CVE-2016-8224
Medium
Description
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.
SeverityMedium
CVSS4.4
Exploit probability—
ProductLenovo Notebook 110 14ibr Bios
PublishedNov 29, 2016
First seenNov 29, 2016
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo notebook_110_14ibr_bios | No range specified | — |
| lenovo bios | No range specified | — |
| lenovo notebook_110_15ibr_bios | No range specified | — |
| lenovo notebook_b70_80_bios | No range specified | — |
| lenovo notebook_e31_80_bios | No range specified | — |
| lenovo notebook_e40_80_bios | No range specified | — |
| lenovo notebook_e41_80_bios | No range specified | — |
| lenovo notebook_e51_80_bios | No range specified | — |
| lenovo notebook_g40_80_bios | No range specified | — |
| lenovo notebook_g50_80_bios | No range specified | — |
| lenovo notebook_g50_80_touch_bios | No range specified | — |
| lenovo notebook_ideapad_300_14ibr_bios | No range specified | — |
| lenovo notebook_ideapad_300_14isk_bios | No range specified | — |
| lenovo notebook_ideapad_300_15ibr_bios | No range specified | — |
| lenovo notebook_ideapad_300_15isk_bios | No range specified | — |
| lenovo notebook_ideapad_300_17isk_bios | No range specified | — |
| lenovo notebook_ideapad_510s_12isk_bios | No range specified | — |
| lenovo notebook_k21_80_bios | No range specified | — |
| lenovo notebook_k41_80_bios | No range specified | — |
| lenovo notebook_miix_710_12ikb_bios | No range specified | — |
| lenovo notebook_xiaoxin_air_12_bios | No range specified | — |
| lenovo notebook_yoga_510_14isk_bios | No range specified | — |
| lenovo notebook_yoga_510_15isk_bios | No range specified | — |
| lenovo notebook_yoga_710_11ikb_bios | No range specified | — |
| lenovo notebook_yoga_710_11isk_bios | No range specified | — |
| lenovo notebook_yoga_900_13isk_bios | No range specified | — |
| lenovo notebook_yoga_900s_12isk_bios | No range specified | — |
| lenovo thinkserver_ts150_bios | No range specified | — |
| lenovo thinkserver_ts450_bios | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.