medium6.4
CVE-2020-8320
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
Impact
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkpad 11e Yoga Gen 6 Firmware | before 2020-07-10 |
| Lenovo | Thinkpad 11e Firmware | before 2020-07-10 |
| Lenovo | Thinkpad Yoga 11e 3rd Gen Firmware | before 2020-07-10 |
| Lenovo | Thinkpad Yoga 11e 4th Gen Firmware | before 2020-07-10 |
| Lenovo | Thinkpad Yoga 11e 5th Gen Firmware | before 2020-07-10 |
| Lenovo | Thinkpad 13 2nd Gen Firmware | before 2020-07-10 |
| Lenovo | Thinkpad 13 Firmware | before 2020-07-10 |
| Lenovo | Thinkpad A275 Firmware | before 2020-07-10 |
| Lenovo | Thinkpad A285 Firmware | before 2020-07-10 |
| Lenovo | Thinkpad A475 Firmware | before 2020-07-10 |
| Lenovo | Thinkpad A485 Firmware | before 2020-07-10 |
| Lenovo | Thinkpad E14 Firmware | before 2020-07-10 |