CVE-2016-8224 - Vulnerability Details

Vendors	Products
Lenovo	Bios Notebook 110 14ibr Notebook 110 14ibr Bios Notebook 110 15ibr Notebook 110 15ibr Bios Notebook B70 80 Notebook B70 80 Bios Notebook E31 80 Notebook E31 80 Bios Notebook E40 80 Notebook E40 80 Bios Notebook E41 80 Notebook E41 80 Bios Notebook E51 80 Notebook E51 80 Bios Notebook G40 80 Notebook G40 80 Bios Notebook G50 80 Notebook G50 80 Bios Notebook G50 80 Touch Notebook G50 80 Touch Bios Notebook Ideapad 300 14ibr Notebook Ideapad 300 14ibr Bios Notebook Ideapad 300 14isk Notebook Ideapad 300 14isk Bios Notebook Ideapad 300 15ibr Notebook Ideapad 300 15ibr Bios Notebook Ideapad 300 15isk Notebook Ideapad 300 15isk Bios Notebook Ideapad 300 17isk Notebook Ideapad 300 17isk Bios Notebook Ideapad 510s 12isk Notebook Ideapad 510s 12isk Bios Notebook K21 80 Notebook K21 80 Bios Notebook K41 80 Notebook K41 80 Bios Notebook Miix 710 12ikb Notebook Miix 710 12ikb Bios Notebook Xiaoxin Air 12 Notebook Xiaoxin Air 12 Bios Notebook Yoga 510 14isk Notebook Yoga 510 14isk Bios Notebook Yoga 510 15isk Notebook Yoga 510 15isk Bios Notebook Yoga 710 11ikb Notebook Yoga 710 11ikb Bios Notebook Yoga 710 11isk Notebook Yoga 710 11isk Bios Notebook Yoga 900 13isk Notebook Yoga 900 13isk Bios Notebook Yoga 900s 12isk Notebook Yoga 900s 12isk Bios Thinkserver Ts150 Thinkserver Ts150 Bios Thinkserver Ts450 Thinkserver Ts450 Bios

Link	Providers
http://www.securityfocus.com/bid/94595
https://support.lenovo.com/us/en/solutions/LEN_9903

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Lenovo Notebook models 110-14IBR/110-15IBR, B70-80, E31-80, E40-80, E41-80, E51-80, G40-80, G50-80, G50-80 Touch, Ideapad 300-14IBR/300-15IBR, Ideapad 300-14ISK/300-15ISK/300-17ISK, Ideapad 510S-12ISK, K21-80, K41-80, MIIX 710-12IKB , XiaoXin Air 12, YOGA 510-14ISK/510-15ISK, YOGA 710-11IKB, Yoga 710-11ISK, Yoga 900-13ISK, YOGA 900S-12ISK; ThinkServer models ThinkServer TS150, ThinkServer TS450", "vendor": "Lenovo Group Ltd.", "versions": [{"status": "affected", "version": "various"}]}], "datePublic": "2016-11-17T00:00:00", "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system."}], "problemTypes": [{"descriptions": [{"description": "Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-12-01T10:57:01", "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo"}, "references": [{"name": "94595", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/94595"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.lenovo.com/us/en/solutions/LEN_9903"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@lenovo.com", "ID": "CVE-2016-8224", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Lenovo Notebook models 110-14IBR/110-15IBR, B70-80, E31-80, E40-80, E41-80, E51-80, G40-80, G50-80, G50-80 Touch, Ideapad 300-14IBR/300-15IBR, Ideapad 300-14ISK/300-15ISK/300-17ISK, Ideapad 510S-12ISK, K21-80, K41-80, MIIX 710-12IKB , XiaoXin Air 12, YOGA 510-14ISK/510-15ISK, YOGA 710-11IKB, Yoga 710-11ISK, Yoga 900-13ISK, YOGA 900S-12ISK; ThinkServer models ThinkServer TS150, ThinkServer TS450", "version": {"version_data": [{"version_value": "various"}]}}]}, "vendor_name": "Lenovo Group Ltd."}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems"}]}]}, "references": {"reference_data": [{"name": "94595", "refsource": "BID", "url": "http://www.securityfocus.com/bid/94595"}, {"name": "https://support.lenovo.com/us/en/solutions/LEN_9903", "refsource": "CONFIRM", "url": "https://support.lenovo.com/us/en/solutions/LEN_9903"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T02:13:21.877Z"}, "title": "CVE Program Container", "references": [{"name": "94595", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/94595"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.lenovo.com/us/en/solutions/LEN_9903"}]}]}, "cveMetadata": {"assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "assignerShortName": "lenovo", "cveId": "CVE-2016-8224", "datePublished": "2016-11-29T20:00:00", "dateReserved": "2016-09-16T00:00:00", "dateUpdated": "2024-08-06T02:13:21.877Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Lenovo Notebook models 110-14IBR/110-15IBR, B70-80, E31-80, E40-80, E41-80, E51-80, G40-80, G50-80, G50-80 Touch, Ideapad 300-14IBR/300-15IBR, Ideapad 300-14ISK/300-15ISK/300-17ISK, Ideapad 510S-12ISK, K21-80, K41-80, MIIX 710-12IKB , XiaoXin Air 12, YOGA 510-14ISK/510-15ISK, YOGA 710-11IKB, Yoga 710-11ISK, Yoga 900-13ISK, YOGA 900S-12ISK; ThinkServer models ThinkServer TS150, ThinkServer TS450 (string)

