Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

Published

2020-06-09T20:15:22.117

Last Modified

2024-11-21T05:38:42.023

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.4 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

6.4

Weaknesses
  • Type: Secondary
    CWE-489
  • Type: Primary
    CWE-269
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lenovo thinkpad_11e_yoga_gen_6_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_11e_yoga_gen_6 - No
Operating System lenovo thinkpad_11e_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_11e - No
Operating System lenovo thinkpad_yoga_11e_3rd_gen_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_yoga_11e_3rd_gen - No
Operating System lenovo thinkpad_yoga_11e_4th_gen_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_yoga_11e_4th_gen - No
Operating System lenovo thinkpad_yoga_11e_5th_gen_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_yoga_11e_5th_gen - No
Operating System lenovo thinkpad_13_2nd_gen_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_13_2nd_gen - No
Operating System lenovo thinkpad_13_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_13 - No
Operating System lenovo thinkpad_a275_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_a275 - No
Operating System lenovo thinkpad_a285_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_a285 - No
Operating System lenovo thinkpad_a475_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_a475 - No
Operating System lenovo thinkpad_a485_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_a485 - No
Operating System lenovo thinkpad_e14_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e14 - No
Operating System lenovo thinkpad_e15_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e15 - No
Operating System lenovo thinkpad_r14_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_r14 - No
Operating System lenovo thinkpad_s3_gen_2_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_s3_gen_2 - No
Operating System lenovo thinkpad_e455_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e455 - No
Operating System lenovo thinkpad_e555_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e555 - No
Operating System lenovo thinkpad_e460_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e460 - No
Operating System lenovo thinkpad_e560_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e560 - No
Operating System lenovo thinkpad_e465_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e465 - No
Operating System lenovo thinkpad_e565_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e565 - No
Operating System lenovo thinkpad_e470_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e470 - No
Operating System lenovo thinkpad_e570_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e570 - No
Operating System lenovo thinkpad_e475_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e475 - No
Operating System lenovo thinkpad_e575_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e575 - No
Operating System lenovo thinkpad_e480_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e480 - No
Operating System lenovo thinkpad_e580_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e580 - No
Operating System lenovo thinkpad_e485_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e485 - No
Operating System lenovo thinkpad_e585_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e585 - No
Operating System lenovo thinkpad_e490s_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e490s - No
Operating System lenovo thinkpad_s3_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_s3 - No
Operating System lenovo thinkpad_e490_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e490 - No
Operating System lenovo thinkpad_e590_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e590 - No
Operating System lenovo thinkpad_r490_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_r490 - No
Operating System lenovo thinkpad_r590_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_r590 - No
Operating System lenovo thinkpad_l13_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_l13 - No
Operating System lenovo thinkpad_l1415_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_l1415 - No
Operating System lenovo thinkpad_l380_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_l380 - No
Operating System lenovo thinkpad_s3_3rd_gen_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_s3_3rd_gen - No
Operating System lenovo thinkpad_l380_yoga_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_l380_yoga - No
Operating System lenovo thinkpad_s2_yoga_3rd_gen_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_s2_yoga_3rd_gen - No
Operating System lenovo thinkpad_l390_yoga_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_l390_yoga - No
Operating System lenovo thinkpad_s2_yoga_4th_gen_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_s2_yoga_4th_gen - No
Operating System lenovo thinkpad_l460_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_l460 - No
Operating System lenovo thinkpad_l470_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_l470 - No
Operating System lenovo thinkpad_l480_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_l480 - No
Operating System lenovo thinkpad_l580_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_l580 - No
Operating System lenovo thinkpad_l490_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_l490 - No
