Vulnerabilities > CVE-2020-8335 - Unspecified vulnerability in Lenovo products

CVSS 4.6 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

local

low complexity

lenovo

NVD

Published: 2020-09-01

Updated: 2020-09-10

Summary

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorized access.

Vulnerable Configurations

Part	Description	Count
OS	Lenovo Lenovo Thinkpad A275 Firmware 2020-07-10 Lenovo Thinkpad A285 Firmware - Lenovo Thinkpad A285 Firmware 2020-07-10 Lenovo Thinkpad A475 Firmware 2020-07-10 Lenovo Thinkpad A485 Firmware - Lenovo Thinkpad A485 Firmware 2020-07-10 Lenovo Thinkpad T495 Drift Firmware * Lenovo Thinkpad T495S Jazz Firmware * Lenovo Thinkpad X1 Carbon (20Bx) Firmware * Lenovo Thinkpad X395 Firmware - Lenovo Thinkpad X395 Firmware 2020-07-10	11
Hardware	Lenovo Lenovo Thinkpad A275 - Lenovo Thinkpad A285 - Lenovo Thinkpad A475 - Lenovo Thinkpad A485 - Lenovo Thinkpad T495 Drift - Lenovo Thinkpad T495S Jazz - Lenovo Thinkpad X1 Carbon (20Bx) - Lenovo Thinkpad X395 -	8

References

https://support.lenovo.com/us/en/product_security/LEN-30042