CVEvulnerability

CVE-2016-8222

4.4 MEDIUM Published 2016-11-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-11-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.4 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.7 MEDIUM — AV:L/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-284

Description

A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mode (SMM) services. This could lead to a denial of service attack or allow certain BIOS variables or settings to be altered (such as boot sequence). The setting or changing of BIOS passwords is not affected by this vulnerability.

Affected configurations

• lenovo thinkpad 10 ella 2 bios • lenovo thinkpad 11e beema bios • lenovo thinkpad 11e braswell bios • lenovo thinkpad 11e broadwell bios • lenovo thinkpad 11e skylake bios • lenovo thinkpad 13e bios • lenovo thinkpad e450 bios • lenovo thinkpad e450c bios • lenovo thinkpad e455 bios • lenovo thinkpad e460 bios • lenovo thinkpad e465 bios • lenovo thinkpad e550 bios • lenovo thinkpad e550c bios • lenovo thinkpad e555 bios • lenovo thinkpad e560 bios • lenovo thinkpad e565 bios • lenovo thinkpad edge e440 bios • lenovo thinkpad edge e445 bios • lenovo thinkpad edge e540 bios • lenovo thinkpad edge e545 bios • lenovo thinkpad helix 20cg bios • lenovo thinkpad helix 20ch bios • lenovo thinkpad l440 bios • lenovo thinkpad l450 bios • lenovo thinkpad l460 bios • lenovo thinkpad l540 bios • lenovo thinkpad l560 bios • lenovo thinkpad p50 bios • lenovo thinkpad p50s bios • lenovo thinkpad p70 bios • lenovo thinkpad s1 yoga 12 bios • lenovo thinkpad s1 yoga non vpro bios • lenovo thinkpad s1 yoga vpro bios • lenovo thinkpad s3 s440 bios • lenovo thinkpad s3 yoga 14 bios • lenovo thinkpad s5 e560p bios • lenovo thinkpad s5 yoga 15 bios • lenovo thinkpad s540 bios • lenovo thinkpad t440 bios • lenovo thinkpad t440p bios • lenovo thinkpad t440s bios • lenovo thinkpad t440u bios • lenovo thinkpad t450 bios • lenovo thinkpad t450s bios • lenovo thinkpad t460 bios • lenovo thinkpad t460p bios • lenovo thinkpad t460s bios • lenovo thinkpad t540 bios • lenovo thinkpad t540p bios • lenovo thinkpad t550 bios • lenovo thinkpad t560 bios • lenovo thinkpad tablet 10 bios • lenovo thinkpad tablet 8 bios • lenovo thinkpad w540 bios • lenovo thinkpad w541 bios • lenovo thinkpad w550s bios • lenovo thinkpad x1 carbon 20ax bios • lenovo thinkpad x1 carbon 20bx bios • lenovo thinkpad x1 carbon bios • lenovo thinkpad x1 tablet bios … and 14 more

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References