Vulnerability · Published Sep 1, 2020 · Assigned by lenovo
CVE-2020-8335
Medium 6.1
In plain English
A medium-severity security flaw in ThinkPad A285 BIOS from Lenovo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)0.3%top 75.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorized access.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Lenovo | ThinkPad A285 BIOS | unspecified – before r0xuj70w |
| Lenovo | ThinkPad A485 BIOS | unspecified – before r0wuj65w |
| Lenovo | ThinkPad T495 BIOS | unspecified – before r12uj55w |
| Lenovo | ThinkPad T495s/X395 BIOS | unspecified – before r13uj47w |
References
- https://support.lenovo.com/us/en/product_security/LEN-30042 x_refsource_MISC