Search/CVE-2020-8320
● CVE — Medium

CVE-2020-8320

VendorlenovoProductthinkpad 11e firmware, thinkpad 11e yoga gen 6 firmware, thinkpad 13 2nd gen firmware, thinkpad 13 firmware, thinkpad a275 firmware, thinkpad a285 firmware, thinkpad a475 firmware, thinkpad a485 firmware, thinkpad e14 firmware, thinkpad e15 firmware, thinkpad e455 firmware, thinkpad e460 firmware, thinkpad e465 firmware, thinkpad e470 firmware, thinkpad e475 firmware, thinkpad e555 firmware, thinkpad e560 firmware, thinkpad e565 firmware, thinkpad e570 firmware, thinkpad e575 firmware, thinkpad r14 firmware, thinkpad s3 gen 2 firmware, thinkpad yoga 11e 3rd gen firmware, thinkpad yoga 11e 4th gen firmware, thinkpad yoga 11e 5th gen firmwareDiscoveredJun 9, 2020UpdatedNov 21, 2024

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

View graph Watch Export
CVSS v3.1
6.4 MEDIUM
EPSS
0.28%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 6, 2026
▲ 0.01pp
0.27% → 0.28% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorPHYSICAL
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
26 relationships
Timeline
disclosure → media coverage
Jun 9, 2020
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024