CVEvulnerability

CVE-2020-8341

2.4 LOW Published 2020-09-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.4 LOW — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N

Description

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPad systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected.

Affected configurations

• lenovo thinkpad t490 \(20nx\) firmware (< n2iet90w) • lenovo thinkpad t490 \(20qx\) firmware (< n2iet90w) • lenovo thinkpad t490 \(20rx\) firmware (< n2ret16w) • lenovo thinkpad t490s \(20nx\) firmware (< n2jet89w) • lenovo thinkpad t495 drift firmware (< 2020-08-30) • lenovo thinkpad t590 \(20nx\) firmware (< n2iet90w) • lenovo thinkpad x1 carbon \(20qx\) firmware (< n2het54w) • lenovo thinkpad x1 yoga \(20qx\) firmware (< n2het54w) • lenovo thinkpad x390 \(20qx\) firmware (< n2jet89w) • lenovo thinkpad x390 \(20sx\) firmware (< n2set18w)

References