medium4.4
CVE-2016-8224
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install …
Impact
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Bios | All versions |
| Lenovo | Notebook 110 14ibr Bios | All versions |
| Lenovo | Notebook 110 15ibr Bios | All versions |
| Lenovo | Notebook B70 80 Bios | All versions |
| Lenovo | Notebook E31 80 Bios | All versions |
| Lenovo | Notebook E40 80 Bios | All versions |
| Lenovo | Notebook E41 80 Bios | All versions |
| Lenovo | Notebook E51 80 Bios | All versions |
| Lenovo | Notebook G40 80 Bios | All versions |
| Lenovo | Notebook G50 80 Bios | All versions |
| Lenovo | Notebook G50 80 Touch Bios | All versions |
| Lenovo | Notebook Ideapad 300 14ibr Bios | All versions |