CVE-2016-8226 — MEDIUM (4.9)

Vulnerability Description

The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure.

CVSS Score

4.9

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Lenovo	Flex System X240 M5 Bios	-
Lenovo	Flex System X280 M6 Bios	-
Lenovo	Flex System X480 X6 Bios	-
Lenovo	Flex System X880 X6 Bios	-
Lenovo	Nextscale Nx360 M5 Bios	-
Lenovo	System X3250 M6 Bios	-
Lenovo	System X3500 M5 Bios	-
Lenovo	System X3550 M5 Bios	-
Lenovo	System X3650 M5 Bios	-
Lenovo	System X3850 X6 Bios	-
Lenovo	System X3950 X6 Bios	-

Related Weaknesses (CWE)

CWE-19

References

http://www.securityfocus.com/bid/95844
https://support.lenovo.com/us/en/solutions/LEN-11306Vendor Advisory
http://www.securityfocus.com/bid/95844
https://support.lenovo.com/us/en/solutions/LEN-11306Vendor Advisory

FAQ

What is CVE-2016-8226?

CVE-2016-8226 is a vulnerability with a CVSS score of 4.9 (MEDIUM). The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure.

How severe is CVE-2016-8226?

CVE-2016-8226 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-8226?

Check the references section above for vendor advisories and patch information. Affected products include: Lenovo Flex System X240 M5 Bios, Lenovo Flex System X280 M6 Bios, Lenovo Flex System X480 X6 Bios, Lenovo Flex System X880 X6 Bios, Lenovo Nextscale Nx360 M5 Bios.