Operating System lenovo thinkpad_l590_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_l590 - No
Operating System lenovo thinkpad_l560_firmware < 2020-07-03 Yes
Hardware lenovo thinkpad_l560 - No
Operating System lenovo thinkpad_l570_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_l570 - No
Operating System lenovo thinkpad_p1_firmware < n2eet46w Yes
Hardware lenovo thinkpad_p1 - No
Operating System lenovo thinkpad_p43s_firmware < n2iet87w Yes
Hardware lenovo thinkpad_p43s - No
Operating System lenovo thinkpad_p50_firmware < 2020-07-17 Yes
Hardware lenovo thinkpad_p50 - No
Operating System lenovo thinkpad_p50s_firmware < 2020-07-24 Yes
Hardware lenovo thinkpad_p50s - No
Operating System lenovo thinkpad_p51_firmware < 2020-07-03 Yes
Hardware lenovo thinkpad_p51 - No
Operating System lenovo thinkpad_p51s_firmware < 2020-07-03 Yes
Hardware lenovo thinkpad_p51s - No
Operating System lenovo thinkpad_p52_firmware < n2cet51w Yes
Hardware lenovo thinkpad_p52 - No
Operating System lenovo thinkpad_p52s_firmware < 2020-07-03 Yes
Hardware lenovo thinkpad_p52s - No
Operating System lenovo thinkpad_p53_firmware < n2net37w Yes
Hardware lenovo thinkpad_p53 - No
Operating System lenovo thinkpad_p53s_firmware < n2iet87w Yes
Hardware lenovo thinkpad_p53s - No
Operating System lenovo thinkpad_p70_firmware < 2020-07-17 Yes
Hardware lenovo thinkpad_p70 - No
Operating System lenovo thinkpad_p71_firmware ≤ 2020-07-17 Yes
Hardware lenovo thinkpad_p71 - No
Operating System lenovo thinkpad_p72_firmware < n2cet51w Yes
Hardware lenovo thinkpad_p72 - No
Operating System lenovo thinkpad_p73_firmware < n2net37w Yes
Hardware lenovo thinkpad_p73 - No
Operating System lenovo thinkpad_s5_2nd_gen_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_s5_2nd_gen - No
Operating System lenovo thinkpad_s5_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_s5 - No
Operating System lenovo thinkpad_e560p_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_e560p - No
Operating System lenovo thinkpad_t25_firmware < n1qet87w Yes
Hardware lenovo thinkpad_t25 - No
Operating System lenovo thinkpad_t460_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_t460 - No
Operating System lenovo thinkpad_t460p_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_t460p - No
Operating System lenovo thinkpad_t460s_firmware < 2020-06-19 Yes
Hardware lenovo thinkpad_t460s - No
Operating System lenovo thinkpad_t470_firmware < n1qet87w Yes
Hardware lenovo thinkpad_t470 - No
Operating System lenovo thinkpad_t470p_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_t470p - No
Operating System lenovo thinkpad_t470s_firmware < n1wet58w Yes
Hardware lenovo thinkpad_t470s - No
Operating System lenovo thinkpad_t480_firmware < n24et56w Yes
Hardware lenovo thinkpad_t480 - No
Operating System lenovo thinkpad_t480s_firmware < n22et62w Yes
Hardware lenovo thinkpad_t480s - No
Operating System lenovo thinkpad_t490_firmware < n2iet87w Yes
Hardware lenovo thinkpad_t490 - No
Operating System lenovo thinkpad_t490s_firmware < n2jet87w Yes
Hardware lenovo thinkpad_t490s - No
Operating System lenovo thinkpad_t560_firmware < 2020-07-24 Yes
Hardware lenovo thinkpad_t560 - No
Operating System lenovo thinkpad_t570_firmware < 2020-07-03 Yes
Hardware lenovo thinkpad_t570 - No
Operating System lenovo thinkpad_t580_firmware < 2020-07-03 Yes
Hardware lenovo thinkpad_t580 - No
Operating System lenovo thinkpad_t590_firmware < n2iet87w Yes
Hardware lenovo thinkpad_t590 - No
Operating System lenovo thinkpad_x1_carbon_firmware < n1met60w Yes
Hardware lenovo thinkpad_x1_carbon - No
Operating System lenovo thinkpad_x1_yoga_firmware < 2020-07-17 Yes
Hardware lenovo thinkpad_x1_yoga - No
Operating System lenovo thinkpad_x1_extreme_firmware < n2oet43w Yes
Hardware lenovo thinkpad_x1_extreme - No
Operating System lenovo thinkpad_x1_tablet_firmware < 2020-07-24 Yes
Hardware lenovo thinkpad_x1_tablet - No
Operating System lenovo thinkpad_x1_yoga_firmware < 2020-07-17 Yes
Hardware lenovo thinkpad_x1_yoga - No
Operating System lenovo thinkpad_x260_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_x260 - No
Operating System lenovo thinkpad_x270_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_x270 - No
Operating System lenovo thinkpad_x280_firmware < n20et52w Yes
Hardware lenovo thinkpad_x280 - No
Operating System lenovo thinkpad_x380_yoga_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_x380_yoga - No
Operating System lenovo thinkpad_x390_firmware < 2020-07-07 Yes
Hardware lenovo thinkpad_x390 - No
Operating System lenovo thinkpad_x390_yoga_firmware < 2020-06-24 Yes
Hardware lenovo thinkpad_x390_yoga - No
Operating System lenovo thinkpad_x395_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_x395 - No
Operating System lenovo thinkpad_yoga_260_firmware < 2020-07-07 Yes
Hardware lenovo thinkpad_yoga_260 - No
Operating System lenovo thinkpad_s1_firmware < 2020-07-07 Yes
Hardware lenovo thinkpad_s1 - No
Operating System lenovo thinkpad_yoga_370_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_yoga_370 - No
Operating System lenovo thinkpad_s1_3rd_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_s1_3rd - No
Operating System lenovo thinkpad_t495_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_t495 - No
Operating System lenovo thinkpad_t495s_firmware < 2020-07-10 Yes
Hardware lenovo thinkpad_t495s - No
References