{"id":"CVE-2019-6156","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-6156","generatedAt":"2026-10-28T05:26:49.894Z","title":"In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash.","description":"In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.","published":"2019-04-10T17:29:00.000Z","lastModified":"2026-06-17T02:38:42.000Z","status":"Modified","sourceIdentifier":"psirt@lenovo.com","cvss":{"version":"3.0","score":3.3,"severity":"LOW","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},"cwe":["CWE-667"],"affected":["lenovo/510-15ikl firmware","lenovo/510s-08ikl firmware","lenovo/ideacentre 300-20ish firmware","lenovo/ideacentre 300s-11ish firmware","lenovo/ideacentre 510-15icb firmware","lenovo/ideacentre 510a-15icb firmware","lenovo/ideacentre 510s-08ish firmware","lenovo/ideacentre 620s-03ikl firmware","lenovo/ideacentre 700 firmware","lenovo/ideacentre 720-18icb firmware","lenovo/legion c530-19icb firmware","lenovo/legion c730-19ico firmware","lenovo/legion t530-28icb firmware","lenovo/legion t730-28ico firmware","lenovo/legion y520t z370 firmware","lenovo/legion y720 tower firmware","lenovo/legion y920 tower firmware","lenovo/lenovo 63 firmware","lenovo/h50-30g desktop firmware","lenovo/m4500 firmware","lenovo/m4500 id firmware","lenovo/m4550 id firmware","lenovo/530s-07icb firmware","lenovo/qitian 4500 firmware","lenovo/qitian b4550 firmware","lenovo/qitian b4650 firmware","lenovo/qitian m4550 firmware","lenovo/qitian m4600 firmware","lenovo/qitian m4650 firmware","lenovo/qt m410 firmware","lenovo/qt b415 firmware","lenovo/qt m415 firmware","lenovo/thinkcentre e73 \\(sff\\) firmware","lenovo/thinkcentre e73 \\(twr\\) firmware","lenovo/thinkcentre e73s firmware","lenovo/thinkcentre e74 firmware","lenovo/thinkcentre e74s firmware","lenovo/thinkcentre e75t firmware","lenovo/thinkcentre e75s firmware","lenovo/thinkcentre e93 \\(sff\\) firmware","lenovo/thinkcentre e93 \\(twr\\) firmware","lenovo/thinkcentre m4500k firmware","lenovo/thinkcentre m4500q firmware","lenovo/thinkcentre m4500t firmware","lenovo/thinkcentre m4500s firmware","lenovo/thinkcentre m4600t firmware","lenovo/thinkcentre m4600s firmware","lenovo/thinkcentre m610 firmware","lenovo/thinkcentre m6500t firmware","lenovo/thinkcentre m6500s firmware","lenovo/thinkcentre m6600 firmware","lenovo/thinkcentre m6600q firmware","lenovo/thinkcentre m6600t firmware","lenovo/thinkcentre m6600s firmware","lenovo/thinkcentre m700q firmware","lenovo/thinkcentre m700t firmware","lenovo/thinkcentre m700s firmware","lenovo/thinkcentre m710e firmware","lenovo/thinkcentre m710q firmware","lenovo/thinkcentre m710t firmware"],"epss":{"score":0.00239,"percentile":0.1494,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://support.lenovo.com/solutions/LEN-26332","tags":["Patch","Vendor Advisory"],"source":"psirt@lenovo.com"},{"url":"https://support.lenovo.com/solutions/LEN-26332","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-6156","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}