NVD

Id
22012  
Name
CVE-2016-8222  
Description
A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mode (SMM) services. This could lead to a denial of service attack or allow certain BIOS variables or settings to be altered (such as boot sequence). The setting or changing of BIOS passwords is not affected by this vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-11-30  
Modified Date
2016-12-06  
Seq
2016-8222  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
117871 22012 CVE-2016-8222 94409  View
117872 22012 CVE-2016-8222 https://support.lenovo.com/us/en/solutions/LEN_8327  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5342 JVNDB-2016-006115 ThinkPad システムの BIOS 用署名付きカーネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 ThinkPad システムの BIOS 用署名付きカーネルドライバには、サービス運用妨害 (DoS) 状態にされる、または特定の BIOS の変数または設定 (ブートシーケンスなど) を変更される脆弱性が存在します。 CVE-2016-8222 94729 CVE-2016-8222 22012 4.7 4.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006115.html 2016-11-17 2016-12-07 View