var-201608-0492
Vulnerability from variot
BIOS (BasicInput/OutputSystem) is the basic output input system, which is the most basic software code loaded on the computer hardware system. There is a security vulnerability in LenovoThinkPadBIOS. In the system management mode, an attacker with local administrative access can use the vulnerability to execute arbitrary code, disable flash write protection, infect platform firmware, disable secure boot, bypass virtual security mode, and so on. Lenovo ThinkPad is prone to a local privilege escalation vulnerability
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201608-0492",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "thinkpad yoga 11e",
"scope": "eq",
"trust": 0.9,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad",
"scope": null,
"trust": 0.6,
"vendor": "lenovo",
"version": null
},
{
"model": "thinkpad carbon",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "x10"
},
{
"model": "thinkpad tablet",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "80"
},
{
"model": "thinkpad tablet",
"scope": "eq",
"trust": 0.6,
"vendor": "lenovo",
"version": "100"
},
{
"model": "thinkstation d30 (type",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "4353-4354)0"
},
{
"model": "thinkstation d30 (type",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "4223-4228-4229)0"
},
{
"model": "thinkstation c30 (type",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "1136-1137)0"
},
{
"model": "thinkstation c30 (type",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "1095-1096-1097)0"
},
{
"model": "thinkpad yoga",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "150"
},
{
"model": "thinkpad",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x2500"
},
{
"model": "thinkpad x240s",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x2400"
},
{
"model": "thinkpad x230s",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad x230i tablet",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad x230i",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad tablet",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x2300"
},
{
"model": "thinkpad",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x2300"
},
{
"model": "thinkpad x140e",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad x131e",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad w550s",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad w541",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad w540",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad w530",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad ultrazoom",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "1"
},
{
"model": "thinkpad ultranav wizard",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "3"
},
{
"model": "thinkpad twist/edge s230",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t550",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t540p",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t530i",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t530",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t450s",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t450",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t440s",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t440p",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t440",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t431s",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t430si",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t430s",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t430i",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t430",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad t430",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": null
},
{
"model": "thinkpad t420",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": null
},
{
"model": "thinkpad t400",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": null
},
{
"model": "thinkpad s540",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad s531",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad s430",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad s3-s440",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad s3 yoga",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "140"
},
{
"model": "thinkpad l540",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad l450",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad l440",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad l430",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad helix",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "(3xxx)0"
},
{
"model": "thinkpad helix",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad edge s430",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad edge e555",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad edge e455",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad e565",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad e465",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad 11e",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "thinkpad",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "100"
},
{
"model": "thinkpad",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x61"
},
{
"model": "thinkpad",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x220"
},
{
"model": "thinkpad",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x201"
},
{
"model": "thinkpad t61",
"scope": null,
"trust": 0.3,
"vendor": "lenovo",
"version": null
},
{
"model": "thinkpad t60",
"scope": null,
"trust": 0.3,
"vendor": "lenovo",
"version": null
},
{
"model": "thinkpad t530",
"scope": null,
"trust": 0.3,
"vendor": "lenovo",
"version": null
},
{
"model": "thinkpad t430",
"scope": null,
"trust": 0.3,
"vendor": "lenovo",
"version": null
},
{
"model": "thinkpad t43",
"scope": null,
"trust": 0.3,
"vendor": "lenovo",
"version": null
},
{
"model": "thinkpad t410",
"scope": null,
"trust": 0.3,
"vendor": "lenovo",
"version": null
},
{
"model": "system m5",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x36500"
},
{
"model": "system m5",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x35500"
},
{
"model": "system m5",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x35000"
},
{
"model": "ideapad z50-75",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "ideapad yoga",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "3140"
},
{
"model": "ideapad s41-75",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "ideapad s41-35",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "ideapad m41-70",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "ideapad k41-70",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "ideapad g70-35",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "ideapad g51-35",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "ideapad g50-70m",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "ideapad g41-35",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "ideapad g40-75m",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "ideapad flex",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "3-15700"
},
{
"model": "ideapad flex",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "3-14700"
},
{
"model": "ideapad flex 3-1435",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "ideapad 305-15ihw",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "0"
},
{
"model": "flex system",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x880x60"
},
{
"model": "flex system",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x8800"
},
{
"model": "flex system",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x480x60"
},
{
"model": "flex system",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x280x60"
},
{
"model": "flex system m5",
"scope": "eq",
"trust": 0.3,
"vendor": "lenovo",
"version": "x2400"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-05721"
},
{
"db": "BID",
"id": "91538"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Dmytro Oleksiuk",
"sources": [
{
"db": "BID",
"id": "91538"
}
],
"trust": 0.3
},
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 6.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.1,
"id": "CNVD-2016-05721",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "CNVD",
"id": "CNVD-2016-05721",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-05721"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "BIOS (BasicInput/OutputSystem) is the basic output input system, which is the most basic software code loaded on the computer hardware system. There is a security vulnerability in LenovoThinkPadBIOS. In the system management mode, an attacker with local administrative access can use the vulnerability to execute arbitrary code, disable flash write protection, infect platform firmware, disable secure boot, bypass virtual security mode, and so on. Lenovo ThinkPad is prone to a local privilege escalation vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-05721"
},
{
"db": "BID",
"id": "91538"
}
],
"trust": 0.81
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "LENOVO",
"id": "LEN-8324",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2016-05721",
"trust": 0.6
},
{
"db": "BID",
"id": "91538",
"trust": 0.3
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-05721"
},
{
"db": "BID",
"id": "91538"
}
]
},
"id": "VAR-201608-0492",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-05721"
}
],
"trust": 1.1456349242857142
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-05721"
}
]
},
"last_update_date": "2022-05-17T02:02:27.013000Z",
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 0.6,
"url": "https://support.lenovo.com/us/zh/solutions/len-8324"
},
{
"trust": 0.3,
"url": "http://www.lenovo.com/ca/en/"
},
{
"trust": 0.3,
"url": "https://github.com/cr4sh/thinkpwn"
},
{
"trust": 0.3,
"url": "http://blog.cr4.sh/2016/06/exploring-and-exploiting-lenovo.html"
},
{
"trust": 0.3,
"url": "https://support.lenovo.com/us/en/solutions/len-8324 "
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-05721"
},
{
"db": "BID",
"id": "91538"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2016-05721"
},
{
"db": "BID",
"id": "91538"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-08-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2016-05721"
},
{
"date": "2016-06-30T00:00:00",
"db": "BID",
"id": "91538"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-08-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2016-05721"
},
{
"date": "2016-07-14T20:00:00",
"db": "BID",
"id": "91538"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "91538"
}
],
"trust": 0.3
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lenovo ThinkPad BIOS System Management Mode Arbitrary Code Execution Vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-05721"
}
],
"trust": 0.6
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Unknown",
"sources": [
{
"db": "BID",
"id": "91538"
}
],
"trust": 0.3
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.