HIGH🇵🇱 Wersja polska

CVE-2016-5247

CVSS 7.8v3.0pub. 2016-09-22upd. 2026-05-06

The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240, TS440, and TS540 devices; and ThinkStation E32, P300, and P310 devices might allow local users or physically proximate attackers to bypass the Secure Boot protection mechanism by leveraging an AMI test key.

CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Lenovo Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkcentre E93

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M6500t\/s

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M6600

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M6600q

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M6600t\/s

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M73p

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M800

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M83

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M8500t\/s

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M8600t\/s

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M900

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M93

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M93p

    HW
    Lenovo
    all versions

  • Lenovo Thinkserver Rq940

    HW
    Lenovo
    all versions

  • Lenovo Thinkserver Rs140

    HW
    Lenovo
    all versions

  • Lenovo Thinkserver Ts140

    HW
    Lenovo
    all versions

  • Lenovo Thinkserver Ts240

    HW
    Lenovo
    all versions

  • Lenovo Thinkserver Ts440

    HW
    Lenovo
    all versions

  • Lenovo Thinkserver Ts540

    HW
    Lenovo
    all versions

  • Lenovo Thinkstation E32

    HW
    Lenovo
    all versions

  • Lenovo Thinkstation P300

    HW
    Lenovo
    all versions

  • Lenovo Thinkstation P310

    HW
    Lenovo
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-6188CRITICAL9.8PL ✓same product

Lenovo ThinkPad — niesprawny mechanizm wykrywania naruszenia BIOS

CVE-2019-19705HIGH7.8same product

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before ...

CVE-2021-4211MEDIUM6.7same product

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desk...

CVE-2021-4210MEDIUM6.7same product

A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkSt...

CVE-2021-3719MEDIUM6.7same product

A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resu...