What’s Vulnerable › Vulnerabilities

CVE-2016-8224

• Severity: medium (CVSS 4.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-11-29 · updated 2026-06-17
• Weakness: CWE-310

Description

A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.

Affected products

• Lenovo BIOS: all versions
• Lenovo Notebook 110 14Ibr Bios: all versions
• Lenovo Notebook 110 15Ibr Bios: all versions
• Lenovo Notebook B70 80 Bios: all versions
• Lenovo Notebook E31 80 Bios: all versions
• Lenovo Notebook E40 80 Bios: all versions
• Lenovo Notebook E41 80 Bios: all versions
• Lenovo Notebook E51 80 Bios: all versions
• Lenovo Notebook G40 80 Bios: all versions
• Lenovo Notebook G50 80 Bios: all versions
• Lenovo Notebook G50 80 Touch Bios: all versions
• Lenovo Notebook Ideapad 300 14Ibr Bios: all versions
• Lenovo Notebook Ideapad 300 14Isk Bios: all versions
• Lenovo Notebook Ideapad 300 15Ibr Bios: all versions
• Lenovo Notebook Ideapad 300 15Isk Bios: all versions
• Lenovo Notebook Ideapad 300 17Isk Bios: all versions
• Lenovo Notebook Ideapad 510S 12Isk Bios: all versions
• Lenovo Notebook K21 80 Bios: all versions
• Lenovo Notebook K41 80 Bios: all versions
• Lenovo Notebook Miix 710 12Ikb Bios: all versions
• Lenovo Notebook Xiaoxin Air 12 Bios: all versions
• Lenovo Notebook Yoga 510 14Isk Bios: all versions
• Lenovo Notebook Yoga 510 15Isk Bios: all versions
• Lenovo Notebook Yoga 710 11Ikb Bios: all versions
• Lenovo Notebook Yoga 710 11Isk Bios: all versions
• Lenovo Notebook Yoga 900 13Isk Bios: all versions
• Lenovo Notebook Yoga 900S 12Isk Bios: all versions
• Lenovo Thinkserver Ts150 Bios: all versions
• Lenovo Thinkserver Ts450 Bios: all versions

References

• http://www.securityfocus.com/bid/94595
• https://support.lenovo.com/us/en/solutions/LEN_9903
• http://www.securityfocus.com/bid/94595
• https://support.lenovo.com/us/en/solutions/LEN_9903

Get alerted when CVE-2016-8224 or the next vulnerability affects your stack