vendor : Lenovo Group Ltd. (string)

versions : [ »

0 : { »

status : affected (string)

version : various (string)

}

]

}

]

datePublic : 2016-11-17T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2016-12-01T10:57:01 (string)

orgId : da227ddf-6e25-4b41-b023-0f976dcaca4b (string)

shortName : lenovo (string)

}

references : [ »

0 : { »

name : 94595 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/94595 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://support.lenovo.com/us/en/solutions/LEN_9903 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@lenovo.com (string)

ID : CVE-2016-8224 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Lenovo Notebook models 110-14IBR/110-15IBR, B70-80, E31-80, E40-80, E41-80, E51-80, G40-80, G50-80, G50-80 Touch, Ideapad 300-14IBR/300-15IBR, Ideapad 300-14ISK/300-15ISK/300-17ISK, Ideapad 510S-12ISK, K21-80, K41-80, MIIX 710-12IKB , XiaoXin Air 12, YOGA 510-14ISK/510-15ISK, YOGA 710-11IKB, Yoga 710-11ISK, Yoga 900-13ISK, YOGA 900S-12ISK; ThinkServer models ThinkServer TS150, ThinkServer TS450 (string)

version : { »

version_data : [ »

0 : { »

version_value : various (string)

}

]

}

]

}

vendor_name : Lenovo Group Ltd. (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 94595 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/94595 (string)

}

1 : { »

name : https://support.lenovo.com/us/en/solutions/LEN_9903 (string)

refsource : CONFIRM (string)

url : https://support.lenovo.com/us/en/solutions/LEN_9903 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-06T02:13:21.877Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 94595 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/94595 (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://support.lenovo.com/us/en/solutions/LEN_9903 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : da227ddf-6e25-4b41-b023-0f976dcaca4b (string)

assignerShortName : lenovo (string)

cveId : CVE-2016-8224 (string)

datePublished : 2016-11-29T20:00:00 (string)

dateReserved : 2016-09-16T00:00:00 (string)

