medium6.1
CVE-2020-8335
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS vers…
Impact
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS versions up to r0wuj65w; T495 BIOS versions up to r12uj55w; T495s/X395, BIOS versions up to r13uj47w, while the emergency-reset button is pressed which may allow for unauthorized access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkpad A275 Firmware | before 2020-08-30 |
| Lenovo | Thinkpad A285 Firmware | before 2020-08-30 |
| Lenovo | Thinkpad A475 Firmware | before 2020-08-30 |
| Lenovo | Thinkpad A485 Firmware | before 2020-08-30 |
| Lenovo | Thinkpad T495 Drift Firmware | before 2020-08-30 |
| Lenovo | Thinkpad T495s Jazz Firmware | before 2020-08-30 |
| Lenovo | Thinkpad X1 Carbon \(20bx\) Firmware | before n14et54w |
| Lenovo | Thinkpad X395 Firmware | before 2020-08-30 |