Search/CVE-2020-8335
● CVE — Medium

CVE-2020-8335

VendorlenovoProductthinkpad a275 firmware, thinkpad a285 firmware, thinkpad a475 firmware, thinkpad a485 firmware, thinkpad x395 firmware, thinkpad t495 drift firmware, thinkpad t495s jazz firmware, thinkpad x1 carbon (20bx) firmwareDiscoveredSep 1, 2020UpdatedNov 21, 2024

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorized access.

View graph Watch Export
CVSS v3.1
6.1 MEDIUM
EPSS
0.31%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorPHYSICAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Connections
8 relationships
Timeline
disclosure → media coverage
Sep 1, 2020
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024