6.7

CVE-2020-8353

Exploit
Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Thinkcentre M80t Firmware Version < 2020-08-10
   Lenovo ≫ Thinkcentre M80t Version -
Lenovo ≫ Thinkcentre M80s Firmware Version < 2020-08-10
   Lenovo ≫ Thinkcentre M80s Version -
Lenovo ≫ Thinkcentre M90t Firmware Version < 2020-08-10
   Lenovo ≫ Thinkcentre M90t Version -
Lenovo ≫ Thinkcentre M90s Firmware Version < 2020-08-10
   Lenovo ≫ Thinkcentre M90s Version -
Lenovo ≫ Thinkcentre M910z Firmware Version < 2020-08-10
   Lenovo ≫ Thinkcentre M910z Version -
Lenovo ≫ Thinkcentre M920s Firmware Version < 2020-08-10
   Lenovo ≫ Thinkcentre M920s Version -
Lenovo ≫ Thinkcentre M920t Firmware Version < 2020-08-10
   Lenovo ≫ Thinkcentre M920t Version -
Lenovo ≫ Thinkcentre M920q Firmware Version < 2020-08-10
   Lenovo ≫ Thinkcentre M920q Version -
Lenovo ≫ Thinkcentre M920z Firmware Version < 2020-08-10
   Lenovo ≫ Thinkcentre M920z Version -
Lenovo ≫ Thinkstation P330t Firmware Version < 2020-08-10
   Lenovo ≫ Thinkstation P330t Version -
Lenovo ≫ Thinkstation P330s Firmware Version < 2020-08-10
   Lenovo ≫ Thinkstation P330s Version -
Lenovo ≫ Thinkstation P330 Tiny Firmware Version < 2020-08-10
   Lenovo ≫ Thinkstation P330 Tiny Version -
Lenovo ≫ Thinkstation P340t Firmware Version < 2020-08-10
   Lenovo ≫ Thinkstation P340t Version -
Lenovo ≫ Thinkstation P340s Firmware Version < 2020-08-10
   Lenovo ≫ Thinkstation P340s Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.55% 0.432
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Lenovo 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://support.lenovo.com/us/en/product_security/LEN-44725
Vendor Advisory
Exploit