6.8

CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Thinkpad E14 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad E14 Version -
Lenovo ≫ Thinkpad E15 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad E15 Version -
Lenovo ≫ Thinkpad R14 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad R14 Version -
Lenovo ≫ Thinkpad S3 Gen 2 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad S3 Gen 2 Version -
Lenovo ≫ Thinkpad E490s Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad E490s Version -
Lenovo ≫ Thinkpad S3 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad S3 Version -
Lenovo ≫ Thinkpad E490 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad E490 Version -
Lenovo ≫ Thinkpad E590 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad E590 Version -
Lenovo ≫ Thinkpad R490 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad R490 Version -
Lenovo ≫ Thinkpad R590 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad R590 Version -
Lenovo ≫ Thinkpad L13 1st Gen Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad L13 1st Gen Version -
Lenovo ≫ Thinkpad L1415 Gen 1 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad L1415 Gen 1 Version -
Lenovo ≫ Thinkpad L390 Yoga Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad L390 Yoga Version -
Lenovo ≫ Thinkpad S2 Yoga 4th Gen Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad S2 Yoga 4th Gen Version -
Lenovo ≫ Thinkpad L490 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad L490 Version -
Lenovo ≫ Thinkpad L590 Firmware Version < 2020-07-10
   Lenovo ≫ Thinkpad L590 Version -
Lenovo ≫ Thinkpad P1 (20mx) Firmware Version < n2eet47w
   Lenovo ≫ Thinkpad P1 (20mx) Version -
Lenovo ≫ Thinkpad P1 (20qx) Firmware Version < n2oet44w
   Lenovo ≫ Thinkpad P1 (20qx) Version -
Lenovo ≫ Thinkpad P43s (20rx) Firmware Version < n2iet88w
   Lenovo ≫ Thinkpad P43s (20rx) Version -
Lenovo ≫ Thinkpad P52 (20mx) Firmware Version < n2cet51w-1.34
   Lenovo ≫ Thinkpad P52 (20mx) Version -
Lenovo ≫ Thinkpad P53 (20qx) Firmware Version < n2net37w
   Lenovo ≫ Thinkpad P53 (20qx) Version -
Lenovo ≫ Thinkpad P53s (20nx) Firmware Version < n2iet88w
   Lenovo ≫ Thinkpad P53s (20nx) Version -
Lenovo ≫ Thinkpad P72 (20mx) Firmware Version < n2cet51w
   Lenovo ≫ Thinkpad P72 (20mx) Version -
Lenovo ≫ Thinkpad P73 (20qx) Firmware Version < n2net37w
   Lenovo ≫ Thinkpad P73 (20qx) Version -
Lenovo ≫ Thinkpad T490 (20nx) Firmware Version < n2iet88w
   Lenovo ≫ Thinkpad T490 (20nx) Version -
Lenovo ≫ Thinkpad T490 (20qx) Firmware Version < n2iet88w
   Lenovo ≫ Thinkpad T490 (20qx) Version -
Lenovo ≫ Thinkpad T490 (20rx) Firmware Version < n2iet88w
   Lenovo ≫ Thinkpad T490 (20rx) Version -
Lenovo ≫ Thinkpad T490s (20nx) Firmware Version < n2jet87w
   Lenovo ≫ Thinkpad T490s (20nx) Version -
Lenovo ≫ Thinkpad T590 (20nx) Firmware Version < n2iet88w
   Lenovo ≫ Thinkpad T590 (20nx) Version -
Lenovo ≫ Thinkpad X1 Yoga (20qx) Firmware Version < n2het47w
   Lenovo ≫ Thinkpad X1 Yoga (20qx) Version -
Lenovo ≫ Thinkpad X1 Yoga (20sx) Firmware Version < n2het47w
   Lenovo ≫ Thinkpad X1 Yoga (20sx) Version -
Lenovo ≫ Thinkpad X390 (20qx) Firmware Version < n2jet87w
   Lenovo ≫ Thinkpad X390 (20qx) Version -
Lenovo ≫ Thinkpad X390 (20sx) Firmware Version < n2set18w
   Lenovo ≫ Thinkpad X390 (20sx) Version -
Lenovo ≫ Thinkpad X390 Yoga Firmware Version < n2let74w
   Lenovo ≫ Thinkpad X390 Yoga Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.29% 0.199
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 0.9 5.9
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Lenovo 6.4 0.5 5.9
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://support.lenovo.com/us/en/product_security/LEN-30042
Vendor Advisory