CVE-2016-8222
Medium
Description
A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mode (SMM) services. This could lead to a denial of service attack or allow certain BIOS variables or settings to be altered (such as boot sequence). The setting or changing of BIOS passwords is not affected by this vulnerability.
SeverityMedium
CVSS4.4
Exploit probability—
ProductLenovo Thinkpad 10 Ella 2 Bios
PublishedNov 30, 2016
First seenNov 30, 2016
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo thinkpad_10_ella_2_bios | No range specified | — |
| lenovo thinkpad_11e_beema_bios | No range specified | — |
| lenovo thinkpad_11e_braswell_bios | No range specified | — |
| lenovo thinkpad_11e_broadwell_bios | No range specified | — |
| lenovo thinkpad_11e_skylake_bios | No range specified | — |
| lenovo thinkpad_13e_bios | No range specified | — |
| lenovo thinkpad_e450_bios | No range specified | — |
| lenovo thinkpad_e450c_bios | No range specified | — |
| lenovo thinkpad_e455_bios | No range specified | — |
| lenovo thinkpad_e460_bios | No range specified | — |
| lenovo thinkpad_e465_bios | No range specified | — |
| lenovo thinkpad_e550_bios | No range specified | — |
| lenovo thinkpad_e550c_bios | No range specified | — |
| lenovo thinkpad_e555_bios | No range specified | — |
| lenovo thinkpad_e560_bios | No range specified | — |
| lenovo thinkpad_e565_bios | No range specified | — |
| lenovo thinkpad_edge_e440_bios | No range specified | — |
| lenovo thinkpad_edge_e445_bios | No range specified | — |
| lenovo thinkpad_edge_e540_bios | No range specified | — |
| lenovo thinkpad_edge_e545_bios | No range specified | — |
| lenovo thinkpad_helix_20cg_bios | No range specified | — |
| lenovo thinkpad_helix_20ch_bios | No range specified | — |
| lenovo thinkpad_l440_bios | No range specified | — |
| lenovo thinkpad_l450_bios | No range specified | — |
| lenovo thinkpad_l460_bios | No range specified | — |
| lenovo thinkpad_l540_bios | No range specified | — |
| lenovo thinkpad_l560_bios | No range specified | — |
| lenovo thinkpad_p50_bios | No range specified | — |
| lenovo thinkpad_p50s_bios | No range specified | — |
| lenovo thinkpad_p70_bios | No range specified | — |
| lenovo thinkpad_s1_yoga_12_bios | No range specified | — |
| lenovo thinkpad_s1_yoga_non_vpro_bios | No range specified | — |
| lenovo thinkpad_s1_yoga_vpro_bios | No range specified | — |
| lenovo thinkpad_s3_s440_bios | No range specified | — |
| lenovo thinkpad_s3_yoga_14_bios | No range specified | — |
| lenovo thinkpad_s5_e560p_bios | No range specified | — |
| lenovo thinkpad_s5_yoga_15_bios | No range specified | — |
| lenovo thinkpad_s540_bios | No range specified | — |
| lenovo thinkpad_t440_bios | No range specified | — |
| lenovo thinkpad_t440p_bios | No range specified | — |
| lenovo thinkpad_t440s_bios | No range specified | — |
| lenovo thinkpad_t440u_bios | No range specified | — |
| lenovo thinkpad_t450_bios | No range specified | — |
| lenovo thinkpad_t450s_bios | No range specified | — |
| lenovo thinkpad_t460_bios | No range specified | — |
| lenovo thinkpad_t460p_bios | No range specified | — |
| lenovo thinkpad_t460s_bios | No range specified | — |
| lenovo thinkpad_t540_bios | No range specified | — |
| lenovo thinkpad_t540p_bios | No range specified | — |
| lenovo thinkpad_t550_bios | No range specified | — |
| lenovo thinkpad_t560_bios | No range specified | — |
| lenovo thinkpad_tablet_10_bios | No range specified | — |
| lenovo thinkpad_tablet_8_bios | No range specified | — |
| lenovo thinkpad_w540_bios | No range specified | — |
| lenovo thinkpad_w541_bios | No range specified | — |
| lenovo thinkpad_w550s_bios | No range specified | — |
| lenovo thinkpad_x1_carbon_20ax_bios | No range specified | — |
| lenovo thinkpad_x1_carbon_20bx_bios | No range specified | — |
| lenovo thinkpad_x1_carbon_bios | No range specified | — |
| lenovo thinkpad_x1_tablet_bios | No range specified | — |
| lenovo thinkpad_x1_yoga_bios | No range specified | — |
| lenovo thinkpad_x140e_amd_bios | No range specified | — |
| lenovo thinkpad_x240_bios | No range specified | — |
| lenovo thinkpad_x240s_bios | No range specified | — |
| lenovo thinkpad_x250_broadwell_bios | No range specified | — |
| lenovo thinkpad_x250_sharkbay_bios | No range specified | — |
| lenovo thinkpad_x260_bios | No range specified | — |
| lenovo thinkpad_yoga_11e_beema_bios | No range specified | — |
| lenovo thinkpad_yoga_11e_bios | No range specified | — |
| lenovo thinkpad_yoga_11e_braswell_bios | No range specified | — |
| lenovo thinkpad_yoga_11e_broadwell_bios | No range specified | — |
| lenovo thinkpad_yoga_11e_skylake_bios | No range specified | — |
| lenovo thinkpad_yoga_14_460_s3_bios | No range specified | — |
| lenovo thinkpad_yoga_260_s1_bios | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.