CVE-2016-8224: Lenovo BIOS

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.

Affected products

Lenovo BIOS: affected versions not specified
Lenovo Notebook 110 14ibr BIOS: affected versions not specified
Lenovo Notebook 110 15ibr BIOS: affected versions not specified
Lenovo Notebook b70 80 BIOS: affected versions not specified
Lenovo Notebook e31 80 BIOS: affected versions not specified
Lenovo Notebook e40 80 BIOS: affected versions not specified
Lenovo Notebook e41 80 BIOS: affected versions not specified
Lenovo Notebook e51 80 BIOS: affected versions not specified
Lenovo Notebook g40 80 BIOS: affected versions not specified
Lenovo Notebook g50 80 BIOS: affected versions not specified
Lenovo Notebook g50 80 Touch BIOS: affected versions not specified
Lenovo Notebook Ideapad 300 14ibr BIOS: affected versions not specified
Lenovo Notebook Ideapad 300 14isk BIOS: affected versions not specified
Lenovo Notebook Ideapad 300 15ibr BIOS: affected versions not specified
Lenovo Notebook Ideapad 300 15isk BIOS: affected versions not specified
Lenovo Notebook Ideapad 300 17isk BIOS: affected versions not specified
Lenovo Notebook Ideapad 510s 12isk BIOS: affected versions not specified
Lenovo Notebook k21 80 BIOS: affected versions not specified
Lenovo Notebook k41 80 BIOS: affected versions not specified
Lenovo Notebook Miix 710 12ikb BIOS: affected versions not specified
Lenovo Notebook Xiaoxin Air 12 BIOS: affected versions not specified
Lenovo Notebook Yoga 510 14isk BIOS: affected versions not specified
Lenovo Notebook Yoga 510 15isk BIOS: affected versions not specified
Lenovo Notebook Yoga 710 11ikb BIOS: affected versions not specified
Lenovo Notebook Yoga 710 11isk BIOS: affected versions not specified
and 4 more

Published 2016-11-29. Last modified 2026-06-17.