Lucene search

[email protected]CVE-2016-8226

HistoryJan 26, 2017 - 5:59 p.m.

CVE-2016-8226

2017-01-2617:59:00

CWE-19

[email protected]

web.nvd.nist.gov

bios

lenovo

system x

cve-2016-8226

denial of service

uefi

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.2%

JSON

The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure.

Affected configurations

NVD

Node

lenovoflex_system_x240_m5_biosMatch-

lenovoflex_system_x280_m6_biosMatch-

lenovoflex_system_x480_x6_biosMatch-

lenovoflex_system_x880_x6_biosMatch-

lenovonextscale_nx360_m5_biosMatch-

lenovosystem_x3250_m6_biosMatch-

lenovosystem_x3500_m5_biosMatch-

lenovosystem_x3550_m5_biosMatch-

lenovosystem_x3650_m5_biosMatch-

lenovosystem_x3850_x6_biosMatch-

lenovosystem_x3950_x6_biosMatch-

CPENameOperatorVersion
lenovo:flex_system_x240_m5_bioslenovo flex system x240 m5 bioseq-
lenovo:flex_system_x280_m6_bioslenovo flex system x280 m6 bioseq-
lenovo:flex_system_x480_x6_bioslenovo flex system x480 x6 bioseq-
lenovo:flex_system_x880_x6_bioslenovo flex system x880 x6 bioseq-
lenovo:nextscale_nx360_m5_bioslenovo nextscale nx360 m5 bioseq-
lenovo:system_x3250_m6_bioslenovo system x3250 m6 bioseq-
lenovo:system_x3500_m5_bioslenovo system x3500 m5 bioseq-
lenovo:system_x3550_m5_bioslenovo system x3550 m5 bioseq-
lenovo:system_x3650_m5_bioslenovo system x3650 m5 bioseq-
lenovo:system_x3850_x6_bioslenovo system x3850 x6 bioseq-

CPE	Name	Operator	Version
lenovo:flex_system_x240_m5_bios	lenovo flex system x240 m5 bios	eq	-
lenovo:flex_system_x280_m6_bios	lenovo flex system x280 m6 bios	eq	-
lenovo:flex_system_x480_x6_bios	lenovo flex system x480 x6 bios	eq	-
lenovo:flex_system_x880_x6_bios	lenovo flex system x880 x6 bios	eq	-
lenovo:nextscale_nx360_m5_bios	lenovo nextscale nx360 m5 bios	eq	-
lenovo:system_x3250_m6_bios	lenovo system x3250 m6 bios	eq	-
lenovo:system_x3500_m5_bios	lenovo system x3500 m5 bios	eq	-
lenovo:system_x3550_m5_bios	lenovo system x3550 m5 bios	eq	-
lenovo:system_x3650_m5_bios	lenovo system x3650 m5 bios	eq	-
lenovo:system_x3850_x6_bios	lenovo system x3850 x6 bios	eq	-

Rows per page:

1-10 of 111

CNA Affected

[
  {
    "product": "System X M5, M6, and X6 BIOS",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

www.securityfocus.com/bid/95844

support.lenovo.com/us/en/solutions/LEN-11306

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.2%

JSON

Related for CVE-2016-8226

lenovo2 prion1 cvelist1 nvd1