6.8

CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.

Data is provided by the National Vulnerability Database (NVD)
Lenovo ≫ Thinkpad E14 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad E14 Version-
Lenovo ≫ Thinkpad E15 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad E15 Version-
Lenovo ≫ Thinkpad R14 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad R14 Version-
Lenovo ≫ Thinkpad S3 Gen 2 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad S3 Gen 2 Version-
Lenovo ≫ Thinkpad E490s Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad E490s Version-
Lenovo ≫ Thinkpad S3 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad S3 Version-
Lenovo ≫ Thinkpad E490 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad E490 Version-
Lenovo ≫ Thinkpad E590 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad E590 Version-
Lenovo ≫ Thinkpad R490 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad R490 Version-
Lenovo ≫ Thinkpad R590 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad R590 Version-
Lenovo ≫ Thinkpad L13 1st Gen Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad L13 1st Gen Version-
Lenovo ≫ Thinkpad L1415 Gen 1 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad L1415 Gen 1 Version-
Lenovo ≫ Thinkpad L390 Yoga Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad L390 Yoga Version-
Lenovo ≫ Thinkpad S2 Yoga 4th Gen Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad S2 Yoga 4th Gen Version-
Lenovo ≫ Thinkpad L490 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad L490 Version-
Lenovo ≫ Thinkpad L590 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad L590 Version-
Lenovo ≫ Thinkpad P1 (20mx) Firmware Version < n2eet47w
   Lenovo ≫ Thinkpad P1 (20mx) Version-
Lenovo ≫ Thinkpad P1 (20qx) Firmware Version < n2oet44w
   Lenovo ≫ Thinkpad P1 (20qx) Version-
Lenovo ≫ Thinkpad P43s (20rx) Firmware Version < n2iet88w
   Lenovo ≫ Thinkpad P43s (20rx) Version-
Lenovo ≫ Thinkpad P52 (20mx) Firmware Version < n2cet51w-1.34
   Lenovo ≫ Thinkpad P52 (20mx) Version-
Lenovo ≫ Thinkpad P53 (20qx) Firmware Version < n2net37w
   Lenovo ≫ Thinkpad P53 (20qx) Version-
Lenovo ≫ Thinkpad P53s (20nx) Firmware Version < n2iet88w
   Lenovo ≫ Thinkpad P53s (20nx) Version-
Lenovo ≫ Thinkpad P72 (20mx) Firmware Version < n2cet51w
   Lenovo ≫ Thinkpad P72 (20mx) Version-
Lenovo ≫ Thinkpad P73 (20qx) Firmware Version < n2net37w
   Lenovo ≫ Thinkpad P73 (20qx) Version-
Lenovo ≫ Thinkpad T490 (20nx) Firmware Version < n2iet88w
   Lenovo ≫ Thinkpad T490 (20nx) Version-
Lenovo ≫ Thinkpad T490 (20qx) Firmware Version < n2iet88w
   Lenovo ≫ Thinkpad T490 (20qx) Version-
Lenovo ≫ Thinkpad T490 (20rx) Firmware Version < n2iet88w
   Lenovo ≫ Thinkpad T490 (20rx) Version-
Lenovo ≫ Thinkpad T490s (20nx) Firmware Version < n2jet87w
   Lenovo ≫ Thinkpad T490s (20nx) Version-
Lenovo ≫ Thinkpad T590 (20nx) Firmware Version < n2iet88w
   Lenovo ≫ Thinkpad T590 (20nx) Version-
Lenovo ≫ Thinkpad X1 Yoga (20qx) Firmware Version < n2het47w
   Lenovo ≫ Thinkpad X1 Yoga (20qx) Version-
Lenovo ≫ Thinkpad X1 Yoga (20sx) Firmware Version < n2het47w
   Lenovo ≫ Thinkpad X1 Yoga (20sx) Version-
Lenovo ≫ Thinkpad X390 (20qx) Firmware Version < n2jet87w
   Lenovo ≫ Thinkpad X390 (20qx) Version-
Lenovo ≫ Thinkpad X390 (20sx) Firmware Version < n2set18w
   Lenovo ≫ Thinkpad X390 (20sx) Version-
Lenovo ≫ Thinkpad X390 Yoga Firmware Version < n2let74w
   Lenovo ≫ Thinkpad X390 Yoga Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.132
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 0.9 5.9
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
psirt@lenovo.com 6.4 0.5 5.9
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H