**Lenovo Security Advisory:**LEN-4901
**Potential Impact:**Execution of code in SMM by an attacker with local administrative access
Severity: Medium **Scope of Impact: Lenovo specific **
Summary Description:
System Management Mode (SMM) is the most privileged execution mode of the x86 processor. A vulnerability has been identified in a function within the SMM where an attacker with local administrative access could execute code within the SMM. This could be used to bypass some BIOS security mechanisms and install software with bootkit functionality.
Mitigation Strategy for Customers (what you should do to protect yourself):
Update to the latest BIOS version available for your product.
Product Impact:
Click to expand for more info
Desktop
ThinkStation
Product |Minimum Fix
Version|Web Link
ā|ā|ā
Horizon 2 27 Table PC | O1BKT44A | http://support.lenovo.com/us/en/downloads/DS104496
Horizon2e Table PC | O19KT24A | http://support.lenovo.com/us/en/downloads/DS101046
Lenovo 63 | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
Lenovo B2200 | O07KT58A | http://support.lenovo.com/us/en/downloads/DS101339
Lenovo B3300 | |
Lenovo B4030 | O0CKT29A | <http://support.lenovo.com/us/en/downloads/ds101240>
Lenovo B40-30 All-In-One | O0CKT29A | <http://support.lenovo.com/us/en/downloads/ds101240>
Lenovo B40-30 Touch All-In-One | O0CKT29A | <http://support.lenovo.com/us/en/downloads/ds101240>
Lenovo B4040 | O0CKT29A | <http://support.lenovo.com/us/en/downloads/ds101240>
Lenovo B5030 | O0BKT24A | http://support.lenovo.com/us/en/downloads/DS101243
Lenovo B50-30 All-In-One | O0BKT24A | http://support.lenovo.com/us/en/downloads/DS101243
Lenovo B50-30 Touch All-In-One | O0BKT24A | http://support.lenovo.com/us/en/downloads/DS101243
Lenovo B5035 | O0AKT22A | http://support.lenovo.com/us/en/downloads/DS101270
Lenovo B5040 | O0BKT24A | http://support.lenovo.com/us/en/downloads/DS101243
Lenovo B5900 | |
Lenovo C2005 | O23KT16A | <http://support.lenovo.com/us/en/downloads/DS101524>
Lenovo C20-05 All-In-One | O23KT16A | <http://support.lenovo.com/us/en/downloads/DS101524>
Lenovo C2030 | O0EKT32A | <http://support.lenovo.com/us/en/downloads/DS101522>
Lenovo C20-30 All-In-One | O0EKT32A | <http://support.lenovo.com/us/en/downloads/DS101522>
Lenovo C360 All-In-One | IMKT23A | http://support.lenovo.com/us/en/downloads/DS104558
Lenovo C4005 | O0K17A | <http://support.lenovo.com/us/en/downloads/DS101493>
Lenovo C40-05 All-In-One | O0K17A | <http://support.lenovo.com/us/en/downloads/DS101493>
Lenovo C4030 | O0HKT20A | <http://support.lenovo.com/us/en/downloads/DS101525>
Lenovo C40-30 All-In-One | O0HKT20A | <http://support.lenovo.com/us/en/downloads/DS101525>
Lenovo C460 All-In-One | IMKT23A | http://support.lenovo.com/us/en/downloads/DS104558
Lenovo C50-30 All-In-One | O01KT20A | <http://support.lenovo.com/us/en/downloads/DS104539>
Lenovo C5030-non-Touch | O01KT20A | <http://support.lenovo.com/us/en/downloads/DS104539>
Lenovo D5055 | IRKT57A | http://support.lenovo.com/us/en/downloads/DS112847
Lenovo E50-00 Deskop | O07KT58A | http://support.lenovo.com/us/en/downloads/DS101339
Lenovo E50-05 | |
Lenovo H3000 | O07KT58A | http://support.lenovo.com/us/en/downloads/DS101339
Lenovo H30-00 Desktop | O07KT58A | http://support.lenovo.com/us/en/downloads/DS101339
