Lucene search

[email protected]CVE-2016-8222

HistoryNov 30, 2016 - 3:59 p.m.

CVE-2016-8222

2016-11-3015:59:00

CWE-284

[email protected]

web.nvd.nist.gov

bios

thinkpad

vulnerability

signed kernel driver

smm service

administrator-level privileges

denial of service

nvd

cve-2016-8222

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mode (SMM) services. This could lead to a denial of service attack or allow certain BIOS variables or settings to be altered (such as boot sequence). The setting or changing of BIOS passwords is not affected by this vulnerability.

Affected configurations

NVD

Node

lenovothinkpad_10_ella_2_biosMatch-

lenovothinkpad_11e_beema_biosMatch-

lenovothinkpad_11e_braswell_biosMatch-

lenovothinkpad_11e_broadwell_biosMatch-

lenovothinkpad_11e_skylake_biosMatch-

lenovothinkpad_13e_biosMatch-

lenovothinkpad_e450_biosMatch-

lenovothinkpad_e450c_biosMatch-

lenovothinkpad_e455_biosMatch-

lenovothinkpad_e460_biosMatch-

lenovothinkpad_e465_biosMatch-

lenovothinkpad_e550_biosMatch-

lenovothinkpad_e550c_biosMatch-

lenovothinkpad_e555_biosMatch-

lenovothinkpad_e560_biosMatch-

lenovothinkpad_e565_biosMatch-

lenovothinkpad_edge_e440_biosMatch-

lenovothinkpad_edge_e445_biosMatch-

lenovothinkpad_edge_e540_biosMatch-

lenovothinkpad_edge_e545_biosMatch-

lenovothinkpad_helix_20cg_biosMatch-

lenovothinkpad_helix_20ch_biosMatch-

lenovothinkpad_l440_biosMatch-

lenovothinkpad_l450_biosMatch-

lenovothinkpad_l460_biosMatch-

lenovothinkpad_l540_biosMatch-

lenovothinkpad_l560_biosMatch-

lenovothinkpad_p50_biosMatch-

lenovothinkpad_p50s_biosMatch-

lenovothinkpad_p70_biosMatch-

lenovothinkpad_s1_yoga_12_biosMatch-

lenovothinkpad_s1_yoga_non_vpro_biosMatch-

lenovothinkpad_s1_yoga_vpro_biosMatch-

lenovothinkpad_s3_s440_biosMatch-

lenovothinkpad_s3_yoga_14_biosMatch-

lenovothinkpad_s5_e560p_biosMatch-

lenovothinkpad_s5_yoga_15_biosMatch-

lenovothinkpad_s540_biosMatch-

lenovothinkpad_t440_biosMatch-

lenovothinkpad_t440p_biosMatch-

lenovothinkpad_t440s_biosMatch-

lenovothinkpad_t440u_biosMatch-

lenovothinkpad_t450_biosMatch-

lenovothinkpad_t450s_biosMatch-

lenovothinkpad_t460_biosMatch-

lenovothinkpad_t460p_biosMatch-

lenovothinkpad_t460s_biosMatch-

lenovothinkpad_t540_biosMatch-

lenovothinkpad_t540p_biosMatch-

lenovothinkpad_t550_biosMatch-

lenovothinkpad_t560_biosMatch-

lenovothinkpad_tablet_10_biosMatch-

lenovothinkpad_tablet_8_biosMatch-

lenovothinkpad_w540_biosMatch-

lenovothinkpad_w541_biosMatch-

lenovothinkpad_w550s_biosMatch-

lenovothinkpad_x1_carbon_20ax_biosMatch-

lenovothinkpad_x1_carbon_20bx_biosMatch-

lenovothinkpad_x1_carbon_biosMatch-

lenovothinkpad_x1_tablet_biosMatch-

lenovothinkpad_x1_yoga_biosMatch-

lenovothinkpad_x140e_amd_biosMatch-

lenovothinkpad_x240_biosMatch-

lenovothinkpad_x240s_biosMatch-

lenovothinkpad_x250_broadwell_biosMatch-

lenovothinkpad_x250_sharkbay_biosMatch-

lenovothinkpad_x260_biosMatch-

lenovothinkpad_yoga_11e_beema_biosMatch-

lenovothinkpad_yoga_11e_biosMatch-

lenovothinkpad_yoga_11e_braswell_biosMatch-

lenovothinkpad_yoga_11e_broadwell_biosMatch-

lenovothinkpad_yoga_11e_skylake_biosMatch-

lenovothinkpad_yoga_14_460_s3_biosMatch-

lenovothinkpad_yoga_260_s1_biosMatch-

AND

lenovothinkpad_10_ella_2Match-

lenovothinkpad_11e_beemaMatch-

lenovothinkpad_11e_braswellMatch-

lenovothinkpad_11e_broadwellMatch-

lenovothinkpad_11e_skylakeMatch-

lenovothinkpad_13eMatch-

lenovothinkpad_e450Match-

lenovothinkpad_e450cMatch-

lenovothinkpad_e455Match-

lenovothinkpad_e460Match-

