CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

Privilege escalation

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

Design/Logic Flaw

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access...

Format string

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...

Code injection

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution...

CVE-2020-8334

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access...

CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...

CVE-2020-8334

CVE-2020-8334 concerns Lenovo ThinkPad BIOS tamper-detection not triggering on ThinkPad T495s, X395, T495, A485, A285, A475, A275, potentially enabling unauthorized access. The core issue, per NVD/NVD-affiliated records, is a failure in the BIOS tamper-detection mechanism (root cause not elaborat...

CVE-2020-8336

CVE-2020-8336 affects Lenovo ThinkPad models where Intel CSME Anti-rollback ARB protections were implemented to prevent rollback of CSME firmware in flash. The Connected documents indicate this is a firmware/boot- firmware protection mechanism, not a software vulnerability in user-space, and the ...

CVE-2020-8323

The CVE-2020-8323 issue affects Lenovo systems (ThinkPad/ThinkStation/Lenovo Notebook) via a vulnerability in the SMI callback function used by the Legacy SD driver. The underlying flaw could allow arbitrary code execution on affected devices. Public details identify the vulnerable component as t...

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

CVE-2020-8320

CVE-2020-8320 concerns an internal shell embedded in BIOS images for some ThinkPad models, enabling privilege escalation. The vulnerability arises in the BIOS firmware chain and affects ThinkPad-related BIOS images; root cause is an internal shell included in the BIOS image. Public sources (NVD, ...

CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...

CVE-2020-8334

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access...

CVE-2020-8323

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution...

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

CVE-2020-8336: Undefined Security Weakness

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...

CVE-2020-8323: Undefined Security Weakness

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution...

CVE-2020-8320: Active Debug Code

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

CVE-2020-8334: Improper Check for Unusual or Exceptional Conditions

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access...