Lenovo H3005 | O06KT36A | http://support.lenovo.com/us/en/downloads/DS105664
Lenovo H30-05 Desktop | O06KT36A | http://support.lenovo.com/us/en/downloads/DS105664
Lenovo H3050 | | Lenovo H30-50 Desktop | |
Lenovo H50-00 Desktop | O07KT58A | http://support.lenovo.com/us/en/downloads/DS101339
Lenovo H5005 | O06KT36A | http://support.lenovo.com/us/en/downloads/DS105664
Lenovo H50-05 Desktop | O06KT36A | http://support.lenovo.com/us/en/downloads/DS105664
Lenovo H50-30g Desktop | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
Lenovo H5050 | | Lenovo H50-50 Desktop | |
Lenovo M2200 | O07KT58A | http://support.lenovo.com/us/en/downloads/DS101339
Lenovo M3300 | | Lenovo M4350 Desktop| | Lenovo M4360 ID | |
Lenovo M4500 | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
Lenovo M4500 ID | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
Lenovo M4550 ID | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
Lenovo M5900 | IRKT57A | http://support.lenovo.com/us/en/downloads/DS112847
Lenovo M5900n - China only | IRKT57A | http://support.lenovo.com/us/en/downloads/DS112847
Lenovo S200z | M09KT30A | http://support.lenovo.com/us/en/downloads/DS104822
Lenovo S400z | M0BKT38A | http://support.lenovo.com/us/en/downloads/DS105147
Lenovo S40-40 All-In-One | IZKT26A | <http://support.lenovo.com/us/en/downloads/DS101300>
Lenovo S40-40 White Touch | IZKT26A | <http://support.lenovo.com/us/en/downloads/DS101300>
Lenovo S405z | M0CKT29A | <http://support.lenovo.com/us/en/downloads/ds105081>
Lenovo S500 | M0KKT24A | <http://support.lenovo.com/us/en/downloads/DS038324>
Lenovo S500z | M0BKT38A | http://support.lenovo.com/us/en/downloads/DS105147
Lenovo S50-30 | O18KT20A | <http://support.lenovo.com/us/en/downloads/DS102782>
ThinkCenter M700z | FVKT42A | http://support.lenovo.com/us/en/downloads/DS105630
ThinkCenter M800z | FVKT42A | http://support.lenovo.com/us/en/downloads/DS105630
ThinkCentre E63z (AIO) (type 10D4, 10D5, 10D6, 10D7, 10EJ, 10EK) | FQKT33A | http://support.lenovo.com/us/en/downloads/DS100926
ThinkCentre E63z (AIO) (type 10E0, 10E1, 10E2, 10E3, 10EL, 10EM) | FSKT30A | <http://support.lenovo.com/us/en/downloads/DS101232>
ThinkCentre E73 (SFF) | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
ThinkCentre E73 (TWR) | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
ThinkCentre E73s | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
ThinkCentre E73Z (AIO) | FGKT46A | <http://support.lenovo.com/us/en/downloads/DS038323>
ThinkCentre E74 | M05KT54A | <http://support.lenovo.com/us/en/downloads/DS111845>
ThinkCentre E74s | M05KT54A | <http://support.lenovo.com/us/en/downloads/DS111845>
ThinkCentre E74z | FVKT42A | http://support.lenovo.com/us/en/downloads/DS105630
ThinkCentre E79 | |
ThinkCentre E93 (SFF) | FBKTC5A | http://support.lenovo.com/us/en/downloads/DS035753
ThinkCentre E93 (TWR) | FBKTC5A | http://support.lenovo.com/us/en/downloads/DS035753
ThinkCentre E93Z (AIO) | FFKT41A | <http://support.lenovo.com/us/en/downloads/DS036668>
ThinkCentre E93z FO | FEKT9AA | <http://support.lenovo.com/us/en/downloads/DS036004>
ThinkCentre Edge 62z | F8KT39A | http://support.lenovo.com/us/en/downloads/DS031473
ThinkCentre Edge 63z | FQKT33A | http://support.lenovo.com/us/en/downloads/DS100926