dateUpdated : 2024-08-06T02:13:21.877Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:lenovo:bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "61D66F0D-6C60-4CF6-A509-C6FAC2E22F95", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_110_14ibr_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "F95D809E-23E0-4887-826D-F3078B3C9ACF", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_110_15ibr_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "647044E0-5561-4C2C-9CA7-6C3CFBC5601B", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_b70_80_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "50FCCB25-38AE-4D4E-9A2C-8F1F071ED246", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_e31_80_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "2C30497A-245A-42E5-AC9F-C853EFE0E13C", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_e40_80_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "F6119EA0-4B8A-4E66-99E3-22FFB75C1F6D", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_e41_80_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "31EC5648-5CD3-47A5-8258-4384B2CD8B3A", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_e51_80_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "676B6906-60E9-41A1-A85A-D08EFE5DCE8A", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_g40_80_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "1648A659-67C5-4387-B74B-7194FF212C47", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_g50_80_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "CB179FE4-7FD2-45E0-8141-923ED46E1AC3", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_g50_80_touch_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "61E6087F-0E54-4411-838A-1AF443D0684F", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_ideapad_300_14ibr_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "7FAC9552-F856-4C7A-BD0D-8391D31DC74C", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_ideapad_300_14isk_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "546DAD7B-58D6-4E33-8639-4B54C88421EC", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_ideapad_300_15ibr_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "BEC25079-36F5-4312-8F9D-AE895C86DF64", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_ideapad_300_15isk_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C1B0078-6F39-4093-914F-C5154292AC5F", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_ideapad_300_17isk_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "5927B8CC-9D5E-4AED-B40A-604B50596C4B", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_ideapad_510s_12isk_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "B03AAC7F-CF2E-46BF-90F7-B9ED040AEF56", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_k21_80_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "79E603B0-C0C1-44CC-ADB2-F8F5805CE455", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_k41_80_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "0B1F5A20-2E32-4211-8946-5F8E4713726D", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_miix_710_12ikb_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "DED6589D-4A77-4A8F-8762-183739D8DA25", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_xiaoxin_air_12_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "DD7EB8FF-205C-47D7-BCE4-72576CCF0202", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_yoga_510_14isk_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "46265B64-69F5-470C-A7D1-72620B42CF4C", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_yoga_510_15isk_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "39FC8894-2619-4BB5-8B1E-CBA7134045EE", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_yoga_710_11ikb_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "77E0BD48-00CA-4FA7-A622-750727BC8D24", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_yoga_710_11isk_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "01C6DF33-6F13-4A40-AFBA-98D36CB7BE70", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_yoga_900_13isk_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "6118B0D3-F6EB-42B9-8C82-85ECF5B41B94", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:notebook_yoga_900s_12isk_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "B0FBA5BE-CAA5-490D-9711-EE0B8E3D0305", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:thinkserver_ts150_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "26622047-8020-4512-BC20-9C4B26C41E20", "vulnerable": true}, {"criteria": "cpe:2.3:o:lenovo:thinkserver_ts450_bios:-:*:*:*:*:*:*:*", "matchCriteriaId": "625A809C-6816-44B2-AAD8-5113CEC4DE50", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:notebook_110_14ibr:-:*:*:*:*:*:*:*", "matchCriteriaId": "41B2983E-CAF9-4E6E-A4D4-F79AEF94CB84", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_110_15ibr:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C896D60-612E-461D-A3C2-B3459EB0E238", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_b70_80:-:*:*:*:*:*:*:*", "matchCriteriaId": "C2E0AA9B-81C3-4D6C-88D0-65970C5682A8", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_e31_80:-:*:*:*:*:*:*:*", "matchCriteriaId": "8F834881-401E-4E32-99C8-00D6843330F1", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_e40_80:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A4CA14A-A647-4B07-923F-AD7C12681B4D", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_e41_80:-:*:*:*:*:*:*:*", "matchCriteriaId": "204534AC-7376-4466-B598-3A25AB4AA377", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_e51_80:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBF9B47C-D285-4E5A-AD07-A40C2AA5FECF", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_g40_80:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D65DC1E-0491-4963-9462-5EAC25CD2830", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_g50_80:-:*:*:*:*:*:*:*", "matchCriteriaId": "D612750E-8B26-4148-AE1E-8A149A959297", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_g50_80_touch:-:*:*:*:*:*:*:*", "matchCriteriaId": "EBDA89B6-39CF-4198-9857-718DF5BA5847", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_ideapad_300_14ibr:-:*:*:*:*:*:*:*", "matchCriteriaId": "E2991E19-F9B2-4AFD-94A9-326BC43234A5", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_ideapad_300_14isk:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CD27C15-9EED-4532-AD0A-CC4FC943FF8C", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_ideapad_300_15ibr:-:*:*:*:*:*:*:*", "matchCriteriaId": "D30B00BC-5F48-4BB1-9DD9-311A0BFE91A2", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_ideapad_300_15isk:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD912317-0247-4BD0-BC69-69FE0B1B1195", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_ideapad_300_17isk:-:*:*:*:*:*:*:*", "matchCriteriaId": "8E935C4C-2C5F-4D5A-A212-79267C02B7E1", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_ideapad_510s_12isk:-:*:*:*:*:*:*:*", "matchCriteriaId": "470CEC61-3CA0-4821-8B32-2B41C5E832DB", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_k21_80:-:*:*:*:*:*:*:*", "matchCriteriaId": "3DD41CA0-862C-44ED-A865-3D9626B1B1C0", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_k41_80:-:*:*:*:*:*:*:*", "matchCriteriaId": "97FF7810-3A0A-436A-A88E-1ECFB61C0890", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_miix_710_12ikb:-:*:*:*:*:*:*:*", "matchCriteriaId": "73B2E2E2-A7DF-486C-B5B9-8D04CEC38AC5", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_xiaoxin_air_12:-:*:*:*:*:*:*:*", "matchCriteriaId": "7FB2BCC5-30DD-4C2D-8291-2982D2E4F382", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_yoga_510_14isk:-:*:*:*:*:*:*:*", "matchCriteriaId": "4B2887E6-82C6-4456-A3BF-E10CFFF4CE89", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_yoga_510_15isk:-:*:*:*:*:*:*:*", "matchCriteriaId": "D86ECF6E-2A92-470E-8D9A-5EEFA24AA944", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_yoga_710_11ikb:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D1BC063-90B1-4737-A77C-376BF26E4D97", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_yoga_710_11isk:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A363290-2FA0-4C73-A221-BA5EA342A667", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_yoga_900_13isk:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C817782-1F17-449C-9678-3EFB85AB8B7D", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:notebook_yoga_900s_12isk:-:*:*:*:*:*:*:*", "matchCriteriaId": "E57E495B-36C1-4910-80EE-90665E0ABF0F", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:thinkserver_ts150:-:*:*:*:*:*:*:*", "matchCriteriaId": "41D3E3E1-5ED3-45F0-B823-190A8A1119C9", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:thinkserver_ts450:-:*:*:*:*:*:*:*", "matchCriteriaId": "0A85E220-538C-4F31-9469-3B8069F1D1DB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system."