MEDIUM🇵🇱 Wersja polska

CVE-2016-8222

CVSS 4.4v3.0pub. 2016-11-30upd. 2026-05-06

A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mode (SMM) services. This could lead to a denial of service attack or allow certain BIOS variables or settings to be altered (such as boot sequence). The setting or changing of BIOS passwords is not affected by this vulnerability.

CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

  • Lenovo Thinkpad 10 Ella 2

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 10 Ella 2 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Beema

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Beema Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Braswell

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Braswell Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Broadwell

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Broadwell Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Skylake

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Skylake Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad 13e

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 13e Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E450

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E450 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E450c

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E450c Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E455

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E455 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E460

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E460 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E465

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E465 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E550

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E550 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E550c

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E550c Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E555

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E555 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E560

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E560 Bios

    OS
    Lenovo
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2017-3767HIGH7.8same product

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1....

CVE-2017-3756HIGH7.8same product

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems ve...

CVE-2020-8320MEDIUM6.4same product

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

CVE-2020-8337MEDIUM6.7same product

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio ...

CVE-2017-5638CRITICAL9.8⚠ KEVPL ✓same vendor

RCE w Apache Struts 2 poprzez błędną obsługę nagłówków HTTP (Jakarta Multipart parser)