CVE-2020-8335

MEDIUM

6.1

Beschreibung

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorized access.

CVE Details

CVSS v3.1 Bewertung6.1

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

AngriffsvektorPHYSICAL

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht9/1/2020

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

lenovo:thinkpad_a275lenovo:thinkpad_a275_firmwarelenovo:thinkpad_a285lenovo:thinkpad_a285_firmwarelenovo:thinkpad_a475lenovo:thinkpad_a475_firmwarelenovo:thinkpad_a485lenovo:thinkpad_a485_firmwarelenovo:thinkpad_t495_driftlenovo:thinkpad_t495_drift_firmwarelenovo:thinkpad_t495s_jazzlenovo:thinkpad_t495s_jazz_firmwarelenovo:thinkpad_x1_carbon_\(20bx\)lenovo:thinkpad_x1_carbon_\(20bx\)_firmwarelenovo:thinkpad_x395lenovo:thinkpad_x395_firmware

Referenzen

https://support.lenovo.com/us/en/product_security/LEN-30042(psirt@lenovo.com)

https://support.lenovo.com/us/en/product_security/LEN-30042(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.