Vulnerabilities > CVE-2020-8335 - Unspecified vulnerability in Lenovo products

CVSS 6.8 - MEDIUM

Attack vector

PHYSICAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

low complexity

lenovo

NVD

Published: 2020-09-01

Updated: 2020-09-10

Summary

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorized access.

Vulnerable Configurations

Part	Description	Count
OS	Lenovo Lenovo Thinkpad A275 Firmware - Lenovo Thinkpad A275 Firmware 5.2.3535.26 Lenovo Thinkpad A275 Firmware 6.0.8924.1 Lenovo Thinkpad A275 Firmware 2020-07-10 Lenovo Thinkpad A285 Firmware - Lenovo Thinkpad A285 Firmware 2020-07-10 Lenovo Thinkpad A475 Firmware - Lenovo Thinkpad A475 Firmware 6.0.8924.1 Lenovo Thinkpad A475 Firmware 2020-07-10 Lenovo Thinkpad A485 Firmware - Lenovo Thinkpad A485 Firmware 2020-07-10 Lenovo Thinkpad T495 Drift Firmware * Lenovo Thinkpad T495S Jazz Firmware * Lenovo Thinkpad X1 Carbon (20Bx) Firmware * Lenovo Thinkpad X395 Firmware - Lenovo Thinkpad X395 Firmware 2020-07-10	16
Hardware	Lenovo Lenovo Thinkpad A275 - Lenovo Thinkpad A285 - Lenovo Thinkpad A475 - Lenovo Thinkpad A485 - Lenovo Thinkpad T495 Drift - Lenovo Thinkpad T495S Jazz - Lenovo Thinkpad X1 Carbon (20Bx) - Lenovo Thinkpad X395 -	8

References

https://support.lenovo.com/us/en/product_security/LEN-30042