "qt a7400", "scope": "eq", "trust": 1.0, "vendor": "lenovo", "version": null }, { "model": "510-15ikl", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "510s-08ikl", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 300-20ish", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 300s-11ish", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 510-15icb", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 510a-15icb", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 510s-08ish", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 620s-03ikl", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 700", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null }, { "model": "ideacentre 720-18icb", "scope": null, "trust": 0.8, "vendor": "lenovo", "version": null } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "NVD", "id": "CVE-2019-6156" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/o:lenovo:510-15ikl_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:510s-08ikl_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_300-20ish_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_300s-11ish_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_510-15icb_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_510a-15icb_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_510s-08ish_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_620s-03ikl_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_700_firmware", "vulnerable": true }, { "cpe22Uri": "cpe:/o:lenovo:ideacentre_720-18icb_firmware", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2019-003417" } ] }, "cve": "CVE-2019-6156", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "NONE", "exploitabilityScore": 3.9, "id": "CVE-2019-6156", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "LOW", "trust": 1.8, "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "NONE", "exploitabilityScore": 3.9, "id": "VHN-157591", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "LOW", "trust": 0.1, "vectorString": "AV:L/AC:L/AU:N/C:N/I:P/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "LOCAL", "author": "nvd@nist.gov", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "exploitabilityScore": 1.8, "id": "CVE-2019-6156", "impactScore": 1.4, "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "trust": 1.8, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2019-6156", "trust": 1.0, "value": "LOW" }, { "author": "NVD", "id": "CVE-2019-6156", "trust": 0.8, "value": "Low" }, { "author": "CNNVD", "id": "CNNVD-201904-304", "trust": 0.6, "value": "LOW" }, { "author": "VULHUB", "id": "VHN-157591", "trust": 0.1, "value": "LOW" } ] } ], "sources": [ { "db": "VULHUB", "id": "VHN-157591" }, { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "CNNVD", "id": "CNNVD-201904-304" }, { "db": "NVD", "id": "CVE-2019-6156" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected. Lenovo There are vulnerabilities related to security functions in the system.Information may be tampered with. Lenovo 510-15IKL and others are all desktop computers produced by China Lenovo (Lenovo). This vulnerability is due to the lack of security measures such as authentication, access control, and rights management in network systems or products. The following products are affected: Lenovo 510-15IKL; 510S-08IKL; IdeaCentre 300-20ISH; IdeaCentre 300S-11ISH; IdeaCentre 510-15ICB;", "sources": [ { "db": "NVD", "id": "CVE-2019-6156" }, { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "VULHUB", "id": "VHN-157591" } ], "trust": 1.71 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2019-6156", "trust": 2.5 }, { "db": "LENOVO", "id": "LEN-26332", "trust": 1.7 }, { "db": "JVNDB", "id": "JVNDB-2019-003417", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201904-304", "trust": 0.7 }, { "db": "VULHUB", "id": "VHN-157591", "trust": 0.1 } ], "sources": [ { "db": "VULHUB", "id": "VHN-157591" }, { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "CNNVD", "id": "CNNVD-201904-304" }, { "db": "NVD", "id": "CVE-2019-6156" } ] }, "id": "VAR-201904-0088", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "VULHUB", "id": "VHN-157591" } ], "trust": 0.49312232999999994 }, "last_update_date": "2024-08-14T15:43:49.645000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "LEN-26332", "trust": 0.8, "url": "https://support.lenovo.com/solutions/LEN-26332" }, { "title": "Multiple Lenovo Product security vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=91143" } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "CNNVD", "id": "CNNVD-201904-304" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-667", "trust": 1.1 }, { "problemtype": "CWE-254", "trust": 0.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-157591" }, { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "NVD", "id": "CVE-2019-6156" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 1.7, "url": "https://support.lenovo.com/solutions/len-26332" }, { "trust": 1.4, "url": "https://nvd.nist.gov/vuln/detail/cve-2019-6156" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-6156" }, { "trust": 0.6, "url": "https://support.lenovo.com/us/en/product_security/len-26332" } ], "sources": [ { "db": "VULHUB", "id": "VHN-157591" }, { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "CNNVD", "id": "CNNVD-201904-304" }, { "db": "NVD", "id": "CVE-2019-6156" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "VULHUB", "id": "VHN-157591" }, { "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "db": "CNNVD", "id": "CNNVD-201904-304" }, { "db": "NVD", "id": "CVE-2019-6156" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2019-04-10T00:00:00", "db": "VULHUB", "id": "VHN-157591" }, { "date": "2019-05-16T00:00:00", "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "date": "2019-04-04T00:00:00", "db": "CNNVD", "id": "CNNVD-201904-304" }, { "date": "2019-04-10T17:29:00.463000", "db": "NVD", "id": "CVE-2019-6156" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2020-08-24T00:00:00", "db": "VULHUB", "id": "VHN-157591" }, { "date": "2019-05-16T00:00:00", "db": "JVNDB", "id": "JVNDB-2019-003417" }, { "date": "2020-08-25T00:00:00", "db": "CNNVD", "id": "CNNVD-201904-304" }, { "date": "2020-08-24T17:37:01.140000", "db": "NVD", "id": "CVE-2019-6156" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "local", "sources": [ { "db": "CNNVD", "id": "CNNVD-201904-304" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Lenovo Vulnerabilities related to security functions in the system", "sources": [ { "db": "JVNDB", "id": "JVNDB-2019-003417" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "security feature problem", "sources": [ { "db": "CNNVD", "id": "CNNVD-201904-304" } ], "trust": 0.6 } }
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.