What’s Vulnerable › Vulnerabilities

CVE-2016-8226

• Severity: medium (CVSS 4.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-01-26 · updated 2026-06-17
• Weakness: CWE-19

Description

The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure.

Affected products

• Lenovo Flex System X240 M5 Bios: all versions
• Lenovo Flex System X280 M6 Bios: all versions
• Lenovo Flex System X480 X6 Bios: all versions
• Lenovo Flex System X880 X6 Bios: all versions
• Lenovo Nextscale Nx360 M5 Bios: all versions
• Lenovo System X3250 M6 Bios: all versions
• Lenovo System X3500 M5 Bios: all versions
• Lenovo System X3550 M5 Bios: all versions
• Lenovo System X3650 M5 Bios: all versions
• Lenovo System X3850 X6 Bios: all versions
• Lenovo System X3950 X6 Bios: all versions

References

• http://www.securityfocus.com/bid/95844
• https://support.lenovo.com/us/en/solutions/LEN-11306
• http://www.securityfocus.com/bid/95844
• https://support.lenovo.com/us/en/solutions/LEN-11306

Get alerted when CVE-2016-8226 or the next vulnerability affects your stack