lenovothinkpad_e465Match-

lenovothinkpad_e550Match-

lenovothinkpad_e550cMatch-

lenovothinkpad_e555Match-

lenovothinkpad_e560Match-

lenovothinkpad_e565Match-

lenovothinkpad_edge_e440Match-

lenovothinkpad_edge_e445Match-

lenovothinkpad_edge_e540Match-

lenovothinkpad_edge_e545Match-

lenovothinkpad_helix_20cgMatch-

lenovothinkpad_helix_20chMatch-

lenovothinkpad_l440Match-

lenovothinkpad_l450Match-

lenovothinkpad_l460Match-

lenovothinkpad_l540Match-

lenovothinkpad_l560Match-

lenovothinkpad_p50Match-

lenovothinkpad_p50sMatch-

lenovothinkpad_p70Match-

lenovothinkpad_s1_yoga_12Match-

lenovothinkpad_s1_yoga_non_vproMatch-

lenovothinkpad_s1_yoga_vproMatch-

lenovothinkpad_s3_s440Match-

lenovothinkpad_s3_yoga_14Match-

lenovothinkpad_s5_e560pMatch-

lenovothinkpad_s5_yoga_15Match-

lenovothinkpad_s540Match-

lenovothinkpad_t440Match-

lenovothinkpad_t440pMatch-

lenovothinkpad_t440sMatch-

lenovothinkpad_t440uMatch-

lenovothinkpad_t450Match-

lenovothinkpad_t450sMatch-

lenovothinkpad_t460Match-

lenovothinkpad_t460pMatch-

lenovothinkpad_t460sMatch-

lenovothinkpad_t540Match-

lenovothinkpad_t540pMatch-

lenovothinkpad_t550Match-

lenovothinkpad_t560Match-

lenovothinkpad_tablet_10Match-

lenovothinkpad_tablet_8Match-

lenovothinkpad_w540Match-

lenovothinkpad_w541Match-

lenovothinkpad_w550sMatch-

lenovothinkpad_x1_carbonMatch-

lenovothinkpad_x1_carbon_20axMatch-

lenovothinkpad_x1_carbon_20bxMatch-

lenovothinkpad_x1_tabletMatch-

lenovothinkpad_x1_yogaMatch-

lenovothinkpad_x140e_amdMatch-

lenovothinkpad_x240Match-

lenovothinkpad_x240sMatch-

lenovothinkpad_x250_broadwellMatch-

lenovothinkpad_x250_sharkbayMatch-

lenovothinkpad_x260Match-

lenovothinkpad_yoga_11eMatch-

lenovothinkpad_yoga_11e_beemaMatch-

lenovothinkpad_yoga_11e_braswellMatch-

lenovothinkpad_yoga_11e_broadwellMatch-

lenovothinkpad_yoga_11e_skylakeMatch-

lenovothinkpad_yoga_14_460_s3Match-

lenovothinkpad_yoga_260_s1Match-

CPENameOperatorVersion
lenovo:thinkpad_10_ella_2_bioslenovo thinkpad 10 ella 2 bioseq-
lenovo:thinkpad_11e_beema_bioslenovo thinkpad 11e beema bioseq-
lenovo:thinkpad_11e_braswell_bioslenovo thinkpad 11e braswell bioseq-
lenovo:thinkpad_11e_broadwell_bioslenovo thinkpad 11e broadwell bioseq-
lenovo:thinkpad_11e_skylake_bioslenovo thinkpad 11e skylake bioseq-
lenovo:thinkpad_13e_bioslenovo thinkpad 13e bioseq-
lenovo:thinkpad_e450_bioslenovo thinkpad e450 bioseq-
lenovo:thinkpad_e450c_bioslenovo thinkpad e450c bioseq-
lenovo:thinkpad_e455_bioslenovo thinkpad e455 bioseq-
lenovo:thinkpad_e460_bioslenovo thinkpad e460 bioseq-

CPE	Name	Operator	Version
lenovo:thinkpad_10_ella_2_bios	lenovo thinkpad 10 ella 2 bios	eq	-
lenovo:thinkpad_11e_beema_bios	lenovo thinkpad 11e beema bios	eq	-
lenovo:thinkpad_11e_braswell_bios	lenovo thinkpad 11e braswell bios	eq	-
lenovo:thinkpad_11e_broadwell_bios	lenovo thinkpad 11e broadwell bios	eq	-
lenovo:thinkpad_11e_skylake_bios	lenovo thinkpad 11e skylake bios	eq	-
lenovo:thinkpad_13e_bios	lenovo thinkpad 13e bios	eq	-
lenovo:thinkpad_e450_bios	lenovo thinkpad e450 bios	eq	-
lenovo:thinkpad_e450c_bios	lenovo thinkpad e450c bios	eq	-
lenovo:thinkpad_e455_bios	lenovo thinkpad e455 bios	eq	-
lenovo:thinkpad_e460_bios	lenovo thinkpad e460 bios	eq	-

Rows per page:

1-10 of 741

CNA Affected

[
  {
    "product": "ThinkPad systems",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

www.securityfocus.com/bid/94409

support.lenovo.com/us/en/solutions/LEN_8327

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2016-8222

lenovo2 prion1 cvelist1 nvd1