}, {"lang": "es", "value": "Una vulnerabilidad ha sido identificada en algunos sistemas Lenovo Notebook y ThinkServer donde un atacante con privilegios administrativos en un sistema podr\u00eda instalar un programa que evita protecciones Intel Management Engine (ME). Esto podr\u00eda resultar en una denegaci\u00f3n de servicio o ataque de escalamiento de privilegios en el sistema."}], "id": "CVE-2016-8224", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 4.6, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 0.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-11-29T20:59:02.437", "references": [{"source": "psirt@lenovo.com", "url": "http://www.securityfocus.com/bid/94595"}, {"source": "psirt@lenovo.com", "tags": ["Vendor Advisory"], "url": "https://support.lenovo.com/us/en/solutions/LEN_9903"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/94595"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.lenovo.com/us/en/solutions/LEN_9903"}], "sourceIdentifier": "psirt@lenovo.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-310"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:lenovo:bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 61D66F0D-6C60-4CF6-A509-C6FAC2E22F95 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:lenovo:notebook_110_14ibr_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F95D809E-23E0-4887-826D-F3078B3C9ACF (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:lenovo:notebook_110_15ibr_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 647044E0-5561-4C2C-9CA7-6C3CFBC5601B (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:lenovo:notebook_b70_80_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 50FCCB25-38AE-4D4E-9A2C-8F1F071ED246 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:lenovo:notebook_e31_80_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2C30497A-245A-42E5-AC9F-C853EFE0E13C (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:lenovo:notebook_e40_80_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F6119EA0-4B8A-4E66-99E3-22FFB75C1F6D (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:lenovo:notebook_e41_80_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 31EC5648-5CD3-47A5-8258-4384B2CD8B3A (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:lenovo:notebook_e51_80_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 676B6906-60E9-41A1-A85A-D08EFE5DCE8A (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:lenovo:notebook_g40_80_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1648A659-67C5-4387-B74B-7194FF212C47 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:lenovo:notebook_g50_80_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CB179FE4-7FD2-45E0-8141-923ED46E1AC3 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:lenovo:notebook_g50_80_touch_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 61E6087F-0E54-4411-838A-1AF443D0684F (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:lenovo:notebook_ideapad_300_14ibr_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7FAC9552-F856-4C7A-BD0D-8391D31DC74C (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:lenovo:notebook_ideapad_300_14isk_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 546DAD7B-58D6-4E33-8639-4B54C88421EC (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:lenovo:notebook_ideapad_300_15ibr_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BEC25079-36F5-4312-8F9D-AE895C86DF64 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:lenovo:notebook_ideapad_300_15isk_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4C1B0078-6F39-4093-914F-C5154292AC5F (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:lenovo:notebook_ideapad_300_17isk_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5927B8CC-9D5E-4AED-B40A-604B50596C4B (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:lenovo:notebook_ideapad_510s_12isk_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B03AAC7F-CF2E-46BF-90F7-B9ED040AEF56 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:lenovo:notebook_k21_80_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 79E603B0-C0C1-44CC-ADB2-F8F5805CE455 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:lenovo:notebook_k41_80_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0B1F5A20-2E32-4211-8946-5F8E4713726D (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:lenovo:notebook_miix_710_12ikb_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DED6589D-4A77-4A8F-8762-183739D8DA25 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:o:lenovo:notebook_xiaoxin_air_12_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DD7EB8FF-205C-47D7-BCE4-72576CCF0202 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:o:lenovo:notebook_yoga_510_14isk_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 46265B64-69F5-470C-A7D1-72620B42CF4C (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:o:lenovo:notebook_yoga_510_15isk_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 39FC8894-2619-4BB5-8B1E-CBA7134045EE (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:o:lenovo:notebook_yoga_710_11ikb_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 77E0BD48-00CA-4FA7-A622-750727BC8D24 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:o:lenovo:notebook_yoga_710_11isk_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 01C6DF33-6F13-4A40-AFBA-98D36CB7BE70 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:o:lenovo:notebook_yoga_900_13isk_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6118B0D3-F6EB-42B9-8C82-85ECF5B41B94 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:o:lenovo:notebook_yoga_900s_12isk_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B0FBA5BE-CAA5-490D-9711-EE0B8E3D0305 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:o:lenovo:thinkserver_ts150_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 26622047-8020-4512-BC20-9C4B26C41E20 (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:o:lenovo:thinkserver_ts450_bios:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 625A809C-6816-44B2-AAD8-5113CEC4DE50 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:lenovo:notebook_110_14ibr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 41B2983E-CAF9-4E6E-A4D4-F79AEF94CB84 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:lenovo:notebook_110_15ibr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4C896D60-612E-461D-A3C2-B3459EB0E238 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:lenovo:notebook_b70_80:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C2E0AA9B-81C3-4D6C-88D0-65970C5682A8 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:lenovo:notebook_e31_80:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8F834881-401E-4E32-99C8-00D6843330F1 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:lenovo:notebook_e40_80:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 9A4CA14A-A647-4B07-923F-AD7C12681B4D (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:lenovo:notebook_e41_80:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 204534AC-7376-4466-B598-3A25AB4AA377 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:lenovo:notebook_e51_80:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CBF9B47C-D285-4E5A-AD07-A40C2AA5FECF (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:lenovo:notebook_g40_80:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4D65DC1E-0491-4963-9462-5EAC25CD2830 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:lenovo:notebook_g50_80:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D612750E-8B26-4148-AE1E-8A149A959297 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:lenovo:notebook_g50_80_touch:-:*:*:*:*:*:*:* (string)

