VulnerabilityModified
CVE-2016-8224
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections.
MEDIUM 4.4EPSS 0.30%
Does this matter?
Lower severity and a low EPSS score (0.30%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.
- CVSS 3.0
- 4.4 MEDIUMCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.30% probability · 23th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-310
- Affected
- lenovo/bios · lenovo/notebook 110 14ibr bios · lenovo/notebook 110 15ibr bios · lenovo/notebook b70 80 bios · lenovo/notebook e31 80 bios · lenovo/notebook e40 80 bios · lenovo/notebook e41 80 bios · lenovo/notebook e51 80 bios · lenovo/notebook g40 80 bios · lenovo/notebook g50 80 bios · lenovo/notebook g50 80 touch bios · lenovo/notebook ideapad 300 14ibr bios · lenovo/notebook ideapad 300 14isk bios · lenovo/notebook ideapad 300 15ibr bios · lenovo/notebook ideapad 300 15isk bios · lenovo/notebook ideapad 300 17isk bios · lenovo/notebook ideapad 510s 12isk bios · lenovo/notebook k21 80 bios · lenovo/notebook k41 80 bios · lenovo/notebook miix 710 12ikb bios · +9 more
- Source
- psirt@lenovo.com
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.