CVE-2020-8335

MEDIUM

6.1

Description

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorized access.

Details CVE

Score CVSS v3.16.1

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Vecteur d'attaquePHYSICAL

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie9/1/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

lenovo:thinkpad_a275lenovo:thinkpad_a275_firmwarelenovo:thinkpad_a285lenovo:thinkpad_a285_firmwarelenovo:thinkpad_a475lenovo:thinkpad_a475_firmwarelenovo:thinkpad_a485lenovo:thinkpad_a485_firmwarelenovo:thinkpad_t495_driftlenovo:thinkpad_t495_drift_firmwarelenovo:thinkpad_t495s_jazzlenovo:thinkpad_t495s_jazz_firmwarelenovo:thinkpad_x1_carbon_\(20bx\)lenovo:thinkpad_x1_carbon_\(20bx\)_firmwarelenovo:thinkpad_x395lenovo:thinkpad_x395_firmware

References

https://support.lenovo.com/us/en/product_security/LEN-30042(psirt@lenovo.com)

https://support.lenovo.com/us/en/product_security/LEN-30042(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.