CVE-2016-5247

The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240, TS440, and TS540 devices; and ThinkStation E32, P300, and P310 devices might allow local users or physically proximate attackers to bypass the Secure Boot protection mechanism by leveraging an AMI test key.

• CWE-254

• http://www.securityfocus.com/bid/92661Third Party Advisory
• https://support.lenovo.com/product_security/PS500067Mitigation, Vendor Advisory
• http://www.securityfocus.com/bid/92661Third Party Advisory
• https://support.lenovo.com/product_security/PS500067Mitigation, Vendor Advisory

Published

Sep 22, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-5239The gnuplot delegate functionality in ImageMagick before 6.9…
• CVE-2016-5240The DrawDashPolygon function in magick/render.c in GraphicsM…
• CVE-2016-5241magick/render.c in GraphicsMagick before 1.3.24 allows remot…
• CVE-2016-5242The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x thr…
• CVE-2016-5243The tipc_nl_compat_link_dump function in net/tipc/netlink_co…
• CVE-2016-5244The rds_inc_info_copy function in net/rds/recv.c in the Linu…
• CVE-2016-5248The StopProxy command in LSC.Services.SystemService in Lenov…
• CVE-2016-5249Lenovo Solution Center (LSC) before 3.3.003 allows local use…
• CVE-2016-5250Mozilla Firefox before 48.0, Firefox ESR < 45.4 and Thunderb…
• CVE-2016-5251Mozilla Firefox before 48.0 allows remote attackers to spoof…
• CVE-2016-5252Stack-based buffer underflow in the mozilla::gfx::BasePoint4…
• CVE-2016-5253The Updater in Mozilla Firefox before 48.0 on Windows allows…