// For flags

CVE-2020-8353

 

Severity Score

6.7
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.

Antes del 10 de agosto de 2020, algunos sistemas Lenovo Desktop y Workstation se enviaron con la funcionalidad Embedded Host Based Configuration (EHBC) de Intel AMT habilitada. Esto podrĂ­a permitir a un usuario administrativo acceso local para configurar Intel AMT

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2020-01-28 CVE Reserved
  • 2020-11-11 CVE Published
  • 2023-03-08 EPSS Updated
  • 2024-08-04 CVE Updated
  • 2024-08-04 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-16: Configuration
CAPEC
References (1)
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Lenovo
Search vendor "Lenovo"
Thinkcentre M80t Firmware
Search vendor "Lenovo" for product "Thinkcentre M80t Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkcentre M80t Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkcentre M80t
Search vendor "Lenovo" for product "Thinkcentre M80t"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkcentre M80s Firmware
Search vendor "Lenovo" for product "Thinkcentre M80s Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkcentre M80s Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkcentre M80s
Search vendor "Lenovo" for product "Thinkcentre M80s"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkcentre M90t Firmware
Search vendor "Lenovo" for product "Thinkcentre M90t Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkcentre M90t Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkcentre M90t
Search vendor "Lenovo" for product "Thinkcentre M90t"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkcentre M90s Firmware
Search vendor "Lenovo" for product "Thinkcentre M90s Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkcentre M90s Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkcentre M90s
Search vendor "Lenovo" for product "Thinkcentre M90s"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkcentre M910z Firmware
Search vendor "Lenovo" for product "Thinkcentre M910z Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkcentre M910z Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkcentre M910z
Search vendor "Lenovo" for product "Thinkcentre M910z"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkcentre M920s Firmware
Search vendor "Lenovo" for product "Thinkcentre M920s Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkcentre M920s Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkcentre M920s
Search vendor "Lenovo" for product "Thinkcentre M920s"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkcentre M920t Firmware
Search vendor "Lenovo" for product "Thinkcentre M920t Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkcentre M920t Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkcentre M920t
Search vendor "Lenovo" for product "Thinkcentre M920t"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkcentre M920q Firmware
Search vendor "Lenovo" for product "Thinkcentre M920q Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkcentre M920q Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkcentre M920q
Search vendor "Lenovo" for product "Thinkcentre M920q"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkcentre M920z Firmware
Search vendor "Lenovo" for product "Thinkcentre M920z Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkcentre M920z Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkcentre M920z
Search vendor "Lenovo" for product "Thinkcentre M920z"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkstation P330t Firmware
Search vendor "Lenovo" for product "Thinkstation P330t Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkstation P330t Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkstation P330t
Search vendor "Lenovo" for product "Thinkstation P330t"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkstation P330s Firmware
Search vendor "Lenovo" for product "Thinkstation P330s Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkstation P330s Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkstation P330s
Search vendor "Lenovo" for product "Thinkstation P330s"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkstation P330 Tiny Firmware
Search vendor "Lenovo" for product "Thinkstation P330 Tiny Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkstation P330 Tiny Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkstation P330 Tiny
Search vendor "Lenovo" for product "Thinkstation P330 Tiny"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkstation P340t Firmware
Search vendor "Lenovo" for product "Thinkstation P340t Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkstation P340t Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkstation P340t
Search vendor "Lenovo" for product "Thinkstation P340t"
--
Safe
Lenovo
Search vendor "Lenovo"
Thinkstation P340s Firmware
Search vendor "Lenovo" for product "Thinkstation P340s Firmware"
< 2020-08-10
Search vendor "Lenovo" for product "Thinkstation P340s Firmware" and version " < 2020-08-10"
-
Affected
in Lenovo
Search vendor "Lenovo"
Thinkstation P340s
Search vendor "Lenovo" for product "Thinkstation P340s"
--
Safe