Vulnerabilities > CVE-2016-5247 - 7PK - Security Features vulnerability in Lenovo Bios

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
lenovo
CWE-254
NVD
Published: 2016-09-22
Updated: 2016-09-23

Summary

The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240, TS440, and TS540 devices; and ThinkStation E32, P300, and P310 devices might allow local users or physically proximate attackers to bypass the Secure Boot protection mechanism by leveraging an AMI test key.

Vulnerable Configurations

Part Description Count
OS
Lenovo
1
Hardware
Lenovo
22

Common Weakness Enumeration (CWE)

References