{"id":"CVE-2016-8224","aliases":["EUVD-2016-9072","GHSA-r89f-2q6r-296f"],"status":"published","title":"A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an...","description":"A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.","severity":{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00304,"percentile":0.23355,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-310"],"published":"2016-11-29T20:00:00Z","modified":"2026-06-17T00:54:02Z","products":[{"vendor":"lenovo","product":"bios"},{"vendor":"lenovo","product":"notebook_110_14ibr_bios"},{"vendor":"lenovo","product":"notebook_110_15ibr_bios"},{"vendor":"lenovo","product":"notebook_b70_80_bios"},{"vendor":"lenovo","product":"notebook_e31_80_bios"},{"vendor":"lenovo","product":"notebook_e40_80_bios"},{"vendor":"lenovo","product":"notebook_e41_80_bios"},{"vendor":"lenovo","product":"notebook_e51_80_bios"},{"vendor":"lenovo","product":"notebook_g40_80_bios"},{"vendor":"lenovo","product":"notebook_g50_80_bios"},{"vendor":"lenovo","product":"notebook_g50_80_touch_bios"},{"vendor":"lenovo","product":"notebook_ideapad_300_14ibr_bios"},{"vendor":"lenovo","product":"notebook_ideapad_300_14isk_bios"},{"vendor":"lenovo","product":"notebook_ideapad_300_15ibr_bios"},{"vendor":"lenovo","product":"notebook_ideapad_300_15isk_bios"},{"vendor":"lenovo","product":"notebook_ideapad_300_17isk_bios"},{"vendor":"lenovo","product":"notebook_ideapad_510s_12isk_bios"},{"vendor":"lenovo","product":"notebook_k21_80_bios"},{"vendor":"lenovo","product":"notebook_k41_80_bios"},{"vendor":"lenovo","product":"notebook_miix_710_12ikb_bios"},{"vendor":"lenovo","product":"notebook_xiaoxin_air_12_bios"},{"vendor":"lenovo","product":"notebook_yoga_510_14isk_bios"},{"vendor":"lenovo","product":"notebook_yoga_510_15isk_bios"},{"vendor":"lenovo","product":"notebook_yoga_710_11ikb_bios"},{"vendor":"lenovo","product":"notebook_yoga_710_11isk_bios"},{"vendor":"lenovo","product":"notebook_yoga_900_13isk_bios"},{"vendor":"lenovo","product":"notebook_yoga_900s_12isk_bios"},{"vendor":"lenovo","product":"thinkserver_ts150_bios"},{"vendor":"lenovo","product":"thinkserver_ts450_bios"},{"vendor":"lenovo group ltd.","product":"lenovo notebook models 110-14ibr/110-15ibr, b70-80, e31-80, e40-80, e41-80, e51-80, g40-80, g50-80, g50-80 touch, ideapad 300-14ibr/300-15ibr, ideapad 300-14isk/300-15isk/300-17isk, ideapad 510s-12isk, k21-80, k41-80, miix 710-12ikb , xiaoxin air 12, yoga 510-14isk/510-15isk, yoga 710-11ikb, yoga 710-11isk, yoga 900-13isk, yoga 900s-12isk; thinkserver models thinkserver ts150, thinkserver ts450"}],"references":[{"url":"http://www.securityfocus.com/bid/94595","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://support.lenovo.com/us/en/solutions/LEN_9903","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8224"},{"url":"https://github.com/advisories/GHSA-r89f-2q6r-296f"}],"sources":{"cve":[{"id":"CVE-2016-8224","description":"A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.","status":"published","published":"2016-11-29T20:00:00Z","modified":"2024-08-06T02:13:21.877Z","updated_at":"2026-11-02T14:33:32.724067Z"}],"euvd":[{"id":"EUVD-2016-9072","description":"A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.","status":"published","published":"2016-11-29T20:00:00Z","modified":"2024-08-06T02:13:21Z","updated_at":"2026-11-03T02:22:30.942601Z"}],"ghsa":[{"id":"GHSA-r89f-2q6r-296f","title":"A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an...","description":"A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.","status":"published","published":"2022-05-17T03:28:58Z","modified":"2023-01-27T05:08:23Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:43:17.773763Z"}],"nvd":[{"id":"CVE-2016-8224","description":"A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.","status":"published","published":"2016-11-29T20:59:02.437Z","modified":"2026-06-17T00:54:02.58Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:03:32.79141Z"}]}}