matchCriteriaId : EBDA89B6-39CF-4198-9857-718DF5BA5847 (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:lenovo:notebook_ideapad_300_14ibr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E2991E19-F9B2-4AFD-94A9-326BC43234A5 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:lenovo:notebook_ideapad_300_14isk:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5CD27C15-9EED-4532-AD0A-CC4FC943FF8C (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:lenovo:notebook_ideapad_300_15ibr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D30B00BC-5F48-4BB1-9DD9-311A0BFE91A2 (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:lenovo:notebook_ideapad_300_15isk:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BD912317-0247-4BD0-BC69-69FE0B1B1195 (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:lenovo:notebook_ideapad_300_17isk:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8E935C4C-2C5F-4D5A-A212-79267C02B7E1 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:lenovo:notebook_ideapad_510s_12isk:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 470CEC61-3CA0-4821-8B32-2B41C5E832DB (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:lenovo:notebook_k21_80:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3DD41CA0-862C-44ED-A865-3D9626B1B1C0 (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:lenovo:notebook_k41_80:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 97FF7810-3A0A-436A-A88E-1ECFB61C0890 (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:lenovo:notebook_miix_710_12ikb:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 73B2E2E2-A7DF-486C-B5B9-8D04CEC38AC5 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:lenovo:notebook_xiaoxin_air_12:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7FB2BCC5-30DD-4C2D-8291-2982D2E4F382 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:lenovo:notebook_yoga_510_14isk:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4B2887E6-82C6-4456-A3BF-E10CFFF4CE89 (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:lenovo:notebook_yoga_510_15isk:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D86ECF6E-2A92-470E-8D9A-5EEFA24AA944 (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:lenovo:notebook_yoga_710_11ikb:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6D1BC063-90B1-4737-A77C-376BF26E4D97 (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:lenovo:notebook_yoga_710_11isk:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8A363290-2FA0-4C73-A221-BA5EA342A667 (string)

