Search/CVE-2020-8336
● CVE — Medium

CVE-2020-8336

VendorlenovoProductthinkpad e14 firmware, thinkpad e15 firmware, thinkpad r14 firmware, thinkpad s3 gen 2 firmware, thinkpad e490 firmware, thinkpad e490s firmware, thinkpad e590 firmware, thinkpad l13 1st gen firmware, thinkpad l1415 gen 1 firmware, thinkpad l390 yoga firmware, thinkpad l490 firmware, thinkpad l590 firmware, thinkpad p1 (20mx) firmware, thinkpad p1 (20qx) firmware, thinkpad p43s (20rx) firmware, thinkpad p52 (20mx) firmware, thinkpad p53 (20qx) firmware, thinkpad p53s (20nx) firmware, thinkpad p72 (20mx) firmware, thinkpad p73 (20qx) firmware, thinkpad r490 firmware, thinkpad r590 firmware, thinkpad s2 yoga 4th gen firmware, thinkpad s3 firmware, thinkpad t490 (20nx) firmwareDiscoveredJun 9, 2020UpdatedNov 21, 2024

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.

CVSS v3.1
6.4 MEDIUM
EPSS
0.30%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage