CVE-2016-5247

CVE-2016-5247 describes a critical vulnerability in the BIOS of numerous Lenovo ThinkCentre, ThinkServer, and ThinkStation devices, allowing local or physically proximate attackers to bypass Secure Boot. This bypass is achieved by exploiting an embedded AMI test key, compromising the integrity of the boot process. With a CVSS score of 7.8 (High), this vulnerability presents a significant risk, enabling attackers with local access to achieve high impact on confidentiality, integrity, and availability. The attack complexity is low, requiring only local user privileges or physical proximity. While there is no evidence of active exploitation (not in KEV), no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion, the vulnerability received media coverage, indicating its potential significance.