ThinkCentre Edge 72 | F1KT71A | <http://support.lenovo.com/us/en/downloads/ds029433>
ThinkCentre Edge 72z | F6KT43A | http://support.lenovo.com/us/en/downloads/DS029266
ThinkCentre Edge 92z | 9XKT34A | http://support.lenovo.com/us/en/downloads/DS030110
ThinkCentre M3500q | FRKT45A | http://support.lenovo.com/us/en/downloads/DS101009
ThinkCentre M4350t/s | F1KT71A | <http://support.lenovo.com/us/en/downloads/ds029433>
ThinkCentre M4500k | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
ThinkCentre M4500q | FHKT66A | http://support.lenovo.com/us/en/downloads/DS038325
ThinkCentre M4500t/s | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
ThinkCentre M4600t/s | M05KT54A | <http://support.lenovo.com/us/en/downloads/DS111845>
ThinkCentre M53 (Tiny) | FRKT45A | http://support.lenovo.com/us/en/downloads/DS101009
ThinkCentre M600 | M00KT44A |
ThinkCentre M62Z | F0KT45A | http://support.lenovo.com/us/en/downloads/DS030249
ThinkCentre M6500t/s | FBKTC5A | http://support.lenovo.com/us/en/downloads/DS035753
ThinkCentre M6600 | FWKT39A | <http://support.lenovo.com/us/en/downloads/DS105487>
ThinkCentre M6600q | FWKT39A | <http://support.lenovo.com/us/en/downloads/DS105487>
ThinkCentre M6600t/s | FWKT39A | <http://support.lenovo.com/us/en/downloads/DS105487>
ThinkCentre M700 | M05KT54A | <http://support.lenovo.com/us/en/downloads/DS111845>
ThinkCentre M700z | FVKT42A | http://support.lenovo.com/us/en/downloads/DS105630
ThinkCentre M7200z | FGKT46A | <http://support.lenovo.com/us/en/downloads/DS038323>
ThinkCentre M7250z | FGKT46A | <http://support.lenovo.com/us/en/downloads/DS038323>
ThinkCentre M72e (Ivy) | F1KT71A | <http://support.lenovo.com/us/en/downloads/ds029433>
ThinkCentre M72e (PCI) | |
ThinkCentre M72e (Tiny) | F4KT56A | http://support.lenovo.com/us/en/downloads/DS029184
ThinkCentre M72z | F6KT43A | http://support.lenovo.com/us/en/downloads/DS029266
ThinkCentre M73 (SFF) | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
ThinkCentre M73 (TWR) | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
ThinkCentre M73 Tiny | FHKT66A | http://support.lenovo.com/us/en/downloads/DS03832
ThinkCentre M7300z | FVKT42A | http://support.lenovo.com/us/en/downloads/DS105630
ThinkCentre M73p | FBKTC5A | http://support.lenovo.com/us/en/downloads/DS035753
ThinkCentre M73Z (AIO) | FGKT46A | <http://support.lenovo.com/us/en/downloads/DS038323>
ThinkCentre M78 (type 1562, 1565, 1662, 1663, 1766, 2111, 2113, 2114, 4860, 4863, 4865, 4866, 5100) | 9ZKT54A | http://support.lenovo.com/us/en/downloads/DS031087
ThinkCentre M78 (type 10BN, 10BQ, 10BR, 10BS, 10BT, 10BU) | FNKT45A | <http://support.lenovo.com/us/en/downloads/DS038364>
ThinkCentre M79 (SFF) | | ThinkCentre M79 (TWR) | |
ThinkCentre M800 | FWKT39A | <http://support.lenovo.com/us/en/downloads/DS105487>
ThinkCentre M800z | FVKT42A | http://support.lenovo.com/us/en/downloads/DS105630
ThinkCentre M8200z | FGKT46A | <http://support.lenovo.com/us/en/downloads/DS038323>
ThinkCentre M8250z | FGKT46A | <http://support.lenovo.com/us/en/downloads/DS038323>
ThinkCentre M83 (SFF) | FBKTC5A | http://support.lenovo.com/us/en/downloads/DS035753
ThinkCentre M83 (Tiny) | FBKTC5A | http://support.lenovo.com/us/en/downloads/DS035753