vulnerable : false (boolean)

}

24 : { »

criteria : cpe:2.3:h:lenovo:notebook_yoga_900_13isk:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6C817782-1F17-449C-9678-3EFB85AB8B7D (string)

vulnerable : false (boolean)

}

25 : { »

criteria : cpe:2.3:h:lenovo:notebook_yoga_900s_12isk:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E57E495B-36C1-4910-80EE-90665E0ABF0F (string)

vulnerable : false (boolean)

}

26 : { »

criteria : cpe:2.3:h:lenovo:thinkserver_ts150:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 41D3E3E1-5ED3-45F0-B823-190A8A1119C9 (string)

vulnerable : false (boolean)

}

27 : { »

criteria : cpe:2.3:h:lenovo:thinkserver_ts450:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0A85E220-538C-4F31-9469-3B8069F1D1DB (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad ha sido identificada en algunos sistemas Lenovo Notebook y ThinkServer donde un atacante con privilegios administrativos en un sistema podría instalar un programa que evita protecciones Intel Management Engine (ME). Esto podría resultar en una denegación de servicio o ataque de escalamiento de privilegios en el sistema. (string)

}

]

id : CVE-2016-8224 (string)

lastModified : 2025-04-12T10:46:40.837 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : LOCAL (string)

authentication : SINGLE (string)

availabilityImpact : COMPLETE (string)

baseScore : 4.6 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:L/AC:L/Au:S/C:N/I:N/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 3.1 (number)

impactScore : 6.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 4.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 0.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2016-11-29T20:59:02.437 (string)

references : [ »

0 : { »

source : psirt@lenovo.com (string)

url : http://www.securityfocus.com/bid/94595 (string)

}

1 : { »

source : psirt@lenovo.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.lenovo.com/us/en/solutions/LEN_9903 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.securityfocus.com/bid/94595 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://support.lenovo.com/us/en/solutions/LEN_9903 (string)

}

]

sourceIdentifier : psirt@lenovo.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-310 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Local

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object