CVEvulnerability

CVE-2016-8224

4.4 MEDIUM Published 2016-11-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-11-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.4 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:S/C:N/I:N/A:C
Weaknesses
CWE-310

Description

A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.

Affected configurations

• lenovo bios • lenovo notebook 110 14ibr bios • lenovo notebook 110 15ibr bios • lenovo notebook b70 80 bios • lenovo notebook e31 80 bios • lenovo notebook e40 80 bios • lenovo notebook e41 80 bios • lenovo notebook e51 80 bios • lenovo notebook g40 80 bios • lenovo notebook g50 80 bios • lenovo notebook g50 80 touch bios • lenovo notebook ideapad 300 14ibr bios • lenovo notebook ideapad 300 14isk bios • lenovo notebook ideapad 300 15ibr bios • lenovo notebook ideapad 300 15isk bios • lenovo notebook ideapad 300 17isk bios • lenovo notebook ideapad 510s 12isk bios • lenovo notebook k21 80 bios • lenovo notebook k41 80 bios • lenovo notebook miix 710 12ikb bios • lenovo notebook xiaoxin air 12 bios • lenovo notebook yoga 510 14isk bios • lenovo notebook yoga 510 15isk bios • lenovo notebook yoga 710 11ikb bios • lenovo notebook yoga 710 11isk bios • lenovo notebook yoga 900 13isk bios • lenovo notebook yoga 900s 12isk bios • lenovo thinkserver ts150 bios • lenovo thinkserver ts450 bios

Related

Weakness · not in database (1)

References