ThinkCentre M83 (TWR) | FBKTC5A | http://support.lenovo.com/us/en/downloads/DS035753
ThinkCentre M8300z | FVKT42A | http://support.lenovo.com/us/en/downloads/DS105630
ThinkCentre M8350z | FVKT42A | http://support.lenovo.com/us/en/downloads/DS105630
ThinkCentre M83Z (AIO) | FVKT42A | http://support.lenovo.com/us/en/downloads/DS105630
ThinkCentre M8500t/s | FBKTC5A | http://support.lenovo.com/us/en/downloads/DS035753
ThinkCentre M8600t/s | FWKT39A | <http://support.lenovo.com/us/en/downloads/DS105487>
ThinkCentre M900 | FWKT39A | <http://support.lenovo.com/us/en/downloads/DS105487>
ThinkCentre M900Z | FUKT39A | <http://support.lenovo.com/us/en/downloads/DS105631>
ThinkCentre M92 | 9SKT95A | http://support.lenovo.com/us/en/downloads/DS029265
ThinkCentre M92P | 9SKT95A | http://support.lenovo.com/us/en/downloads/DS029265
ThinkCentre M92Z | 9NKT70A | <http://support.lenovo.com/us/en/downloads/DS029443>
ThinkCentre M93 | FBKTC5A | http://support.lenovo.com/us/en/downloads/DS035753
ThinkCentre M9350z | FEKT9AA | <http://support.lenovo.com/us/en/downloads/DS036004>
ThinkCentre M93P (SFF) | FBKTC5A | http://support.lenovo.com/us/en/downloads/DS035753
ThinkCentre M93P (TWR) | FBKTC5A | http://support.lenovo.com/us/en/downloads/DS035753
ThinkCentre M93P Tiny | FBKTC5A | http://support.lenovo.com/us/en/downloads/DS035753
ThinkCentre M93Z (AIO) | FEKT9AA | <http://support.lenovo.com/us/en/downloads/DS036004>
ThinkCentre M9500z | FUKT39A | <http://support.lenovo.com/us/en/downloads/DS105631>
ThinkCentre M9550z | FUKT39A | <http://support.lenovo.com/us/en/downloads/DS105631>
ThinkCentre X1 AIO | M0HKT29A | <http://support.lenovo.com/us/en/downloads/DS112100>
YANGTIAN AfH110 | M05KT54A | <http://support.lenovo.com/us/en/downloads/DS111845>
YANGTIAN AfH81 | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
YANGTIAN AfQ150 | FWKT39A | <http://support.lenovo.com/us/en/downloads/DS105487>
YANGTIAN Mc Godavari | |
YANGTIAN Mc H110 | M05KT54A | <http://support.lenovo.com/us/en/downloads/DS111845>
YANGTIAN Mc H110 PCI | M05KT54A | <http://support.lenovo.com/us/en/downloads/DS111845>
YANGTIAN Mc H81 | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
YANGTIAN Me/We H110 | M0UKT22A | <http://support.lenovo.com/us/en/downloads/DS112505>
YANGTIAN Mf/Wf H110 PCI | M0UKT22A | <http://support.lenovo.com/us/en/downloads/DS112505>
YANGTIAN Mf/Wf H81 PCI | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
YANGTIAN Ms/Ws H81 | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
YANGTIAN S3040 | FGKT46A | <http://support.lenovo.com/us/en/downloads/DS038323>
YANGTIAN S4040 | IZKT26A | <http://support.lenovo.com/us/en/downloads/DS101300>
YANGTIAN S4105 | M0CKT29A | <http://support.lenovo.com/us/en/downloads/ds105081>
YANGTIAN S4130 | | YANGTIAN s5130 | |
YANGTIAN S800 | FFKT41A | <http://support.lenovo.com/us/en/downloads/DS036668>
YANGTIAN Tc/Wc H110 PCI | M05KT54A | <http://support.lenovo.com/us/en/downloads/DS111845>
YANGTIAN TC/WCc H81 PCI | FCKT78A | <http://support.lenovo.com/us/en/downloads/DS038324>
Other information and references:
CVE-2016-5729
Revision History:
Revision
|
Date
|
Description
ā|ā|ā
1.1 | 08/13/2016 | Final Release
1.0 | 06/23/2016 |** Initial release**
Product Impact
Desktop
ā
ThinkStation