Vulnerability · Published Nov 11, 2020 · Assigned by lenovo
CVE-2020-8353
Medium 6.7
In plain English
A medium-severity security flaw in Desktop and Workstation systems from Lenovo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 46% of all known vulnerabilities).
Severity (CVSS 3.1)6.7Medium
Exploit odds (30 days)0.6%top 53.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Lenovo | Desktop and Workstation systems | unspecified – before various |
Weakness: CWE-16 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References
- https://support.lenovo.com/us/en/product_security/LEN-44725 x_refsource_MISC