Lucene search

[email protected]CVE-2016-8224

HistoryNov 29, 2016 - 8:59 p.m.

CVE-2016-8224

2016-11-2920:59:02

CWE-310

[email protected]

web.nvd.nist.gov

lenovo

vulnerability

privilege escalation

circumvention

intel management engine

denial of service

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:N/A:C

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.

Affected configurations

NVD

Node

lenovobiosMatch-

lenovonotebook_110_14ibr_biosMatch-

lenovonotebook_110_15ibr_biosMatch-

lenovonotebook_b70_80_biosMatch-

lenovonotebook_e31_80_biosMatch-

lenovonotebook_e40_80_biosMatch-

lenovonotebook_e41_80_biosMatch-

lenovonotebook_e51_80_biosMatch-

lenovonotebook_g40_80_biosMatch-

lenovonotebook_g50_80_biosMatch-

lenovonotebook_g50_80_touch_biosMatch-

lenovonotebook_ideapad_300_14ibr_biosMatch-

lenovonotebook_ideapad_300_14isk_biosMatch-

lenovonotebook_ideapad_300_15ibr_biosMatch-

lenovonotebook_ideapad_300_15isk_biosMatch-

lenovonotebook_ideapad_300_17isk_biosMatch-

lenovonotebook_ideapad_510s_12isk_biosMatch-

lenovonotebook_k21_80_biosMatch-

lenovonotebook_k41_80_biosMatch-

lenovonotebook_miix_710_12ikb_biosMatch-

lenovonotebook_xiaoxin_air_12_biosMatch-

lenovonotebook_yoga_510_14isk_biosMatch-

lenovonotebook_yoga_510_15isk_biosMatch-

lenovonotebook_yoga_710_11ikb_biosMatch-

lenovonotebook_yoga_710_11isk_biosMatch-

lenovonotebook_yoga_900_13isk_biosMatch-

lenovonotebook_yoga_900s_12isk_biosMatch-

lenovothinkserver_ts150_biosMatch-

lenovothinkserver_ts450_biosMatch-

AND

lenovonotebook_110_14ibrMatch-

lenovonotebook_110_15ibrMatch-

lenovonotebook_b70_80Match-

lenovonotebook_e31_80Match-

lenovonotebook_e40_80Match-

lenovonotebook_e41_80Match-

lenovonotebook_e51_80Match-

lenovonotebook_g40_80Match-

lenovonotebook_g50_80Match-

lenovonotebook_g50_80_touchMatch-

lenovonotebook_ideapad_300_14ibrMatch-

lenovonotebook_ideapad_300_14iskMatch-

lenovonotebook_ideapad_300_15ibrMatch-

lenovonotebook_ideapad_300_15iskMatch-

lenovonotebook_ideapad_300_17iskMatch-

lenovonotebook_ideapad_510s_12iskMatch-

lenovonotebook_k21_80Match-

lenovonotebook_k41_80Match-

lenovonotebook_miix_710_12ikbMatch-

lenovonotebook_xiaoxin_air_12Match-

lenovonotebook_yoga_510_14iskMatch-

lenovonotebook_yoga_510_15iskMatch-

lenovonotebook_yoga_710_11ikbMatch-

lenovonotebook_yoga_710_11iskMatch-

lenovonotebook_yoga_900_13iskMatch-

lenovonotebook_yoga_900s_12iskMatch-

lenovothinkserver_ts150Match-

lenovothinkserver_ts450Match-

CPENameOperatorVersion
lenovo:bioslenovo bioseq-
lenovo:notebook_110_14ibr_bioslenovo notebook 110 14ibr bioseq-
lenovo:notebook_110_15ibr_bioslenovo notebook 110 15ibr bioseq-
lenovo:notebook_b70_80_bioslenovo notebook b70 80 bioseq-
lenovo:notebook_e31_80_bioslenovo notebook e31 80 bioseq-
lenovo:notebook_e40_80_bioslenovo notebook e40 80 bioseq-
lenovo:notebook_e41_80_bioslenovo notebook e41 80 bioseq-
lenovo:notebook_e51_80_bioslenovo notebook e51 80 bioseq-
lenovo:notebook_g40_80_bioslenovo notebook g40 80 bioseq-
lenovo:notebook_g50_80_bioslenovo notebook g50 80 bioseq-

CPE	Name	Operator	Version
lenovo:bios	lenovo bios	eq	-
lenovo:notebook_110_14ibr_bios	lenovo notebook 110 14ibr bios	eq	-
lenovo:notebook_110_15ibr_bios	lenovo notebook 110 15ibr bios	eq	-
lenovo:notebook_b70_80_bios	lenovo notebook b70 80 bios	eq	-
lenovo:notebook_e31_80_bios	lenovo notebook e31 80 bios	eq	-
lenovo:notebook_e40_80_bios	lenovo notebook e40 80 bios	eq	-
lenovo:notebook_e41_80_bios	lenovo notebook e41 80 bios	eq	-
lenovo:notebook_e51_80_bios	lenovo notebook e51 80 bios	eq	-
lenovo:notebook_g40_80_bios	lenovo notebook g40 80 bios	eq	-
lenovo:notebook_g50_80_bios	lenovo notebook g50 80 bios	eq	-

Rows per page:

1-10 of 291

CNA Affected

[
  {
    "product": "Lenovo Notebook models 110-14IBR/110-15IBR, B70-80, E31-80, E40-80, E41-80, E51-80, G40-80, G50-80, G50-80 Touch, Ideapad 300-14IBR/300-15IBR, Ideapad 300-14ISK/300-15ISK/300-17ISK, Ideapad 510S-12ISK, K21-80, K41-80, MIIX 710-12IKB , XiaoXin Air 12, YOGA 510-14ISK/510-15ISK, YOGA 710-11IKB, Yoga 710-11ISK, Yoga 900-13ISK, YOGA 900S-12ISK; ThinkServer models ThinkServer TS150, ThinkServer TS450",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

www.securityfocus.com/bid/94595

support.lenovo.com/us/en/solutions/LEN_9903

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:N/A:C

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Related for CVE-2016-8224

lenovo2 prion1 nvd1 cvelist1