CVE-2016-5247 - CVE House
Back to Database
Status published High CVE-2016-5247

The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s,...

Vulnerability Description

The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240, TS440, and TS540 devices; and ThinkStation E32, P300, and P310 devices might allow local users or physically proximate attackers to bypass the Secure Boot protection mechanism by leveraging an AMI test key.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-5247

Credits & Attribution

No credits recorded in the NVD database.

References

More from lenovo

View All →
CVE-2021-42205
ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in...
Unknown 0
CVE-2019-19705
Realtek Audio Drivers for Windows, as used on the Lenovo...
Unknown 0
CVE-2019-10724
There is a vulnerability with the Dolby DAX2 API system...
Medium 6.5
CVE-2016-5729
Lenovo BIOS EFI Driver allows local administrators to execute arbitrary...
High 8.2
CVE-2016-5249
Lenovo Solution Center (LSC) before 3.3.003 allows local users to...
High 7.8

Affected Vendor

Affected Software

bios
Vulnerable Versions:
Unknown

Timeline

Official Publish: September 22nd, 2016
Last Modified: August 6th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.