CVEvulnerability
CVE-2020-8353
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-11-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-16
Description
Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.
Affected configurations
• lenovo thinkcentre m80t firmware (< 2020-08-10)
• lenovo thinkcentre m80s firmware (< 2020-08-10)
• lenovo thinkcentre m90t firmware (< 2020-08-10)
• lenovo thinkcentre m90s firmware (< 2020-08-10)
• lenovo thinkcentre m910z firmware (< 2020-08-10)
• lenovo thinkcentre m920s firmware (< 2020-08-10)
• lenovo thinkcentre m920t firmware (< 2020-08-10)
• lenovo thinkcentre m920q firmware (< 2020-08-10)
• lenovo thinkcentre m920z firmware (< 2020-08-10)
• lenovo thinkstation p330t firmware (< 2020-08-10)
• lenovo thinkstation p330s firmware (< 2020-08-10)
• lenovo thinkstation p330 tiny firmware (< 2020-08-10)
• lenovo thinkstation p340t firmware (< 2020-08-10)
• lenovo thinkstation p340s firmware (< 2020-08-10)
Related
Weakness · not in database (1)
References
- https://support.lenovo.com/us/en/product_security/LEN-44725 Exploit, Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-44725 Exploit, Vendor Advisory