CVE-2020-8335

🗓️ 01 Sep 2020 21:30:16Reported by lenovoType

BIOS tamper detection bypass in Lenovo ThinkPa

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2020-8335	1 Sep 202021:30	–	cvelist
EUVD	EUVD-2020-29202	7 Oct 202500:30	–	euvd
Lenovo	Multi-vendor BIOS Security Vulnerabilities (June 2020) - Lenovo Support US	4 Jun 202020:26	–	lenovo
NVD	CVE-2020-8335	1 Sep 202022:15	–	nvd
OSV	CVE-2020-8335	1 Sep 202022:15	–	osv
Prion	Design/Logic Flaw	1 Sep 202022:15	–	prion

NVD

Node

lenovo thinkpad_a275_firmwareRange<2020-08-30

AND

lenovo thinkpad_a275Match-

Node

lenovo thinkpad_a285_firmwareRange<2020-08-30

AND

lenovo thinkpad_a285Match-

Node

lenovo thinkpad_a475_firmwareRange<2020-08-30

AND

lenovo thinkpad_a475Match-

Node

lenovo thinkpad_a485_firmwareRange<2020-08-30

AND

lenovo thinkpad_a485Match-

Node

lenovo thinkpad_t495_drift_firmwareRange<2020-08-30

AND

lenovo thinkpad_t495_driftMatch-

Node

lenovo thinkpad_t495s_jazz_firmwareRange<2020-08-30

AND

lenovo thinkpad_t495s_jazzMatch-

Node

lenovo thinkpad_x1_carbon_(20bx)_firmwareRange<n14et54w

AND

lenovo thinkpad_x1_carbon_(20bx)Match-

Node

lenovo thinkpad_x395_firmwareRange<2020-08-30

AND

lenovo thinkpad_x395Match-

[
  {
    "product": "ThinkPad A285 BIOS",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "r0xuj70w",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ThinkPad A485 BIOS",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "r0wuj65w",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ThinkPad T495 BIOS",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "r12uj55w",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ThinkPad T495s/X395 BIOS",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "r13uj47w",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
support	www.support.lenovo.com/us/en/product_security/LEN-30042

21 Nov 2024 05:38Current

6.7Medium risk

Vulners AI Score6.7

CVSS 24.6

CVSS 3.16.1 - 6.8

EPSS0.00072