medium6.7
CVE-2020-8353
Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabl…
Impact
Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkcentre M80t Firmware | before 2020-08-10 |
| Lenovo | Thinkcentre M80s Firmware | before 2020-08-10 |
| Lenovo | Thinkcentre M90t Firmware | before 2020-08-10 |
| Lenovo | Thinkcentre M90s Firmware | before 2020-08-10 |
| Lenovo | Thinkcentre M910z Firmware | before 2020-08-10 |
| Lenovo | Thinkcentre M920s Firmware | before 2020-08-10 |
| Lenovo | Thinkcentre M920t Firmware | before 2020-08-10 |
| Lenovo | Thinkcentre M920q Firmware | before 2020-08-10 |
| Lenovo | Thinkcentre M920z Firmware | before 2020-08-10 |
| Lenovo | Thinkstation P330t Firmware | before 2020-08-10 |
| Lenovo | Thinkstation P330s Firmware | before 2020-08-10 |
| Lenovo | Thinkstation P330 Tiny Firmware | before 2020-08-10 |