CWE
310
Advisory Published
Updated

CVE-2016-8224

First published: Tue Nov 29 2016(Updated: )

A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.

Credit: psirt@lenovo.com

Affected SoftwareAffected VersionHow to fix
Lenovo Bios
Lenovo Notebook 110 14ibr Bios
Lenovo Notebook 110 15ibr Bios
Lenovo Notebook B70 80 Bios
Lenovo Notebook E31 80 Bios
Lenovo Notebook E40 80 Bios
Lenovo Notebook E41 80 Bios
Lenovo Notebook E51 80 Bios
Lenovo Notebook G40 80 Bios
Lenovo Notebook G50 80 Bios
Lenovo Notebook G50 80 Touch Bios
Lenovo Notebook Ideapad 300 14ibr Bios
Lenovo Notebook Ideapad 300 14isk Bios
Lenovo Notebook Ideapad 300 15ibr Bios
Lenovo Notebook Ideapad 300 15isk Bios
Lenovo Notebook Ideapad 300 17isk Bios
Lenovo Notebook Ideapad 510s 12isk Bios
Lenovo Notebook K21 80 Bios
Lenovo Notebook K41 80 Bios
Lenovo Notebook Miix 710 12ikb Bios
Lenovo Notebook Xiaoxin Air 12 Bios
Lenovo Notebook Yoga 510 14isk Bios
Lenovo Notebook Yoga 510 15isk Bios
Lenovo Notebook Yoga 710 11ikb Bios
Lenovo Notebook Yoga 710 11isk Bios
Lenovo Notebook Yoga 900 13isk Bios
Lenovo Notebook Yoga 900s 12isk Bios
Lenovo Thinkserver Ts150 Bios
Lenovo Thinkserver Ts450 Bios
Lenovo Notebook 110 14ibr
Lenovo Notebook 110 15ibr
Lenovo Notebook B70 80
Lenovo Notebook E31 80
Lenovo Notebook E40 80
Lenovo Notebook E41 80
Lenovo Notebook E51 80
Lenovo Notebook G40 80
Lenovo Notebook G50 80
Lenovo Notebook G50 80 Touch
Lenovo Notebook Ideapad 300 14ibr
Lenovo Notebook Ideapad 300 14isk
Lenovo Notebook Ideapad 300 15ibr
Lenovo Notebook Ideapad 300 15isk
Lenovo Notebook Ideapad 300 17isk
Lenovo Notebook Ideapad 510s 12isk
Lenovo Notebook K21 80
Lenovo Notebook K41 80
Lenovo Notebook Miix 710 12ikb
Lenovo Notebook Xiaoxin Air 12
Lenovo Notebook Yoga 510 14isk
Lenovo Notebook Yoga 510 15isk
Lenovo Notebook Yoga 710 11ikb
Lenovo Notebook Yoga 710 11isk
Lenovo Notebook Yoga 900 13isk
Lenovo Notebook Yoga 900s 12isk
Lenovo Thinkserver Ts150
Lenovo Thinkserver Ts450

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203