CVE-2016-8224
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an...
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.
- Record
CVE-2016-8224- CVSS 3.0
- 4.4 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:S/C:N/I:N/A:C - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.
- Record
CVE-2016-8224- Updated
- 2026-11-02
EUVDEUVD-2016-9072 No score
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.
- Record
EUVD-2016-9072- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r89f-2q6r-296f
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an...
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.
- Record
GHSA-r89f-2q6r-296f- CVSS 3.0
- 4.4 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
- lenovo bios
- lenovo notebook 110 14ibr bios
- lenovo notebook 110 15ibr bios
- lenovo notebook b70 80 bios
- lenovo notebook e31 80 bios
- lenovo notebook e40 80 bios
- lenovo notebook e41 80 bios
- lenovo notebook e51 80 bios
- lenovo notebook g40 80 bios
- lenovo notebook g50 80 bios
- lenovo notebook g50 80 touch bios
- lenovo notebook ideapad 300 14ibr bios
Show 18 moreShow less
- lenovo notebook ideapad 300 14isk bios
- lenovo notebook ideapad 300 15ibr bios
- lenovo notebook ideapad 300 15isk bios
- lenovo notebook ideapad 300 17isk bios
- lenovo notebook ideapad 510s 12isk bios
- lenovo notebook k21 80 bios
- lenovo notebook k41 80 bios
- lenovo notebook miix 710 12ikb bios
- lenovo notebook xiaoxin air 12 bios
- lenovo notebook yoga 510 14isk bios
- lenovo notebook yoga 510 15isk bios
- lenovo notebook yoga 710 11ikb bios
- lenovo notebook yoga 710 11isk bios
- lenovo notebook yoga 900 13isk bios
- lenovo notebook yoga 900s 12isk bios
- lenovo thinkserver ts150 bios
- lenovo thinkserver ts450 bios
- lenovo group ltd. notebook models 110-14ibr/110-15ibr, b70-80, e31-80, e40-80, e41-80, e51-80, g40-80, g50-80, g50-80 touch, ideapad 300-14ibr/300-15ibr, ideapad 300-14isk/300-15isk/300-17isk, ideapad 510s-12isk, k21-80, k41-80, miix 710-12ikb , xiaoxin air 12, yoga 510-14isk/510-15isk, yoga 710-11ikb, yoga 710-11isk, yoga 900-13isk, yoga 900s-12isk; thinkserver models thinkserver ts150, thinkserver ts450
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-8224 is a medium vulnerability (CVSS 4.4) in Lenovo Bios, published November 29, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 23rd percentile. No source names a fixed version.